0CI01(01712720): Information Security Engineering(Fall 2019)

Time: Monday 14:00-17:00

Location: 3203 , Teaching Builing, DaXing

Class web site: https://huipingsun.github.io/ise2019

Instructor: Huiping Sun (sunhp(at)ss.pku.edu.cn)

TA: Jiahao Zhang

Date

Topics

Readings

September 09

01. Course Introduction [Slides]

• Ross Anderson. Security Engineering (Third Edition). Chapter 1: What Is Security Engineering?
• Ross Anderson. Why Information Security is Hard - An Emconmics Perspective. In Proc. ACSAC'2001. [Homework]

September 16

02. Usable Security [Slides]

• Ross Anderson. Security Engineering (Third Edition). Chapter 2: Who is the Opponent?
• Ross Anderson. Security Engineering (Third Edition). Chapter 3: Psychology and Usability.
• Lorrie Faith Cranor and Simson Garfinkel. Security and Usability: Designing Secure Systems that People Can Use. Chapter 2: Usable Security: Why Do We Need It? How Do We Get It?.
• Anne Adams and Martina Angela Sasses. Users Are Not The Enemy. Communications of ACM. 1999.
• Alma Whitten and J.D.Tygar. Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0. In Proc. USENIX Security'1999.
• Bruce Schneier. The Psychology of Security. 2008.
• Wei Bai et al. Balancing Security and Usability in Encrypted Email. IEEE Internet Computing Magazine 2017.[Homework]

September 23

03. Human Computation [Slides]

• Edith law and Luis von Ahn. Human Computation. Synthesis Lectures on Artificial Intelligence and Machine Learning 2011.
• Alexander J. Quinn and Benjamin B. Bederson Human Computation: A Survey and Taxonomy of a Growing Field. In Proc. CHI'2011.

October 07

04. Graphical Password [Slides]

• Robert Biddle et al. Graphical Passwords: Learning from the First Twelve Years. ACM Computing Surveys. 2012.
• Huiping Sun et al. PassApp: My App is My Password! In Proc. MobileHCI'2015.
• Sebastian Uellenbeck et al. Quantifying the Security of Graphical Passwords- The Case of Android Unlock Patterns.In Proc. ACM CCS'2013.[Homework]

October 14

05. Text Password [Slides]

• Ross Anderson. Security Engineering (Second Edition). Chapter 2.4: Passwords
• Cormac Herley and Paul van Oorschot. A Research Agenda Acknowledging the Persistence of Passwords. IEEE Security & Privacy Magazine. 2012.
• Joseph Bonneau et al. Passwords and The Evolution of Imperfect Authentication. Communications of ACM. 2015.
• Ari Juels and Ronald L. Rivest. Honeywords-Making Password-Cracking Detectable. In Proc. CCS'2013.

October 21

06. Biometrics [Slides]

• Ross Anderson. Security Engineering (Second Edition). Chapter 15: Biometrics
• John D.Woodward Jr. et al. Biometrics: Identity Assurance in the Information Age. McGraw-Hill/Osborne. 2003.
• Zahid Akhtar et al. Biometric Liveness Detection: Challenges and Research Opportunities. IEEE Security & Privacy Magazine. 2015.

October 28

07. Blockchain Overview [Slides]

• Manav Gupta. IBM Blockchain Dummies . John Wiley & Sons. 2017
• Tomaso Aste et al. Blockchain Technologies: The Foreseeable Impact on Society and Industry. IEEE Computer Magazine. 2017.

November 04

08. Blockchain Technology I [Slides]

• Textbook. Charpter 1: Introduction to Cryptography & Cryptocurrencies.
• Textbook. Charpter 2: How Bitcoin Achieves Decentralization.
• Textbook. Charpter 3: Mechanics of Bitcoin.
• Textbook. Charpter 5: Bitcoin Mining.
• Bitcoin Developer Guide . 2018. [Homework]

November 11

09. Blockchain Technology II [Slides]

• Textbook. Charpter 1: Introduction to Cryptography & Cryptocurrencies.
• Textbook. Charpter 2: How Bitcoin Achieves Decentralization.
• Textbook. Charpter 3: Mechanics of Bitcoin.
• Textbook. Charpter 5: Bitcoin Mining.
• Textbook. Charpter 6: Bitcoin and Anonymity.
• Textbook. Charpter 8: Alternative Minging Puzzles.

November 18

10. Blockchain Application [Slides]

• Textbook. Charpter 7: Community, Politics, and Regulation.
• Textbook. Charpter 9: Bitcoin as a Platform.
• Textbook. Charpter 10: Altcoins and the Cryptocurency Ecosystem.
• Textbook. Charpter 11: Decentralized Institutions: The Future of Bitcoin.

November 25

11. Mastering Bitcoin [Slides]

• Andreas M.Antonopoulos. Mastering Bitcoin. O'Reilly. 2017.

December 02

12. Fingerprint [Slides]

• Refael Veras et al. Fingerprinting Web Users through Font Metrics. In Proc. FC'2015.
• Saranga Komanduri et al. Device Fingerprinting for Augmenting Web Authentication: Classification and Analysis of Methods. In Proc. ACSAC'2016.
• Jeremiah Blocki et al. Beauty and the Beast: Diverting Modern Web Browsers to Build Unique Browser Fingerprints. In Proc. IEEE S&P'2016.
• Ross Anderson. Security Engineering (Second Edition). Chapter 11: Physical Protection
• Ross Anderson. Security Engineering (Second Edition). Chapter 14: Security Printing and Seals
• Ross Anderson. Security Engineering (Second Edition). Chapter 16: Physical Tamper Resistance
• Ross Anderson. Security Engineering (Second Edition). Chapter 17: Emission Security

December 09

13. Credit Scoring I [Slides]

• Lyn Thomas etc. Credit Scoring and Its Applications (Second Edition). Chapter 1: The History and Philosophy of Credit Scoring. SIAM-Society for Industrial & Applied Mathematics. 2017.
• Paul Resnick et al. Reputation System. In Communications of the ACM. 2000.
• Lik Mui et al. A Computational Model of Trust and Reputation. In Proc. HICSS'2002.
• Audun Josang et al. A Survey of Trust and Reputation Systems for Online Service Provision. In Decision Support Systems. 2007.
• Steven Tadelis. The Economics of Reputation and Feedback Systems in E-Commerce Marketplaces. In IEEE Internet Computing Magazine. 2016. [Homework]

December 16

14. Credit Scoring II [Slides]

TBD

December 23

15. Credit Scoring III [Slides]

TBD

December 30

16. Project Report [Slides]

TBD