0CI01(01712720): Information Security Engineering(Fall 2020)

Time: Wednesday 8:30-11:30

Location: 3203 , Teaching Builing, DaXing

Class web site: https://huipingsun.github.io/ise2020

Instructor: Huiping Sun (sunhp(at)ss.pku.edu.cn)

TA: Fanfei Gao (gaofanfei(at)pku.edu.cn)

Course Description

Although most of traditional cryptography and information security techology are relatively well understood, the knowledge and practice of how to apply user's economical, psychological and social factor into information security is insufficient.

The course covers the basics of economics, psychology and socialology of information security, and introduces password, biometrics, CAPTCHA, liveness detection, trust, reputation, privacy and others technology, in the meantime, analyses how to implement information security engineering in some critical information systems and applications such as smartphone, anti-fraud, credit scoring, bitcoin and blockchain.

Course Textbook

Ross Anderson. Security Engineering: A Guide to Building Dependable Distributed Systems. Third Edition. Wiely. 2020.
Avind Narayanan etc. Bitcoin and Cryptocurrency Technologies: A Comprehensive Introduction. Princeton University Press. 2016.
Naeem Siddiqi. Intelligent Credit Scoring: Building and Implementing Better Credit Risk Scorecards. Wiely. 2017.

Course Schedule

Date	Topics	Readings
September 23	01. Course Introduction [Slides]	Ross Anderson. Security Engineering (Third Edition). Chapter 1: What Is Security Engineering? Ross Anderson. Why Information Security is Hard - An Emconmics Perspective. In Proc. ACSAC'2001. [Homework]
September 30	02. Usable Security [Slides]	Ross Anderson. Security Engineering (Third Edition). Chapter 2: Who is the Opponent? Ross Anderson. Security Engineering (Third Edition). Chapter 3: Psychology and Usability. Lorrie Faith Cranor and Simson Garfinkel. Security and Usability: Designing Secure Systems that People Can Use. Chapter 2: Usable Security: Why Do We Need It? How Do We Get It?. Anne Adams and Martina Angela Sasses. Users Are Not The Enemy. Communications of ACM. 1999. Alma Whitten and J.D.Tygar. Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0. In Proc. USENIX Security'1999. Bruce Schneier. The Psychology of Security. 2008. Huiping Sun et al. PassApp: My App is My Password! In Proc. MobileHCI'2015. Joseph Bonneau et al. Passwords and The Evolution of Imperfect Authentication. Communications of ACM. 2015.[Homework]
October 21	03. Human Computation [Slides]	Edith law and Luis von Ahn. Human Computation. Synthesis Lectures on Artificial Intelligence and Machine Learning 2011. Alexander J. Quinn and Benjamin B. Bederson Human Computation: A Survey and Taxonomy of a Growing Field. In Proc. CHI'2011. Paper Reading on Security & Privacy. [Homework]

October 28	04. Password [Slides]	Ross Anderson. Security Engineering (Third Edition). Chapter 3.4: Passwords Cormac Herley and Paul van Oorschot. A Research Agenda Acknowledging the Persistence of Passwords. IEEE Security & Privacy Magazine. 2012. Joseph Bonneau et al. Passwords and The Evolution of Imperfect Authentication. Communications of ACM. 2015. Ari Juels and Ronald L. Rivest. Honeywords-Making Password-Cracking Detectable. In Proc. CCS'2013. Robert Biddle et al. Graphical Passwords: Learning from the First Twelve Years. ACM Computing Surveys. 2012. Timothy J. Forman and Adam J. Aviv Double Patterns: A Usable Solution to Increase the Security of Android Unlock Patterns.In Proc. ACSAC'2020.[Homework]
November 04	05. Paper Report I [Slides]	Ryan M, et al. Technofixing the Future: Ethical Side Effects of Using AI and Big Data to Meet the SDGs. In Proc. IEEE Smart World Conference. 2019. Al-Rubaie M, Chang J M. Privacy-preserving Machine Learning: Threats and Solutions. IEEE Security & Privacy Magazine. 2019. L. Edwards and M. Veale Enslaving the Algorithm: From a “Right to an Explanation” to a “Right to Better Decisions”? IEEE Security & Privacy, 2018. Syta E, et al. Keeping Authorities" Honest or Bust" with Decentralized Witness Cosigning.In Proc. IEEE Symposium on Security and Privacy (SP), 2016.
November 04	05. Biometrics [Slides]	Ross Anderson. Security Engineering (Third Edition). Chapter 17: Biometrics John D.Woodward Jr. et al. Biometrics: Identity Assurance in the Information Age. McGraw-Hill/Osborne. 2003. Zahid Akhtar, et al. Biometric Liveness Detection: Challenges and Research Opportunities. IEEE Security & Privacy Magazine. 2015. Di Tang, et al. Face Flashing: a Secure Liveness Detection Protocol based on Light Reflections.In Proc. NDSS‘2018. [Homework]

November 11	06. Paper Report II [Slides]	Chaoshun Zuo, et al. Why Does Your Data Leak? Uncovering the Data Leakage in Cloud from Mobile Apps. In Proc. IEEE Symposium on Security and Privacy(SP), 2019. Nurul Momen, et al.Did App privacy improve after the GDPR? IEEE Security & Privacy Magazine. 2019. Lelio Campanile, et al.Privacy Regulations, Smart Roads, Blockchain, and Liability Insurance: Putting Technologies to Work. IEEE Security & Privacy Magazine. 2020. Hassan Takabi, et al.Security and Privacy Challenges in Cloud Computing Environments. IEEE Security & Privacy Magazine. 2010. Joseph Ricci, et al.Blockchain-Based Distributed Cloud Storage Digital Forensics: Where's the Beef? IEEE Security & Privacy Magazine. 2019.
November 11	06. Blockchain Overview [Slides]	Manav Gupta. IBM Blockchain Dummies . John Wiley & Sons. 2017 Tomaso Aste et al. Blockchain Technologies: The Foreseeable Impact on Society and Industry. IEEE Computer Magazine. 2017. Bitcoin Developer Guide . 2020. [Homework]
November 18	07. Paper Report III [Slides]	Guy Amit, et al. A Self-Healing Mechanism for Internet of Things Devices. IEEE Security & Privacy Magazine. 2020. Ryan Henry, et al.Blockchain Access Privacy: Challenges and Directions. IEEE Security & Privacy Magazine. 2018. Tara Salman, et al.Security Services Using Blockchains: A State of the Art Survey.IEEE Communications Surveys & Tutorials. 2018. Paul Dunphy, et al.A First Look at Identity Management Schemes on the Blockchain. IEEE Security & Privacy Magazine. 2018.
November 18	07. Bitcoin Technology I [Slides]	Textbook. Charpter 1: Introduction to Cryptography & Cryptocurrencies. Textbook. Charpter 2: How Bitcoin Achieves Decentralization. Textbook. Charpter 3: Mechanics of Bitcoin. Textbook. Charpter 5: Bitcoin Mining. Andress M.Antonopoulse, et al. Mastering Bitcoin: Programming the Open Blockchain. Second Edition. O'REILLY, 2019. Bitcoin Developer Guide. 2020. [Homework]
November 25	07. Paper Report IV [Slides]	Inger Anne Tondel, et al. IT Security Is From Mars, Software Security Is From Venus. IEEE Security & Privacy Magazine. 2020. David Kohlbrenner, et al.Building Open Trusted Execution Environments. IEEE Security & Privacy Magazine. 2020. Yisroel Mirsky, et al.Kitsune: An Ensemble of Autoencoders for Online Network intrusion detection.In Proc. NDSS, 2018. Yuan Tian, et al.StopGuessing: Using Guessed Passwords to Thwart Online Guessing. IEEE Security & Privacy Magazine. 2020. Nan Zhang, et al.Dangerous Skills: Understanding and Mitigating Security Risks of Voice-Controlled Third-Party Functions on Virtual Personal Assistant Systems. In Proc. IEEE Symposium on Security and Privacy (SP), 2019
November 25	08. Bitcoin Technology II [Slides]	Textbook. Charpter 3: Mechanics of Bitcoin. Textbook. Charpter 5: Bitcoin Mining. Andress M.Antonopoulse, et al. Mastering Bitcoin: Programming the Open Blockchain. Second Edition. O'REILLY, 2019. Yang Xiao, et al. A Surveys of Distributed Consensus Protocols for Blockchain Networks. IEEE Communications Surveys & Tutorials, 2020. [Homework]
December 02	09. Bitcoin Technology III [Slides]	Textbook. Charpter 3: Mechanics of Bitcoin. Textbook. Charpter 5: Bitcoin Mining. Andress M.Antonopoulse, et al. Mastering Bitcoin: Programming the Open Blockchain. Second Edition. O'REILLY, 2019. Yang Xiao, et al. A Surveys of Distributed Consensus Protocols for Blockchain Networks. IEEE Communications Surveys & Tutorials, 2020. [Homework]
December 09	10. Blockchain Application [Slides]	Christof Ebert, etc. Blockchain Technologies in Practice . IEEE Software Magazine. 2018 [Homework]

December 16	11. Consensus [Slides]	TBD
December 23	12. Sharding [Slides]	TBD
December 30	13. Privacy [Slides]	TBD

January 06	14. Project Report I [Slides]	TBD
January 13	15. Project Report I [Slides]	TBD

0CI01(01712720): Information Security Engineering(Fall 2020)

Course Description

Course Textbook

Course Schedule

Date

Topics

Readings

Course Grading

Course Projects

Course References

Course History