Operating Systems and Web Security: Fall 2012

Course Outline

The outline of the course can be found here.

Reading Responses

In general, reading responses should be turned in by 8 PM on Monday prior to the associated readings being discussed in class. Submitted reading responses should be no more than 1000 words in total for discussion of all the week's readings. (NOT 1000 words per reading!) Reading responses should be a discussion of what you got out of the readings and what questions you still have. I will attempt to read everyone's responses before class so I have an idea how to direct in-class discussion. In particular, I will be looking for topics on which to give more background.

The first reading response is due on Monday, September 17th, 8 PM. Note that this response should also discuss how useful and enjoyable the unsupervised in-class discussion of the readings went.

Responses should be submitted via Carleton's new cuLearn.

Readings

Date	Topics	Readings	Notes
Sept. 6	Introduction		Introduction Notes
Sept. 11	Fundamentals (Groups)	Saltzer & Schroeder, The Protection of Information in Computer Systems (1975) (Link to PDF version)	Fundamentals Notes
Sept. 13	Criteria (Groups)	The DoD Orange Book (1985)	Criteria Notes
Sept. 18	Fundamentals (Discussion)
Sept. 20	Criteria (Discussion)
Sept. 25	Code Injection Attacks	Aleph One, Stack Smashing for Fun and Profit Buchanan et al., When good instructions go bad: generalizing return-oriented programming to RISC	Code Injection Attacks
Sept. 27	Code Injection Defenses	Bojinov et al., Address space randomization for mobile devices Kc et al., Countering Code-Injection Attacks With Instruction-Set Randomization	Code Injection Defenses
Oct. 2
Oct. 4