CIS4360 - Computer Security Fundamentals - Spring 2026 - Schedule

DateTopicResourcesHomework
    Week 11/08Logistics. Introduction. Network Security: OSI layers and issues of link layer.  Logistics   Slide 0  Slide 1
Week 21/13Network Security, continued: Network layer and its issues. Practice of Sniffing and Spoofing lab. Slide 1
1/15Practice of Sniffing and Spoofing lab, continued. 
Week 31/20Network Security, continued: DoS, IPSec, TCP basics. Ex1Slide 1
1/22TCP Attacks: SYN Flood attack, RST attack, Hijacking attackSlide 1
Week 41/27Reverse Shell. Ex2.Slide 1Lab1 out
1/29DNS Attack. Crypto basics: substitution cipher, perfect secrecy, one-time padSlide 1     Slide 2
    Week 5     2/03Ex3. Blockcipher: PRF definition. Breaking bad constructions. Slide 3
     2/05Blockcipher: Birthday attack. Applications: TCP sequence number, TCP SYN CookieSlide 3Lab1 due
Week 62/10Application of PRF: One-time password, Challenge-response protocol. Web Security: SQL InjectionSlide 3    Slide 4Lab2 out
2/12Ex4. Web Security: CSRF and XSSSlide 4
Week 72/17Practice lab for CSRFLab2 due
2/19Software Security: Access control, Bell-LaPadula model, SetUID and attacksSlide 5Hw1 out 
Week 82/24Ex5.  Encryption: ECB, CBC, and CTR. Slide 6
2/26Quiz 1
   Week 9     3/03Ex6. Encryption, continued: real-or-random security.  Slide 6Hw1 due
3/05Review of Hw1 and Quiz 1. Preparation for Quiz 2. MAC: motivation, security definition. Slide 7Lab3 out
Week 103/10Quiz 2
3/12MAC: CBC-MAC, encrypted CBC-MAC. Exercises on bad MAC. Slide 7Lab3 due (3/11)
Lab4 out
Week 113/17Springbreak
3/19Springbreak
Week 123/24Review of MAC. Ex7Slide 7
3/26Cryptographic hash: collision resistance, random-oracle model, Merkle-Damgard, extension attack, truncated Merkle-Damgard and HMAC, password hashing. Slide 8Lab4 due 
Week 133/31Lab5 out
4/02
Week 144/07Lab5 due 
4/09Quiz 3
Week 154/14
4/16
   Week 16     4/21
     4/23