CS2013-final-report

Learning outcomes:
[Core-Tier2]
1. Describe the purpose of cryptography and list ways it is used in data communications. [Familiarity]
2. Define the following terms: cipher, cryptanalysis, cryptographic algorithm, and cryptology, and describe
the two basic methods (ciphers) for transforming plain text in cipher text. [Familiarity]
3. Discuss the importance of prime numbers in cryptography and explain their use in cryptographic
algorithms. [Familiarity]
4. Explain how public key infrastructure supports digital signing and encryption and discuss the
limitations/vulnerabilities. [Familiarity]
[Elective]
5. Use cryptographic primitives and describe their basic properties. [Usage]
6. Illustrate how to measure entropy and how to generate cryptographic randomness. [Usage]
7. Use public-key primitives and their applications. [Usage]
8. Explain how key exchange protocols work and how they fail. [Familiarity]
9. Discuss cryptographic protocols and their properties. [Familiarity]
10. Describe real-world applications of cryptographic primitives and protocols. [Familiarity]
11. Summarize security definitions related to attacks on cryptographic primitives, including attacker
capabilities and goals.[Familiarity]
12. Apply appropriate known cryptographic techniques for a given scenario. [Usage]
13. Appreciate the dangers of inventing one’s own cryptographic methods. [Familiarity]
14. Describe quantum cryptography and the impact of quantum computing on cryptographic algorithms.
[Familiarity]
IAS/Web Security
[Elective]
Topics:
• Web security model
o Browser security model including same-origin policy
o Client-server trust boundaries, e.g., cannot rely on secure execution in the client
• Session management, authentication
o Single sign-on
o HTTPS and certificates
• Application vulnerabilities and defenses
o SQL injection
o XSS
o CSRF
• Client-side security
o Cookies security policy
o HTTP security extensions, e.g. HSTS
o Plugins, extensions, and web apps
o Web user tracking
• Server-side security tools, e.g. Web Application Firewalls (WAFs) and fuzzers
Learning outcomes:
1. Describe the browser security model including same-origin policy and threat models in web security.
[Familiarity]
- 108 -