CS2013-final-report

2. Discuss the concept of web sessions, secure communication channels such as TLS and importance of
secure certificates, authentication including single sign-on such as OAuth and SAML. [Familiarity]
3. Describe common types of vulnerabilities and attacks in web applications, and defenses against them.
[Familiarity]
4. Use client-side security capabilities in an application. [Usage]
IAS/Platform Security
[Elective]
Topics:
• Code integrity and code signing
• Secure boot, measured boot, and root of trust
• Attestation
• TPM and secure co-processors
• Security threats from peripherals, e.g., DMA, IOMMU
• Physical attacks: hardware Trojans, memory probes, cold boot attacks
• Security of embedded devices, e.g., medical devices, cars
• Trusted path
Learning outcomes:
1. Explain the concept of code integrity and code signing and the scope it applies to. [Familiarity]
2. Discuss the concept of root of trust and the process of secure boot and secure loading. [Familiarity]
3. Describe the mechanism of remote attestation of system integrity. [Familiarity]
4. Summarize the goals and key primitives of TPM. [Familiarity]
5. Identify the threats of plugging peripherals into a device. [Familiarity]
6. Identify physical attacks and countermeasures. [Familiarity]
7. Identify attacks on non-PC hardware platforms. [Familiarity]
8. Discuss the concept and importance of trusted path. [Familiarity]
IAS/Security Policy and Governance
[Elective]
See general cross-referencing with the SP/Security Policies, Laws and Computer Crimes.
Topics:
• Privacy policy (cross-reference SP/Social Context/Social implications of computing in a networked world;
cross-reference SP/Professional Ethics/Accountability, responsibility and liability; cross-reference
SP/Privacy and Civil Liberties/Legal foundations of privacy protection)
• Inference controls/statistical disclosure limitation
• Backup policy, password refresh policy
• Breach disclosure policy
• Data collection and retention policies
• Supply chain policy
• Cloud security tradeoffs
- 109 -