CIS 890, Spring 2010

Research Topics in Security

Course Goals

The purpose of this course is to broaden the students' knowledge in computer security through studying up-to-date literature, and to train research capabilities through conducting independent research projects.

Course Schedule

Jan 22: Organizational meeting.
Feb 1: Murali's presentation (Slide 1, Slide 2) on Secure Web 2.0 Content Sharing Beyond Walled Gardens.
Feb 8: Su (Slides) and Loai's RPE practice talk.
Feb 19: Tsung-Hsi's presentation (Slides) on Protecting Browsers from Extension Vulnerabilities.
Feb 22: Sathya's presentation on Defeating Vanish with Low-Cost Sybil Attacks Against Large DHTs.
Feb 26: Loai's presentation (Slides) on Static Enforcement of Web Application Integrity Through Strong Typing.
March 1: Su's presentation (Slides) on FLAX: Systematic Discovery of Client-side Validation Vulnerabilities in Rich Web Applications.
March 22: Murali's presentation (Slides) on Design and Implementation of an Open Framework for Secure Communication in Mashup.
April 5: Logic programming tutorial by Simon. Slides.
April 9: Sathya's presentation (Slides) on RRE: A Game-Theoretic Intrusion Response and Recovery Engine.
April 12: Loai's presentation of his second RPE.
April 16: Su's presentation (Slides) on Quantitative Assessment of Operational Security: Models and Tools.
April 19: Tsung-Hsi's presentation (Slides) on ConScript: Specifying and Enforcing Fine-Grained Security Policies for JavaScript in the Browser.

Instructor and course meeting times

Instructor: Xinming (Simon) Ou.
Meeting time and place: Monday 3:30-5:10 and Friday 3:30-4:20 in Nichols 127
Office hours: by appointment

Prerequisites

CIS751: Computer and Information Security, or instructor permission.

Contact

Questions can be emailed to xou (put some stuff here) ksu (a little dot) edu.