- Computer-security-2023-2024 - software.imdea.org

computer security final grades and exam
by Dario Fiore 17 Jan '24

17 Jan '24

Dear all, We can confirm that everyone who sent the homework has reached the necessary threshold to pass and that you don't need to take the exam today at 18.00. We are sorry for the late notification. We will be sending the software security homework and final grades individually later today. For those that have not submitted any homework and wish to take the exam, we remind the exam is at the IMDEA Software institute today at 18.00. Please let us know if you plan to attend, by sending an email to all the professors (emails below). Best regards, Juan Caballero <juan.caballero(a)imdea.org>, Marco Guarnieri <marco.guarnieri(a)imdea.org>, Ignacio Cascudo <ignacio.cascudo(a)imdea.org>, Alessandra Gorla <alessandra.gorla(a)imdea.org>, Srdjan Matic <srdjan.matic(a)imdea.org>, Dario Fiore <dario.fiore(a)imdea.org>

1 0

Module IV homework
by Marco Guarnieri 22 Dec '23

22 Dec '23

Dear students, Please find attached the homework for the hardware security module of the Computer Security course. Please send your solutions in PDF format to marco.guarnieri(a)imdea.org <mailto:marco.guarnieri@imdea.org> by Tuesday, January 9th, 2024 23:59:59 GMT+1. Any solution received after the deadline will receive a failing grade. In case you have questions, please reach out to marco.guarnieri(a)imdea.org <mailto:marco.guarnieri@imdea.org>. Best regards, Marco

1 0

Slides module IV
by Marco Guarnieri 18 Dec '23

18 Dec '23

Dear students, The slides for the remaining classes of the hardware security model are available in the cloud directory (files security-course-hwsecmodule-lecture_3.pdf, security-course-hwsecmodule-lecture_4.pdf, and security-course-hwsecmodule-lecture_5.pdf). As always, to access the cloud directory you can use the following link/password: https://cloud.software.imdea.org/index.php/s/zQweKHLpadbJyPE Password: s3cUrityR0cks The remaining reading assignments are the following: - Aslan Askarov — Language-based information-flow basics Available at https://github.com/aslanix/SmallStepNI/blob/master/infoflow-basics.pdf - Kocher et al. — Spectre Attacks: Exploiting Speculative Execution Available at https://spectreattack.com/spectre.pdf - Guarnieri et al. — Spectector: Principled detection of speculative information flows Available at https://spectector.github.io/papers/spectector.pdf Please also remember to fill in the course evaluation at https://servicios.upm.es/encuestas by Dec 22 23:59. Enjoy your holidays! Best regards, Marco

1 0

sw security assignment
by Alessandra Gorla 14 Dec '23

14 Dec '23

Dear students, attached you find the assignment for the software security module. The deadline for this assignment is on Dec 23rd, right before xmas. Please submit your assignment to alessandra.gorla(a)imdea.org. Contact me in case you have any questions. Alessandra P.s. Slides used in class are in the cloud folder

1 0

Physical security lectures 1/2
by Marco Guarnieri 04 Dec '23

04 Dec '23

Dear students, The slides for today’s class are available in the cloud directory (files security-course-hwsecmodule-lecture_1.pdf and security-course-hwsecmodule-lecture_2.pdf). The reading assignments associated with lecture_2 are the following: - D. Osvik, A. Shamir, E. Tromer — Cache attacks and countermeasures: the case of AES Available at https://eprint.iacr.org/2005/271.pdf - Y. Yarom, K. Falkner — Flush+Reload: a high resolution, low noise L3 cache side-channel attack Available at https://www.usenix.org/system/files/conference/usenixsecurity14/sec14-paper… As always, to access the cloud directory you can use the following link/password: https://cloud.software.imdea.org/index.php/s/zQweKHLpadbJyPE Password: s3cUrityR0cks Best regards, Marco

1 0

Homework module 2 (Network Security) - V2
by Srdjan Matic 20 Nov '23

20 Nov '23

Please find attached the /*second version of the*/ *homework for the Network Security* module. Here are some instructions: - You have to return it no later than November 27th. - Please return the solution by email _only_ to me (*srdjan.matic(a)imdea.org*). - You can return the solution either handwritten or typeset (very appreciated). - The homework must be done individually. Any spotted collaboration will result in the annulment of the homework. In case you have questions about the homework you can send us an email (/srdjan.matic(a)imdea.org/, /juan.caballero(a)imdea.org/) Best regards, Srdjan and Juan _Below you can find the instructions Juan sent on the 17/11/23, for those of you that have/want to do the new homework. _ ---- /Dear students, Regarding the network security homework, we had a discussion with the course coordinator, as well as the coordinators for both the EMSE and MUSS masters. As result, we decided to offer the chance to everyone to be evaluated only on 3 homeworks (instead of four). In more detail, here are the two options: / / If you submitted your homework prior to the leak (Thursday 13:23) then we will grade your submitted homework normally unless you send us an email by Monday, November 20, informing us that you prefer your submitted homework not to be graded. In that case you will be evaluated only on three homeworks. Since this group was not really affected by the leak, there is no option of submitting the new homework to replace the old one. / / For everyone else (i.e., if you submitted after the leak, or if you did not submit at all) we will release a new homework by Monday. We will try our best to make the new homework as related as possible to the old one so that they are of similar level and if you did some work for the old homework you benefit from that. In any case, you can read the new homework and decide whether to submit a solution, or not to submit a solution at all. If you do not submit a solution to the new homework, then you will be evaluated on three homeworks. If you submit a solution to the new homework we will evaluate you on four homeworks. Needless to say, you cannot submit a solution to the new homework and then decide to be only evaluated on three homeworks. / / We worked hard to come up with a solution that we believe minimizes the impact of this unfortunate situation. We understand that each of you may have been affected in a slightly different way by this mess, but we cannot do case-by-case arrangements. / / Best regards, Juan /

1 0

Homework module 2 (Network Security) - V2
by Srdjan Matic 20 Nov '23

20 Nov '23

Please find attached the /*second version of the*/ *homework for the Network Security* module. Here are some instructions: - You have to return it no later than November 27th. - Please return the solution by email _only_ to me (*srdjan.matic(a)imdea.org*). - You can return the solution either handwritten or typeset (very appreciated). - The homework must be done individually. Any spotted collaboration will result in the annulment of the homework. In case you have questions about the homework you can send us an email (/srdjan.matic(a)imdea.org/, /juan.caballero(a)imdea.org/) Best regards, Srdjan and Juan _Below you can find the instructions Juan sent on the 17/11/23, for those of you that have/want to do the new homework. _ ---- /Dear students, Regarding the network security homework, we had a discussion with the course coordinator, as well as the coordinators for both the EMSE and MUSS masters. As result, we decided to offer the chance to everyone to be evaluated only on 3 homeworks (instead of four). In more detail, here are the two options: / / If you submitted your homework prior to the leak (Thursday 13:23) then we will grade your submitted homework normally unless you send us an email by Monday, November 20, informing us that you prefer your submitted homework not to be graded. In that case you will be evaluated only on three homeworks. Since this group was not really affected by the leak, there is no option of submitting the new homework to replace the old one. / / For everyone else (i.e., if you submitted after the leak, or if you did not submit at all) we will release a new homework by Monday. We will try our best to make the new homework as related as possible to the old one so that they are of similar level and if you did some work for the old homework you benefit from that. In any case, you can read the new homework and decide whether to submit a solution, or not to submit a solution at all. If you do not submit a solution to the new homework, then you will be evaluated on three homeworks. If you submit a solution to the new homework we will evaluate you on four homeworks. Needless to say, you cannot submit a solution to the new homework and then decide to be only evaluated on three homeworks. / / We worked hard to come up with a solution that we believe minimizes the impact of this unfortunate situation. We understand that each of you may have been affected in a slightly different way by this mess, but we cannot do case-by-case arrangements. / / Best regards, Juan /

1 0

Update on Network Security homework
by Juan Caballero 17 Nov '23

17 Nov '23

Dear students, Regarding the network security homework, we had a discussion with the course coordinator, as well as the coordinators for both the EMSE and MUSS masters. As result, we decided to offer the chance to everyone to be evaluated only on 3 homeworks (instead of four). In more detail, here are the two options: If you submitted your homework prior to the leak (Thursday 13:23) then we will grade your submitted homework normally unless you send us an email by Monday, November 20, informing us that you prefer your submitted homework not to be graded. In that case you will be evaluated only on three homeworks. Since this group was not really affected by the leak, there is no option of submitting the new homework to replace the old one. For everyone else (i.e., if you submitted after the leak, or if you did not submit at all) we will release a new homework by Monday. We will try our best to make the new homework as related as possible to the old one so that they are of similar level and if you did some work for the old homework you benefit from that. In any case, you can read the new homework and decide whether to submit a solution, or not to submit a solution at all. If you do not submit a solution to the new homework, then you will be evaluated on three homeworks. If you submit a solution to the new homework we will evaluate you on four homeworks. Needless to say, you cannot submit a solution to the new homework and then decide to be only evaluated on three homeworks. We worked hard to come up with a solution that we believe minimizes the impact of this unfortunate situation. We understand that each of you may have been affected in a slightly different way by this mess, but we cannot do case-by-case arrangements. Best regards, Juan -- Juan Caballero Associate Research Professor IMDEA Software Institute Madrid, Spain

1 0

New Network Security Homework will be issued
by Juan Caballero 16 Nov '23

16 Nov '23

Dear students, Unfortunately one of you leaked the solutions to its network security homework to the mailing list, violating the homework policy: "No collaboration is permitted on this assignment. Any cheating (e.g., submitting another person’s work as your own, or permitting your work to be copied) will automatically result in a failing grade." As a consequence of the leak, we are no longer accepting solutions to the Network Security Homework and will be issuing a new Network Security homework. If you had submitted your homework solutions before the leak happened (today 13:23 Madrid time) you are not affected. We will grade the submitted homework. Otherwise, you are affected. We will release a new homework by tomorrow to replace the current one. If you have not yet submitted your solutions, then please do not submit them. If you submitted them between the leak and the time you receive this email, you will also need to do the new homework. We understand that you may have been working on the current homework and that some of your work may be lost as a consequence of this leak. That is unfortunate, but it would not be fair to other students if we simply graded the current homework after everyone has access to some solutions. Best regards, Juan -- Juan Caballero Associate Research Professor IMDEA Software Institute Madrid, Spain

1 0

Homework module 2 (Network Security)
by Srdjan Matic 16 Nov '23

16 Nov '23

Dear students, we have uploaded the slides for the /third/ lecture for "Network Security" module to the cloud. You can access the _/all/_ the slides using the the following link: https://cloud.software.imdea.org/index.php/s/zQweKHLpadbJyPE (/Password: s3cUrityR0cks/) Please find attached the *homework for the Network Security* module. Here are some instructions: - You have to return it no later than November 16th. - Please return the solution by email to me (*srdjan.matic(a)imdea.org*). - You can return the solution either handwritten or typeset (very appreciated). - The homework must be done individually. Any spotted collaboration will result in the annulment of the homework. In case you have questions about the homework you can send us an email (/srdjan.matic(a)imdea.org/, /juan.caballero(a)imdea.org/) Best regards, Srdjan and Juan

2 2

2025

2024

2023