Note: This was the original syllabus handed out on Thursday (August 29) in class.

Since then, things have changed we have had a number of students drop the class and it looks like we possibly will be getting some more resources. Im going to leave the original syllabus from hell up for historical reasons, but a completely new syllabus, with much less draconian conditions, will be distributed on Tuesday.

CS 161 Computer Security Instructor: Tygar 29 August 2013 Syllabus and important notes Welcome to CS 161 for Fall 2013. This handout contains important notes, and you are responsible for reading all of the material in this handout and agreeing to follow the rules for the course. If you are not able to follow the rules for the course, please drop the course.

Very important note: This will be a highly challenging class, and you can expect to spend 20-25 hours each week on the class. Attendance at class and section is mandatory (arriving late will be treated as non-attendance). There will be a closed-book, closed-note exam or quiz every single lecture session. Personal electronics (including cell phones, tablets, and computers) are not allowed to be used during class. Grading will be highly competitive. If you are not able to devote this level of energy and attention to this course, you should drop the course.
Section rescheduling Growth in the upper division offerings in Berkeleys computer science program has led to a severe shortage of teaching assistants. As a result, a number of upper division classes have fallen short in the number of teaching assistants that they have. For CS 161, it means that we are cancelling four of the seven scheduled sections: Section 101: Section 102: Section 103: Section 104: Section 105: Section 106: Section 107: Thursday, 2-3 will take place Thursday, 3-4 will take place Thursday, 4-5 will take place Thursday, 5-6 CANCELLED Friday, 10-11 CANCELLED Friday, 11-12 CANCELLED Friday, 12-1 CANCELLED

There are currently about 170 students. However, given the current TA staffing, we can only support 7590 students in the class. Because this class is so challenging, I expect that about 2/3rds of currently enrolled students will drop the course. Those who remain will need to commit to being on-time for every

class and discussion section, and willing to devote substantial effort to reading and understanding highly technical material (and being examined on it during every single class section). If you are on the waitlist or hope to add this course, you have zero chance of getting into the course. We will not be allowing any students to add this course. Similarly, no auditors are allowed in the course. If you are enrolled in sections 104-107, you will need to transfer to sections 101-103. If none of those times work for you, you are required to drop the course. We will handle transfers to sections internally within the class, rather than going through Telebears. If you are enrolled in any of the sections, you are required to attend all class sessions and all sessions of your section. Please note that arriving late to class will be counted as missing class. Any request for absence on the basis of religious reasons or schedule conflict must be sent to the instructor by September 2nd. Any request for absence on the basis of family emergency or medical reasons must be sent to the instructor on the same day that the problem develops, and must be fully documented. If you miss a class or are late to a class or section (without prior approval from the instructor) you will be considered to have dropped the class and will receive a failing grade. Textbooks You will want to gain access to the two main textbooks we will use in this course. Do not delay as you will be examined on readings from the textbooks beginning on September 2nd and every single class section thereafter. If you buy the books online, I suggest that you pay for the fastest possible delivery method. Wenbo Mao, Modern Cryptography: Theory and Practice (2004) (ISBN 0132887441X) This is the main textbook we will use for the course. There should be a limited number of textbooks available at the Cal Student Store. It is available as print on demand from Amazon, so if you order it for overnight delivery, you should be able to get it before September 2nd. It is a highly mathematical textbook. Thomas Rid, Cyber War Will Not Take Place (2013) (ISBN 0199330638) We will use this book November 14-21. It will be published on September 1. Since it is a new book, the Cal Student Store does not have any copies Supplementary textbooks Ross Anderson, Security Engineering, 2nd edition (2008) (ISBN 0470068523) This book is available for free online at http://www.cl.cam.ac.uk/~rja14/book.html Sean Smith and John Marchesini, The Craft of System Security (2007) (ISBN 0321434838)

In addition, the instructor will provide supplementary reading for several class sessions. Class staff Instructor: Doug Tygar, 739 Soda Hall, 510-643-7855, doug.tygar@gmail.com Office hours: starting at 10:30 on Tuesdays and Thursday, or by appointment Barbara Goto, 741 Soda Hall, 510-643-2614, bgoto@berkeley.edu Brad Miller, 725 Soda Hall, bmiller1@eecs.berkeley.edu Emil Stefanov, 721 Soda Hall, emil@berkeley.edu

Assistant: TAs:

TA office hours will be announced later. Sections If you are in Section 101-103 please go to your assigned section. Please be on time as late arrival will be treated as non-attendance, and section attendance is mandatory. If you are in Section 104-107, please choose another section 101-103 and attend that. As students drop the course or miss class or section. However, note that while you are waiting for things to finalize, you must attend section and be on time as late arrival will be treated as non-attendance, and section attendance is mandatory. If you cannot attend Section 101-103, you must drop the course. Class reading There will be class reading for each class session, except when we are having a midterm. You must read and understand the class readings. In many cases, the class readings are highly mathematical and will take considerable time to read and understand. Please plan accordingly reading the night or morning before class will almost certainly result in failure. Homework There will be homework for each class session. However, the homework is not turned in or graded. You should still do it, because quiz questions will usually be based on the homework questions for that class. The homework questions are sometimes very challenging, so do not wait until the last minute to do them. Homework questions for September 2 are: Mao, Exercises 7.1 to 7.8 (p. 243). Exams (quizzes, midterms, final) There will 19-21 quizzes in this class. Quizzes form 1/3 of the grade. Quizzes are handed out precisely at 9:10 AM for security reasons, if you are late to class, you will not be allowed to take the quiz. Quizzes will often be based on the homework for that class session. All quizzes are closed-book and closed-note. Quizzes cannot be made up.

There will be three midterms in the class, on September 26, October 24, and November 12. Midterms forms 1/3 of the grade. Midterms are cumulative (they cover all of the material to date in the class.) You can expect the midterms to be challenging. All midterms are closed-book and closed-note. Midterms cannot be made up. If a student is excused from a midterm (which is very rare), then the lowest score from the remaining two midterms and final will be extrapolated for the missing midterm. The final is December 17 from 3-6PM. The final forms 1/3 of the grade. You can expect the final to be more challenging than the midterms. The final is closed-book and closed-note. The final cannot be made up. Questions during an exam No questions are allowed during any of the exams (quizzes, midterms, or finals). If you feel a question is ambiguous or unclear, then state your basis on the exam and answer it to the best of your ability. Re-grading If you feel an exam was mis-graded, you can request re-grading. In that case, all of your exams will be re-graded. This may result in no change of grade, in your grade going up, or your grade going down. Grading To receive a passing grade, the student must attend and be on time for all class sessions and all instances of his or her section, or receive prior permission from the instructor. Grading will be highly competitive for the class. Grading is based one-third on quizzes, one-third on midterms, and one-third on the final exam. Grading is highly competitive. However, students who diligently study and understand the material, and then show their competence on the exams can expect a passing grade. Special testing circumstances If you are disabled and require special arrangements for exams, you must contact the instructor with full documentation by 5PM, August 30. Based on circumstances, the instructor may conduct an alternate exam. The alternate exam will be an oral exam, closed-book, closed-note, cumulative over all class material and will be scheduled at 9AM on Sunday, December 15. Personal electronic devices You may not use any electronic device during class, including computers, tablet computers, cell phones, cameras, recording devices, calculator, or any device that emits noise (such as a beeping watch). Anyone who breaks this rule will fail the course and be asked to leave. Personal medical devices (particularly hearing aids) are allowed, however. Cheating The grades in this class are based on quizzes, midterms, and a final exam. You are not allowed to use any books or notes during the any of these exams. You are not allowed to look at anyone elses answer

sheets. If you feel someone is looking at your exam sheet, you should immediately stand up and report the incident during the exam. Anyone breaking these rules will consider to have cheated, will fail the class, and will be referred for campus disciplinary action. Bathroom breaks during exams No bathroom breaks are permitted during the brief quizzes. If you need to take a bathroom break during the midterm or final, please contact one of the exam proctors. Your exam sheets will be taken from you and photographed to record your progress. You will be escorted to the bathroom. When you return, your exam sheet will be returned to you. You will not receive any time credit for the time it takes to implement this process. Class and section structure Typical classes will begin with a brief quiz. The instructor may then go through sample homework problems, and may offer remarks on the forthcoming reading selection. Typical classes will begin with attendance. The TA will then answer questions about the homework and exam questions. There is no class on September 5, October 10, November 26, or November 28. There is no section today (August 29), October 10, or November 28. Level of difficulty This class will likely be one of the most difficult courses you have taken in computer science at UC Berkeley. For most students, it will require 20 or more hours of work each week. The class is highly mathematical and assumes that you can read, remember, and handle mathematical material. The exam schedule and attendance requirement (which have zero-tolerance for tardiness) will be challenging. Please carefully consider your total load (personal and academic) this semester and whether you are willing to make this level of commitment before continuing in the course. Class blog The class blog is at cs161.blogspot.com. Please check this blog every day for any last minute announcements.

Date 29 August 3 September 5 September 10 September 12 September 17 September 19 September 24 September 26 September 1 October 3 October 8 October 10 October 15 October 17 October 22 October 24 October 29 October 31 October 5 November 7 November 12 November 14 November 19 November 21 November 26 November 28 November 3 December 5 December

Topic

Advance reading

Exam that day

Classical cryptography DES and AES Confidentiality modes Asymmetric cryptography RSA Rabin & El Gamal Cryptographic hashes Digital signatures Authentication Authentication protocols Passwords Key exchange, attacks IPSEC, SSH Kerberos, SSL, TLS Elliptic curves 1 Elliptic curves 1 Cyberwar 1 Cyberwar 2 Cyberwar 3

Mao, 7.1-7.5 No class today (section will be held) Mao, 7.6-7.7 Mao, 7.8-7.10 Mao, 8.1-8.4 Mao, 8.5-8.9 Mao, 8.10-8.17 Mao, 10.1-10.3 + supplement Mao, 10.4 Mao, 2.1-2.7 No class and no section today Mao, 11.1-11.4 Mao, 11.5 Mao, 11.6-11.9 Mao, 12.1-12.3 Mao, 12.4-12.6 Mao, 5.5 + supplement Mao, 13.3.4 + supplement

Quiz 1 Quiz 2 Quiz 3 Quiz 4 Quiz 5 Quiz 6 Midterm 1 Quiz 7 Quiz 8 Quiz 9 Quiz 10 Quiz 11 Quiz 12 Midterm 2 Quiz 13 Quiz 14 Quiz 15 Quiz 16 Midterm 3 Quiz 17 Quiz 18 Quiz 19

Rid, 1-3 Rid, 4-5 Rid, 6-8 No class today No class and no section today: University holiday Overflow/Review/TBA Possible quiz Overflow/Review/TBA Possible quiz 17 December 3-6PM: Final Exam (Group 7)