https://css.csail.mit.edu/6.858/2024/ 6.566 / Spring 2024 * Calendar * Class + General info + MIT network rules + Past quizzes + Previous years >> o 2009 fall o 2010 fall o 2011 fall o 2012 fall o 2013 fall o 2014 fall o 2015 fall o 2017 spring o 2018 spring o 2019 spring o 2020 spring o 2022 spring o 2023 spring * Labs + Lab 1 + Lab 2 + Lab 3 + Lab 4 + Lab 5 * Participate + Gradescope + Piazza + Anonymous lecture questions + Zoom office hours The lectures cover a broad overview of systems security together with a deeper focus on several topics: isolation techniques, privilege separation, dealing with buggy code, networked and distributed systems, and human-focused security and privacy. Links to notes etc. on future days are copies of materials from last year, to give you an idea of what the future will bring. We will update the notes as the course progresses. The year of publication for class readings are shown in parentheses. Monday Tuesday Wednesday Thursday Friday feb 6 LEC 1: feb 8 Introduction, LEC 2: OS and threat models ( VM isolation ( feb 5 video) video) First day Preparation: feb 7 Preparation: feb 9 of classes Optionally read Read about OS Modern Android and VM exploit isolation ( Assigned: Lab 1: Question) Buffer overflows feb 13 feb 15 LEC 3: Software LEC 4: Trusted fault isolation hardware (video feb 16 (video) ) DUE: Lab feb 12 Preparation: feb 14 Preparation: 1 part 1 Read about Read BitLocker DUE: Lab WebAssembly ( (2006), 1 part 2 Question) sections 1-2 ( Question) feb 22 LEC 5: CPU side-channels ( video) Preparation: feb 23 feb 19 feb 20 Read Transient DUE: Lab Presidents Monday schedule feb 21 Execution 1 all day Attacks and parts Defenses (2019) (Question) Assigned: Lab 2: Privilege separation feb 29 LEC 7: Data feb 27 center LEC 6: Privilege infrastructure separation ( (video) mar 1 feb 26 video) feb 28 Preparation: DUE: Lab Preparation: Read Google 2 part 1 Read OpenSSH Infrastructure (2003) (Question Security (2023) ) and BeyondProd (2023) ( Question) mar 5 mar 7 LEC 8: Mobile LEC 9: Web mar 8 phone security ( security model DUE: Lab mar 4 video) mar 6 (video) 2 parts Preparation: Preparation: 2+3 Read about iOS Read about web ADD DATE Security ( security (2022) Question) (Question) mar 12 mar 14 LEC 10: Buffer LEC 11: overflow Symbolic defenses (video) execution ( Preparation: video) mar 15 mar 11 Read Baggy mar 13 Preparation: DUE: Lab bounds checking Read EXE: 2 all (2009) + errata Automatically parts (Question) generating Assigned: Lab 3: inputs of death Symbolic (2006) ( execution Question) mar 21 Quiz 1: Covers mar 19 lectures 1-12 LEC 12: and labs 1-2 Verification ( Reference: Past mar 22 video) quizzes, Assigned: mar 18 Preparation: mar 20 solutions Lab 4: Read HACL* Materials: Open Browser (2017) (Question laptop security ) Time and Location: 2:30-4p in 45-230 mar 25 mar 26 mar 27 mar 28 mar 29 Spring Spring vacation Spring Spring vacation Spring vacation vacation vacation apr 2 apr 1 LEC 13 (guest): apr 4 REC 1 Supply chain LEC 14: Network (anna): security (Russ security (video Getting Cox) (video) ) apr 5 started Preparation: apr 3 Preparation: DUE: Lab with lab 3 Read Trusting Read about 3 part 1 Time and Trust (1984) and network Location: Russ's blog post security ( 4-5pm in (2023), and Question) 24-115 optionally xz attack (2024) apr 9 apr 11 apr 12 LEC 15: Secure LEC 16: DUE: Lab channels (video) Certificates ( 3 all apr 8 Preparation: apr 10 video) parts Read TLS 1.3 Preparation: Assigned: blog post (2018) Read Let's Lab 5: (Question) Encrypt (2019) ACME + (Question) WebAuthn apr 16 apr 18 REC 2 (bill): LEC 17: User Getting started authentication apr 15 with lab 4 ( (video) apr 19 Patriots video) apr 17 Preparation: DUE: Lab day Time and Read U2F (2016) 4 part 1 Location: and optionally 2:30-4pm in from U2F to 45-230 passkeys (2023) (Question) apr 23 LEC 18: apr 25 Messaging LEC 19: Key security (video) transparency ( apr 26 apr 22 Preparation: apr 24 video) DUE: Lab Read Analysis of Preparation: 4 all Signal (2019), Read CONIKS parts sections 1-3 ( (2015) ( Question) Question) DROP DATE apr 29 apr 30 may 2 REC 3 LEC 20: LEC 21 (guest): (sanjit): Anonymous Cybersecurity Getting communication ( policy (Daniel started video) Weitzner) ( may 3 with lab 5 Preparation: may 1 video) DUE: Lab , notes ( Read Tor (2004) Preparation: 5 part 1 video) and blog posts 1 Read Keys under Time and , 2, and 3 doormats (2015) Location: (2012) (Question and Cyber risk 10-11am in ) (2024) 24-121 may 7 may 9 LEC 22: Security LEC 23: economics (video Differential may 10 ) privacy (video) DUE: Lab may 6 Preparation: may 8 Preparation: 5 all Read Click Read PINQ parts trajectories (2009) ( (2011) (Question Question) ) may 14 LEC 24 (guest): may 16 Information REC 4: Final security in real exam review may 13 life (Max may 15 Time and may 17 Burkhardt) ( Location: video) 2:30-4pm in Last day of 32-123 classes may 22 Final exam: Emphasis on lectures 13-24 and labs 3-5 Reference: Past may 20 may 21 quizzes, may 23 may 24 solutions Materials: Open laptop Time and Location: Johnson Ice Rink, 1:30-4:30pm Questions or comments regarding 6.566? Contact us on Piazza or send e-mail to the 6.566 staff at 6566-staff@lists.csail.mit.edu. Creative Commons License