Defense Against the Dark Arts

CS4630. Fall 2023. University of Virginia.

Course Objectives

This course aims to equip students with a comprehensive understanding of the multifaceted realm of computer security. Participants will delve into the ethical considerations tied to computer security breaches, grasp the intricacies of software vulnerabilities, and discern how adversaries exploit them. The curriculum offers insights into a plethora of malware types, such as viruses, worms, ransomware, and trojans, as well as other attacks encompassing social engineering, phishing, and denial of service. By the end of the course, students will be proficient in the methods to prevent, detect, and repair malware threats and will have hands-on experience with program binary examination tools to identify malicious code.

Instructor

Wajih Ul Hassan
Wajih Ul Hassan

hassan@virginia.edu

Office Hours: Wednesdays 11AM-Noon (Rice Hall 522)

Assignment TAs

Arnabjyoti (Arnab) Kalita
Arnabjyoti (Arnab) Kalita

mje6jj@virginia.edu

Office Hours: Mondays 2pm - 3:30pm (Rice Hall 442)
Di Zhu
Di Zhu

yqx8es@virginia.edu

Office Hours: Mondays 3:30pm-5pm (Rice Hall 442)

Quiz TA

Anne Zhang
Anne Zhang

txd5dg@virginia.edu

Office Hours: Tuesdays 2pm-3pm (Rice Hall 442)

Lectures

TuTh 5:00PM-6:15PM, Room: Olsson Hall 005

Required Text Book

None.

Communications

  • I am committed to supporting your learning experience, which is why I will be recording lectures and making them available on Canvas. However, active participation is essential. If class attendance falls below 50%, I’ll have to reconsider and may cease the lecture recordings.
  • Class discussion: Piazza
  • Lecture materials (slides, assignments): Canvas

Grading

  • Assignments 35%
    • Around eight programming assignments.
    • Assignments will be weighted according to complexity and difficulty.
    • A grade of zero will be recorded for late assignments unless prior arrangements are made.
    • Late submission of assignments will be accepted for up to two (2) days after the deadline, with a 10% per day penalty.
    • You are free to develop assignments on any platform/OS you wish. However, you are responsible for porting your code to the platform the class is using and ensuring that it runs correctly. Our reference system will be Ubuntu 18.04 desktop. We will install the 64-bit OS, but will analyze 32-bit applications.
  • Quizzes 15%
    • Total six quizzes.
    • All quizzes will be in-person (during class timings).
    • Out of these six quizzes, only best five will count towards your grade (N-1 Policy).
    • All the quizes will be announced.
  • Midterm Exam 20%
    • Covering material in the first half of class.
  • Final exam 30%
    • Covering all material from the course.

Schedule

Click here.

Policies and Statements

Academic Integrity Students are expected to be familiar with the university honor code, including the section on academic fraud.

  • Students are encouraged to discuss programs in general and to help one another find bugs in existing programs. However, using another’s code or writing code for someone else is cheating and a violation of the University’s Honor System. This includes consulting solutions to assignments from previous years or tests from previous years. Keep code listings to provide evidence of your creative development.

  • Unless otherwise noted, exams and individual assignments will be considered pledged that you have neither given nor received help. This means that you are not allowed to describe problems on an exam, assignment, or project to a student who has not taken it yet. You are also not allowed to show exam papers to another student or view another student’s exam papers while working on an exam.

  • Sending, receiving, or otherwise copying or describing the contents of electronic files that are part of course assignments are not allowed collaborations (except for those explicitly allowed in assignment instructions). Assignments or exams where honor infractions or prohibited collaborations occur will receive a zero grade for that entire assignment or exam. Such infractions will also be submitted to the Honor Committee, if appropriate.

If you have questions on what is allowable, please ask!

Students with disabilities or learning needs It is my goal to create a learning experience that is as accessible as possible. If you anticipate any issues related to the format, materials, or requirements of this course, please meet with me outside of class so we can explore potential options. Students with disabilities may also wish to work with the Student Disability Access Center (SDAC) to discuss a range of options to removing barriers in this course, including official accommodations. We are fortunate to have an SDAC advisor, Courtney MacMasters, physically located in Engineering. You may email her at cmacmasters@virginia.edu to schedule an appointment. For general questions please visit the SDAC website: sdac.studenthealth.virginia.edu. If you have already been approved for accommodations through SDAC, please send me your accommodation letter and meet with me so we can develop an implementation plan together.

Religious Accommodations It is the University’s long-standing policy and practice to reasonably accommodate students so that they do not experience an adverse academic consequence when sincerely held religious beliefs or observances conflict with academic requirements.

Students who wish to request academic accommodation for a religious observance should submit their request to me by email as far in advance as possible. Students who have questions or concerns about academic accommodations for religious observance or religious beliefs may contact the University’s Office for Equal Opportunity and Civil Rights (EOCR) at UVAEOCR@virginia.edu or 434-924-3200.

Harassment, Discrimination, and Interpersonal Violence The University of Virginia is dedicated to providing a safe and equitable learning environment for all students. If you or someone you know has been affected by power-based personal violence, more information can be found on the UVA Sexual Violence website that describes reporting options and resources available - www.virginia.edu/sexualviolence.

The same resources and options for individuals who experience sexual misconduct are available for discrimination, harassment, and retaliation. UVA prohibits discrimination and harassment based on age, color, disability, family medical or genetic information, gender identity or expression, marital status, military status, national or ethnic origin, political affiliation, pregnancy (including childbirth and related conditions), race, religion, sex, sexual orientation, or veteran status. UVA policy also prohibits retaliation for reporting such behavior.

If you witness or are aware of someone who has experienced prohibited conduct, you are encouraged to submit a report to Just Report It (justreportit.virginia.edu) or contact EOCR, the office of Equal Opportunity and Civil Rights.

If you would prefer to disclose such conduct to a confidential resource where what you share is not reported to the University, you can turn to Counseling & Psychological Services (“CAPS”) and Women’s Center Counseling Staff and Confidential Advocates (for students of all genders).

As your professor and as a person, know that I care about you and your well-being and stand ready to provide support and resources as I can. As a faculty member, I am a responsible employee, which means that I am required by University policy and by federal law to report certain kinds of conduct that you report to me to the University’s Title IX Coordinator. The Title IX Coordinator’s job is to ensure that the reporting student receives the resources and support that they need, while also determining whether further action is necessary to ensure survivor safety and the safety of the University community.

Support for your career development Engaging in your career development is an important part of your student experience. For example, presenting at a research conference, attending an interview for a job or internship, or participating in an extern/shadowing experience are not only necessary steps on your path but are also invaluable lessons in and of themselves. I wish to encourage and support you in activities related to your career development. To that end, please notify me by email as far in advance as possible to arrange for appropriate accommodations. </details>

Community and Identity The Center for Diversity in Engineering (CDE) is a student space dedicated to advocating for underrepresented groups in STEM. It exists to connect students with the academic, financial, health, and community resources they need to thrive both at UVA and in the world. The CDE includes an open study area, event space, and staff members on site. Through this space, we affirm and empower equitable participation toward intercultural fluency and provide the resources necessary for students to be successful during their academic journey and future careers.

Ethics Statement This course includes topics related to computer security and privacy. As part of this investigation, we may cover technologies whose abuse could infringe on the rights of others. As computer scientists, we rely on the ethical use of these technologies. Unethical use includes circumvention of an existing security or privacy mechanisms for any purpose, or the dissemination, promotion, or exploitation of vulnerabilities of these services. Any activity outside the letter or spirit of these guidelines will be reported to the proper authorities and may result in dismissal from the class and possibly more severe academic and legal sanctions.