Each week, you will be responsible for reviewing one of the required readings (if there are any). Reviews are typically due Sunday at midnight via the course HotCRP site (linked from Canvas) so discussion leads have time to read them before the Tuesday class.<\/p>\n\n\n\n
Except where otherwise noted, discussions will be led by one or two students. Everyone should read the required readings, but discussion leads should also read all of the on-time reviews (i.e., you are not responsible for reading anything submitted at the last minute) to be prepared to lead a discussion.<\/p>\n\n\n\n
There will also be opportunities to participate during lectures, so be sure to attend class!<\/p>\n\n\n\n
The final project will be an opportunity to explore additional topics in formal methods and\/or usable security or propose your own research project in usable formal methods. More details will be posted soon.<\/p>\n\n\n\n
This a tentative course schedule. It may change over the course of the semester, so be sure to check back here before starting on any assigned readings. Some of the materials for this course have been borrowed and\/or adapted from content developed by Professors Lorrie Cranor, Limin Jia, and Hanan Hibshi at Carnegie Mellon University.<\/p>\n\n\n\n
Week 1<\/strong> Week 1 (continued)<\/strong> Week 3<\/strong> Week 4<\/strong> Week 4 (continued)<\/strong> Week 5<\/strong> Week 6<\/strong> Week 7<\/strong> Week 8<\/strong> Week 9<\/strong> Week 10<\/strong> Week 10 (continued)<\/strong> Week 11<\/strong> Week 12<\/strong> Week 12 (continued)<\/strong> Week 13<\/strong> Week 14<\/strong> Week 15<\/strong> Week 15<\/strong> (continued)<\/strong> Week 16<\/strong> Course Components Each week, you will be responsible for reviewing one of the required readings (if there are any). Reviews are typically due Sunday at midnight via the course HotCRP site (linked from Canvas) so discussion leads have time to read them before the Tuesday class. Except where otherwise noted, discussions will be led by […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"template-fullwidth.php","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","footnotes":""},"class_list":["post-58","page","type-page","status-publish","hentry","post-preview"],"taxonomy_info":[],"featured_image_src_large":false,"author_info":{"display_name":"jpurdy","author_link":"https:\/\/courses.cs.colostate.edu\/cs580b4\/author\/jpurdy\/"},"comment_info":0,"_links":{"self":[{"href":"https:\/\/courses.cs.colostate.edu\/cs580b4\/wp-json\/wp\/v2\/pages\/58","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/courses.cs.colostate.edu\/cs580b4\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/courses.cs.colostate.edu\/cs580b4\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/courses.cs.colostate.edu\/cs580b4\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/courses.cs.colostate.edu\/cs580b4\/wp-json\/wp\/v2\/comments?post=58"}],"version-history":[{"count":46,"href":"https:\/\/courses.cs.colostate.edu\/cs580b4\/wp-json\/wp\/v2\/pages\/58\/revisions"}],"predecessor-version":[{"id":179,"href":"https:\/\/courses.cs.colostate.edu\/cs580b4\/wp-json\/wp\/v2\/pages\/58\/revisions\/179"}],"wp:attachment":[{"href":"https:\/\/courses.cs.colostate.edu\/cs580b4\/wp-json\/wp\/v2\/media?parent=58"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
8\/25 Course Overview<\/strong>
Syllabus, classroom expectations, course motivation
Required Reading: <\/strong>
1. Thoughts on Reviewing<\/a>, Mark Allman
2. Notes on Constructive and Positive Reviewing<\/a>, Mark Hill and Kathryn S McKinley<\/p>\n\n\n\nUnit 1: Security and Privacy<\/h3>\n\n\n\n
8\/27 Threats and Attackers<\/strong>
Threat modeling, STRIDE, hacking humans
How to write reviews and lead a discussion
\u00a0\u00a0 Required Reading:<\/strong>
\u00a0\u00a0 1. Why Cryptosystems Fail<\/a>. Ross Anderson (CCS \u201893)
\u00a0\u00a0 2. A Framework for Reasoning About the Human in the Loop<\/a>. Lorrie Faith Cranor (UPSEC \u201808)
Due this week:<\/strong>
Bid on papers on HotCRP due 8\/30 at midnight<\/strong> (you’ll receive an invitation by email)
Review 1 on required reading from 8\/17 lecture due 8\/30 at midnight<\/strong>
Week 2<\/strong>
9\/1 Discussion<\/strong> 1<\/strong>
Discussion lead: McKenna
9\/3 Security and Privacy Goals and Metrics<\/strong>
Information security properties, usable security metrics, side & covert channels
\u00a0\u00a0 Required Reading:<\/strong>
\u00a0\u00a0 1. Hertzbleed: Turning Power Side-Channel Attacks Into Remote Timing Attacks on x86<\/a>. Yingchen Wang, Riccardo Paccagnella, Elizabeth Ta ng He, Hovav Shacham, Christopher W. Fletcher, and David Kohlbrenner (USENIX Security \u201822)
\u00a0\u00a0 2. Is it a concern or a preference? An investigation into the ability of privacy scales to capture and distinguish granular privacy constructs<\/a>. Jessica Colnago, Lorrie Faith Cranor, Alessandro Acquisti, and Kate Hazel Stanton (SOUPS \u201822)
\u00a0\u00a0 Optional Reading:<\/strong>
\u00a0\u00a0 1. Chapters 1.1-1.2, 1.4 of\u00a0Handbook of Applied Cryptography<\/a>.\u00a0Alfred J. Menezes,\u00a0Paul C. van Oorschot\u00a0and\u00a0Scott A. Vanstone
\u00a0\u00a0 2. Chapters 5.2-5.2.2 (before 5.2.2.1) of\u00a0An Introduction to Privacy for Technology Professionals<\/a>. Florian Schaub and Lorrie Faith\u00a0Cranor
\u00a0\u00a0 3. Investigating Influencer VPN Ads on YouTube<\/a>. Omer Akgul, Richard Roberts, Moses Namara, Dave Levin, and Michelle L. Mazurek (IEEE S&P ’22)
\u00a0\u00a0 4. Spectre attacks: exploiting speculative execution<\/a>. Paul Kocher, Jann Horn, Anders Fogh, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz, and Yuval Yarom. Communications of the ACM, 63(7), 2020
\u00a0\u00a0 5. The privacy paradox \u2013 Investigating discrepancies between expressed\u00a0privacy concerns and actual online behavior \u2013\u00a0\u00a0A systematic literature review<\/a>. Susanne Barth and Menno D.T. de Jong. Telematics and informatics<\/em>,\u00a034<\/em>(7), 2017
Due this week:<\/strong>
Review 2 on required reading from 9\/3 lecture due 9\/6 at midnight<\/strong><\/p>\n\n\n\n
9\/8 Discussion<\/strong> 2<\/strong>
Discussion lead: Student
9\/10 Introduction to Cryptography<\/strong>
Terminology, symmetric and public key algorithms
Course Project overview
Optional Reading:<\/strong>
1. Chapter 1 (through 1.9) of Handbook of Applied Cryptography<\/a>, Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone
2. Prudent Engineering Practice for Cryptographic Protocols<\/a>, Mart\u00edn Abadi and Roger Needham
Due this week:<\/strong>
No reviews due this week<\/p>\n\n\n\n
9\/15 Applications of Cryptography<\/strong>
Security Protocols<\/p>\n\n\n\nUnit 2: Formal Methods<\/h3>\n\n\n\n
9\/17 Introduction to Formal Methods<\/strong>
Static and dynamic analysis
Optional Reading:<\/strong>
1. Proving the Correctness of Multiprocess Programs<\/a>. Leslie Lamport (IEEE Trans. On Software Engineering \u201877)
2. A High-Level View of TLA+<\/a>. Leslie Lamport
Due this week:<\/strong>
Project proposals due 9\/20 at midnight<\/strong>
No reviews due this week<\/p>\n\n\n\n
9\/22 Model Checking:<\/strong>
Finite state machines, safety and liveness properties
9\/24 Type Systems and Program Semantics<\/strong>
Noninterference, information flow control
Required Reading:<\/strong>
1. Reactive Noninterference<\/a>. Aaron Bohannon, Benjamin C. Pierce, Vilhelm Sj\u00f6berg, Stephanie Weirich, and Steve Zdancewic (CCS \u201909)
2. Noninterference Through Secure Multi-Execution<\/a>. Dominique Devriese and Frank Piessens (IEEE S&P \u201810)
Optional Reading:<\/strong>
1. A Lattice Model of Secure Information Flow<\/a>. Dorothy E. Denning (Comm. of the ACM \u201976)
2. Dynamic vs. Static Flow-Sensitive Security Analysis<\/a>. Alejandro Russo and Andrei Sabelfeld (CSF \u201810)
Due this week:<\/strong>
Review 3 on required reading from 9\/24 lecture due 9\/27 at midnight<\/strong><\/p>\n\n\n\n
9\/29 Discussion<\/strong> 3<\/strong>
Discussion lead: Student
10\/1 Applications of formal methods:<\/strong>
Optional Reading:<\/strong>
<\/strong>TBD
Due this week:<\/strong>
No reviews due this week
Project check-in 1 due 10\/4 at midnight<\/strong><\/p>\n\n\n\nUnit 3: Usable Security<\/h3>\n\n\n\n
10\/6 Introduction to Usable Security<\/strong>
What is “usable”?, parts of a usable security study
Optional Reading:<\/strong>
1. Why Johnny Can\u2019t Encrypt: A Usability Evaluation of PGP 5.0<\/a>. Alma Whitten and J.D. Tygar (USENIX Security \u201899)
2. “You do understand that people don\u2019t trust technology?”: Explaining Trusted Execution Environments to Non-Experts<\/a>. McKenna McCall, Carolina Carreira, Miguel Flores, and Lorrie Faith Cranor
3. Chapters 2.1, 2.3, 3.1-3.3, and 3.6 of Research Methods in Human-Computer Interaction<\/a>. Jonathan Lazar, Jinjuan Heidi Feng, and Harry Hochheiser
10\/8 Surveys and Interviews<\/strong>
Pros, cons, and development
Required Reading:<\/strong>
1. Evaluating the Usability of Privacy Choice Mechanisms<\/a>. Hana Habib and Lorrie Faith Cranor (SOUPS \u201822)
2. Do Users Write More Insecure Code with AI Assistants?<\/a> Neil Perry, Megha Srivastava, Deepak Kumar, and Dan Boneh (CCS \u201923)
Optional Reading:<\/strong>
1. Chapters 5.2-5.3, 5.6, 8.2, and 8.6 of Research Methods in Human-Computer Interaction<\/a>. Jonathan Lazar, Jinjuan Heidi Feng, and Harry Hochheiser
Due this week:<\/strong>
Review 4 on required reading from 10\/8 lecture due 10\/11 at midnight<\/strong><\/p>\n\n\n\n
10\/13 Discussion 4
<\/strong>Discussion lead: Student
<\/strong>
10\/15 Quantitative Analysis<\/strong>
Goals, null hypotheses, how to choose a statistic
Required Reading:<\/strong>
1. Misuse, Misreporting, Misinterpretation of Statistical Methods in Usable Privacy and Security Papers<\/a>. Jenny Tang, Lujo Bauer, and Nicolas Christin (SOUPS \u201825)
Due this week:<\/strong>
Review 5 on required reading from 10\/15 lecture due 10\/18 at midnight<\/strong>
Project check-in 2 due 10\/18 at midnight<\/strong><\/p>\n\n\n\n
10\/20 Discussion 5
<\/strong>Discussion lead: Student
<\/strong>
10\/22 Qualitative Analysis<\/strong>
Goals, codebooks and coding
Required Reading:<\/strong>
1. SoK: The Design Space of Usable Privacy Interventions for Parents: A Systemization of Knowledge<\/a>. Ann-Kristin Lieberknecht, and Sascha Loebner (SOUPS ’26)
2. Speculative Privacy Concerns about AR Glasses Data Collection<\/a>. Andrea Gallardo, Chris Choy, Jaideep Juneja, Efe Bozkir, Camille Cobb, Lujo Bauer, and Lorrie Cranor. PoPETS 2023 (4).
Optional Reading:<\/strong>
1. Reliability and Inter-rater Reliability in Qualitative Research: Norms and Guidelines for CSCW and HCI Practice<\/a>. Nora McDonald, Sarita Scfhoenebeck, and Andrea Forte (CSCW ’19)
Due this week:<\/strong>
Review 6 on required reading from 10\/22 lecture due 10\/25 at midnight<\/strong><\/p>\n\n\n\n
10\/27 Discussion 6
<\/strong>Discussion lead: Student <\/p>\n\n\n\nUnit 4: Usability in Formal Methods<\/h3>\n\n\n\n
10\/29 Smart Homes<\/strong>
Required Reading:<\/strong>
1. AutoTap: Synthesizing and Repairing Trigger-Action Programs Using LTL Properties<\/a>. Lefan Zhang, Weijia He, Jesse Martinez, Noah Brackenbury, Shan Lu, Blase Ur (ICSE \u201919)
2. Location-Enhanced Information Flow for Home Automations<\/a>. McKenna McCall, Ben Weinshel, Kunlin Cai, Ying Li, Eric Zeng, Devika Manohar, Lujo Bauer, Limin Jia, and Yuan Tian. PoPETS 2026 (1)
Optional Reading:<\/strong>
1. How Risky are Real Users\u2019 IFTTT Applets?<\/a> Camille Cobb, Milijana Surbatovich, Anna Kawakami, Mahmood Sharif, Lujo Bauer, Anupam Das, and Limin Jia (SOUPS \u201820)
Due this week:<\/strong>
Review 7 on required reading from 10\/29 lecture due 11\/1 at midnight<\/strong>
Project check-in 3 due 11\/1 at midnight<\/strong><\/p>\n\n\n\n
11\/3 Discussion 7
<\/strong>Discussion lead: Student
<\/strong>
11\/5 Information Flows on the Web<\/strong>
Required Reading:<\/strong>
1. Tainted Secure Multi-Execution to Restrict Attacker Influence<\/a>. McKenna McCall, Abhishek Bichhawat, and Limin Jia (CCS \u201823)
2. An Empirical Study of Information Flows in Real-World JavaScript<\/a>. Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld (PLDI \u201819)
Due this week:<\/strong>
Review 8 on required reading from 11\/5 lecture due 11\/8 at midnight<\/strong><\/p>\n\n\n\n
11\/10 Discussion 8
<\/strong>Discussion lead: Student <\/p>\n\n\n\nUnit 5: Research Ethics and Limitations<\/h3>\n\n\n\n
11\/12 What is (Ethical) Human Subjects Research?<\/strong>
IRBs, history of research ethics
Required Reading:<\/strong>
1. On the Feasibility of Stealthily Introducing Vulnerabilities in Open-Source Software via Hypocrite Commits<\/a>. Qiushi Wu and Kangjie Lu
2. Experimental evidence of massive-scale emotional contagion through social networks<\/a>. Adam DI Kramer, Jamie E Guillory, and Jeffrey T Hancock (PNAS \u201814)
Optional Reading:<\/strong>
1. Skilled or Gullible? Gender Stereotypes Related to Computer Security and Privacy<\/a>. Miranda Wei, Pardis Emami-Naeini, Franziska Roesner, and Tadayoshi Kohno (IEEE S&P \u201823)
2. The Menlo Report: Ethical Principles Guiding Information and Communication Technology Research<\/a>. David Dittrich and Erin Kenneally (US Department of Homeland Security \u201812)
Due this week:<\/strong>
Review 9 on required reading from 11\/12 lecture due 11\/15 at midnight<\/strong>
Project check-in 4 due 11\/15 at midnight<\/strong><\/p>\n\n\n\n
11\/16 Discussion 9
<\/strong>Discussion lead: McKenna
<\/strong>
11\/18 Limitations of Formal Methods and Usable Security<\/strong>
Revisiting attacker models and side channels, assumptions, and generalizability
Required Reading:<\/strong>
1. Replication: How Well Do My Results Generalize Now? The External Validity of Online Privacy and Security Surveys<\/a>. Jenny Tang, Eleanor Birrell, and Ada Lerner (SOUPS \u201822)
2. Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2<\/a>. Mathy Vanhoef and Frank Piessens (CCS \u201817)
Optional Reading:<\/strong>
1. Knowledge-Based Security of Dynamic Secrets for Reactive Programs<\/a>. McKenna McCall, Hengruo Zhang, and Limin Jia (CSF ’18).
Due this week:<\/strong>
Review 10 on required reading from 11\/18 lecture due 11\/29 at midnight<\/strong><\/p>\n\n\n\n
11\/23-11\/27 Fall Recess
<\/strong>No class<\/p>\n\n\n\n
12\/1 Discussion 10
<\/strong>Discussion lead: McKenna <\/p>\n\n\n\nFinal Projects and Reports<\/h3>\n\n\n\n
12\/3 Final project presentations<\/strong><\/p>\n\n\n\n
12\/8 Final project presentations<\/strong>
12\/10 McKenna traveling<\/strong>
No class
Final reports due 12\/15 at midnight<\/strong><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"