Defense Against the Dark Arts

Course Objectives

This course aims to equip students with a comprehensive understanding of the multifaceted realm of computer security. Students will grasp the intricacies of software vulnerabilities, and discern how adversaries exploit them. The curriculum offers insights into a plethora of malware types, such as viruses, worms, ransomware, and trojans, as well as other attacks encompassing social engineering, phishing, and denial of service (DoS). By the end of the course, students will be proficient in the methods to prevent, detect, and repair malware threats and will have hands-on experience with program binary examination tools to identify malicious code.

View the Full Schedule

Instructor

Wajih Ul Hassan

hassan@virginia.edu

Office Hours: Wednesdays 11AM-Noon (Rice Hall 522)

Assignment TAs

Matthew Beck

mtb2tgk@virginia.edu

Office Hours: : Mondays 2-3pm and Wednesdays 3-4pm (Rice Hall 442)

Muhammad Shoaib

ewe4gy@virginia.edu

Office Hours: Mondays 3-4 PM and Wednesdays 2-3pm (Rice Hall 442)

Quiz TA

Jingyi Cui

cau8rc@virginia.edu

Office Hours: Wednesdays 10:30-11:30 AM (Rice Hall 442)

Lectures

TuTh 3:30PM-4:45PM, Room: Olsson Hall 011

Required Text Book

No textbook is required as none align with my approach to cybersecurity. However, there are many online resources. Here is a free security textbook – match the relevant topics to our class.

Communications

I am committed to supporting your learning experience, which is why I will be recording lectures and making them available on Canvas. However, active participation is essential. If class attendance falls below 50%, I’ll have to reconsider and may cease the lecture recordings.
Class discussion: Piazza
Lecture materials (slides, assignments): Canvas

Grading Breakdown

Assignments 35%

Total seven programming assignments.
Assignments will be weighted according to complexity and difficulty.
A grade of zero will be recorded for late assignments unless prior arrangements are made.
Late submission of assignments will be accepted for up to two (2) days after the deadline, with a 10% per day penalty.
You are free to develop assignments on any platform/OS you wish. However, you are responsible for porting your code to the platform the class is using and ensuring that it runs correctly. Our reference system will be Ubuntu 18.04 desktop.

Quizzes 15%

Total six quizzes.
All quizzes will be in-person (at the start of the class).
Out of these six quizzes, only the best five will count towards your grade (N-1 Policy).
All the quizzes will be announced.

Midterm Exam 25%

Module 1 is included.

Final Exam 25%

Modules 2, 3, and 4 are included

Policies and Statements

Academic Integrity Students are expected to be familiar with the university honor code, including the section on academic fraud.

Students are encouraged to discuss programs in general and to help one another find bugs in existing programs. However, using another’s code or writing code for someone else is cheating and a violation of the University’s Honor System. This includes consulting solutions to assignments from previous years or tests from previous years. Keep code listings to provide evidence of your creative development.
Unless otherwise noted, exams and individual assignments will be considered pledged that you have neither given nor received help. This means that you are not allowed to describe problems on an exam, assignment, or project to a student who has not taken it yet. You are also not allowed to show exam papers to another student or view another student’s exam papers while working on an exam.
Sending, receiving, or otherwise copying or describing the contents of electronic files that are part of course assignments are not allowed collaborations (except for those explicitly allowed in assignment instructions). Assignments or exams where honor infractions or prohibited collaborations occur will receive a zero grade for that entire assignment or exam. Such infractions will also be submitted to the Honor Committee, if appropriate.

If you have questions on what is allowable, please ask!

Students with disabilities or learning needs It is my goal to create a learning experience that is as accessible as possible. If you anticipate any issues related to the format, materials, or requirements of this course, please meet with me outside of class so we can explore potential options. Students with disabilities may also wish to work with the Student Disability Access Center (SDAC) to discuss a range of options to removing barriers in this course, including official accommodations. We are fortunate to have an SDAC advisor, Courtney MacMasters, physically located in Engineering. You may email her at cmacmasters@virginia.edu to schedule an appointment. For general questions please visit the SDAC website: sdac.studenthealth.virginia.edu. If you have already been approved for accommodations through SDAC, please send me your accommodation letter and meet with me so we can develop an implementation plan together.

Religious Accommodations It is the University’s long-standing policy and practice to reasonably accommodate students so that they do not experience an adverse academic consequence when sincerely held religious beliefs or observances conflict with academic requirements.

Students who wish to request academic accommodation for a religious observance should submit their request to me by email as far in advance as possible. Students who have questions or concerns about academic accommodations for religious observance or religious beliefs may contact the University’s Office for Equal Opportunity and Civil Rights (EOCR) at UVAEOCR@virginia.edu or 434-924-3200.

Harassment, Discrimination, and Interpersonal Violence The University of Virginia is dedicated to providing a safe and equitable learning environment for all students. If you or someone you know has been affected by power-based personal violence, more information can be found on the UVA Sexual Violence website that describes reporting options and resources available - www.virginia.edu/sexualviolence.

The same resources and options for individuals who experience sexual misconduct are available for discrimination, harassment, and retaliation. UVA prohibits discrimination and harassment based on age, color, disability, family medical or genetic information, gender identity or expression, marital status, military status, national or ethnic origin, political affiliation, pregnancy (including childbirth and related conditions), race, religion, sex, sexual orientation, or veteran status. UVA policy also prohibits retaliation for reporting such behavior.

If you witness or are aware of someone who has experienced prohibited conduct, you are encouraged to submit a report to Just Report It (justreportit.virginia.edu) or contact EOCR, the office of Equal Opportunity and Civil Rights.

If you would prefer to disclose such conduct to a confidential resource where what you share is not reported to the University, you can turn to Counseling & Psychological Services (“CAPS”) and Women’s Center Counseling Staff and Confidential Advocates (for students of all genders).

As your professor and as a person, know that I care about you and your well-being and stand ready to provide support and resources as I can. As a faculty member, I am a responsible employee, which means that I am required by University policy and by federal law to report certain kinds of conduct that you report to me to the University’s Title IX Coordinator. The Title IX Coordinator’s job is to ensure that the reporting student receives the resources and support that they need, while also determining whether further action is necessary to ensure survivor safety and the safety of the University community.

Support for your career development Engaging in your career development is an important part of your student experience. For example, presenting at a research conference, attending an interview for a job or internship, or participating in an extern/shadowing experience are not only necessary steps on your path but are also invaluable lessons in and of themselves. I wish to encourage and support you in activities related to your career development. To that end, please notify me by email as far in advance as possible to arrange for appropriate accommodations. </details>

Community and Identity The Center for Diversity in Engineering (CDE) is a student space dedicated to advocating for underrepresented groups in STEM. It exists to connect students with the academic, financial, health, and community resources they need to thrive both at UVA and in the world. The CDE includes an open study area, event space, and staff members on site. Through this space, we affirm and empower equitable participation toward intercultural fluency and provide the resources necessary for students to be successful during their academic journey and future careers.

Ethics Statement This course includes topics related to computer security and privacy. As part of this investigation, we may cover technologies whose abuse could infringe on the rights of others. As computer scientists, we rely on the ethical use of these technologies. Unethical use includes circumvention of an existing security or privacy mechanisms for any purpose, or the dissemination, promotion, or exploitation of vulnerabilities of these services. Any activity outside the letter or spirit of these guidelines will be reported to the proper authorities and may result in dismissal from the class and possibly more severe academic and legal sanctions.