ACM CCS (Computer and Communications Security) Courses

Association for Computing Machinery (ACM)

DeepCorr: Strong Flow Correlation Attacks on Tor Using Deep Learning

Syllabus: Intro Flow Correlation Attack Forcing Traffic Through Malicious Relays Bottomline: Flow correlation is key to many Tor attacks Intuition: Tor is super noisy! Architecture Data Collection Comparison with Previous Works Impact of time Effect of F…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

Peeling the Onion's User Experience Layer: Examining Naturalistic Use of the Tor Browser

Syllabus: Introduction What is Tor Research Goals Methodology The Bad Implications Limitations Future Work Summary Motivation Questions Comments Audience Targeting Onion Addresses

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - SandScout: Automatic Detection of Flaws in iOS Sandbox Profiles

Syllabus: Intro Flaws iOS Architecture iOS Sandbox Research Question Solution Overview Human readable Graph Sandbox Profile Language Example Questions Writable files Proof of concept How it works Results Disclosure Process Apple Maps iTunes Directory Den…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - GAME OF DECOYS: Optimal Decoy Routing Through Game Theory

Syllabus: Intro Decoy Routing Paper Introduction Previous Work Game of Thrones Placement Strategies Central Deployment Model Simulation Results Sensor Profiles Decoy Budgets Autonomous Deployment Decoy Fee China Analysis Conclusion Intuition

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - PREDATOR: Proactive Recognition and Elimination of Domain Abuse at Time-Of-Registration

Syllabus: Intro Domain Abuse in Practice Case Study Introduction Lazy: Batch Registration Parasitic: Domain Reuse Ground Truth Labeling Errors Raw Data Overview Registration History Features Batch Correlation Features Feature Vectorization Detection Perf…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - Identifying the Scan and Attack Infrastructure Behind Amplification DDoS Attacks

Syllabus: Introduction What is amplification DDoS Previous approaches Scanning Honeypot Community Torics Results Trilateration Time to Live Problems Experiments Conclusion

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - Safely Measuring Tor

Syllabus: Intro Background: Using Circuits Background: Directory Authorities Motivation: Why Measure Tor? Motivation: Measurement Challenges Motivation: Missing Measurements PrivCount: Initialization PrivCount: Configuration PrivCount: Execution - Setup…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - MiddlePolice: Toward Enforcing Destination-Defined Policies in the Middle of the Internet

Syllabus: Introduction Distributed Denial of Service Commercial Solutions Advantages and Limitations Network Capabilities MiddlePolice Architecture Challenges Capabilities How to avoid underestimates How to accept a packet Bypass traffic throttle Validat…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

SFADiff: Automated Evasion Attacks and Fingerprinting Using Blackbox Differential Automata Learning

Syllabus: Intro Motivation Evaluating Web Security Products Why Differential Testing Why not Differential Testing Overview Symbolic Finite Automata (SFA) Learning Symbolic Automata Why Differential Automata Learning Bootstrapping SFA Learning Difference…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - Android ION Hazard: the Curse of Customizable Memory Management System

Syllabus: Intro Everyday Memory Requirements Special Memory Requirements How to meet them: Traditional Design How to meet them: New Design Advantages of the new design Architecture: ION Rest of the talk... Dos: Case Study DoS: Discovery DoS: Defense Info…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - Host of Troubles: Multiple Host Ambiguities in HTTP Implementations

Syllabus: Intro Multiparty interactions in current Internet Previous works about ambiguity How HTTP requests are processed Host - A critical HTTP field Technique 1: Multiple Host header How do implementations handle requests with multiple Host header? Ho…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - Online tracking: A 1-million-site measurement and analysis

Syllabus: Intro Measurement forces companies to fox problems Measurement is effective because most actors are not malicious A need for a common platform Detecting Fingerprinting Abusing WebRTC candidate generation for tracking Using Audio Context for fin…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

Lurking Malice in the Cloud: Understanding and Detecting Cloud Repository as a Malicious Service

Syllabus: Intro Cloud Hosting Services Malice lurking in the Cloud Finding Bad Repositories (BARs) Questions Remain Unsettled Data Collection - Ground Truth A Study in BARS Feature Extraction BarFinder Evaluation - Unknown Set Landscape Lifetime and Evas…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - Accessorize to a Crime: Real and Stealthy Attacks on State-Of-The-Art Face Recognition

Syllabus: Intro Machine Learning Is Ubiquitous What Do You See? The Difference What Are the Adversary's Capabilities? To generate attacks, attacker needs to know how changing input affects output What's a (Deep) Neural Network? Face Recognition . Applica…

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course

Association for Computing Machinery (ACM)

CCS 2016 - CSP is Dead, Long Live CSP!

Syllabus: Introduction Who are we What are we doing Research questions Postprocessing Why Normalization CSP Use Cases CSP Policies Summary State of CSP Bypass Probability Whitelisted Domains Tool Support

• YouTube
• Less than 1 hour of material
• On-Demand
• Free Online Course