A public key infrastructure (PKI) provides secure communications between two different entities over an untrusted network. Due to this ability, PKIs are now central to security on the Internet: there are a number of large-scale PKIs in use today such as DNSSEC, HTTPS, and the RPKI. This course examines basic network security models and public key infrastructure that entwines multiple layers of the network stack: application, transport, and network layer. Topics include concepts in basic threat models in networking, public key infrastructure, data-driven approach for securing Internet, etc. Students are required to write critiques on assigned papers, propose and complete a research project individually or in teams, and give presentations on a related topic. This course instance belongs to the Distributed Systems cluster and Security cluster.

All students are requred to read the paper before the class and actively participate the in-class discussion. The class projects are a major part of this course.

We will be using Mycourses as a course discussion/bulletin board. You are expected to check it at least once every few days, use it as the first place to ask questions, and answer others' questions. The professor will regularly monitor the board, and your participation will count towards your grade.

Below is a rough schedule for the lectures in CSCI-759. This is subject to change; please check back often.

 

Lecture	Class	Topic	Paper	Presenter
01  01/14Tue	GOL-3525	Intro and Course Overview	-	Prof. Chung
02  01/16Thu	GOL-3525	Network Protocols with PKI	-	Prof. Chung
03  01/21Tue	GOL-3525	DNSSEC	01, 02	Prof. Chung
04  01/23Thu	Mycourse	DNSSEC	01, 02	(+) 01, 02, 03, 04 (-) 05, 05, 06, 07
05  01/28Tue	GOL-3525	DNSSEC	03, 04	01, 02
06  01/30Thu	Mycourse	DNSSEC	03, 04	(+) 03, 04, 05 (-) 06, 07, 08
07  02/04Tue	GOL-3525	HTTPS/TLS	Intro + 11	Prof. Chung
08  02/06Thu	Mycourse	HTTPS/TLS	01, 02	(+) 05, 07, 08 (-) 01, 02, 03, 04
09  02/11Tue	GOL-3525	HTTPS/TLS	03, 04	03, 04
10  02/13Thu	Mycourse	HTTPS/TLS	03, 04	(+) 05, 07 (-) 08, 01, 02
11  02/18Tue	GOL-3525	HTTPS/TLS	05, 06	05, 07
12  02/20Thu	GOL-3525	HTTPS/TLS	07, 08	08, 01
—  02/25Tue	—	No Class (NDSS Travel)
13  02/27Thu	Mycourse	HTTPS/TLS	05, 06	(+) 01, 02, 03 (-) 04, 05
14  03/03Tue	Mycourse	HTTPS/TLS	07, 08	(+) 03, 04, 05 (-) 07, 08
15  03/05Thu	GOL-3525	HTTPS/TLS	09, 10	02, 03
—  03/10Tue	—	No class (Spring Break)
—  03/12Thu	—	No class (Spring Break)
—  03/17Tue	—	No class (Spring Break)
—  03/19Thu	—	No class (Spring Break)
16  03/24Tue	Zoom	HTTPS/TLS	11, 12	04, 05
17  03/26Thu	Mycourse	HTTPS/TLS	11, 12	(+) 05, 07, (-) 08, 01, 02
18  03/31Tue	Zoom	HTTPS/TLS	13, 14	07, 08
19  04/02Thu	Mycourse	HTTPS/TLS	13, 14	(+) 01, 02, 03 (-) 04, 07, 08
20  04/07Tue	Zoom	HTTPS/TLS	01, 02	01, 02
21  04/09Thu	Mycourse	HTTPS/TLS	09, 10	(+) 01, 02, 03 (-) 04, 05,
22  04/14Tue	Zoom	Email	01, 02	03, 04
23  04/16Thu	Mycourse	Email	01, 02	(+) 03, 04, 05 (-) 07, 08
24  04/21Tue	Zoom	RPKI	01, 02	05, 07
25  04/23Thu	Mycourse	RPKI	01, 02	(+) 01, 02, 05 (-) 07, 08

Below is a list of papers, which will be discussed at the class.  

Topic	ID	Paper
DNSSEC	01	A Longitudinal, End-to-End View of the DNSSEC Ecosystem [Security’17]
DNSSEC	02	Understanding the Role of Registrars in DNSSEC Deployment [IMC’17]
DNSSEC	03	DNSSEC and Its Potential for DDoS Attacks [IMC’14]
DNSSEC	04	Roll, Roll, Roll your Root: A Comprehensive Analysis of the First Ever DNSSEC Root KSK Rollover [IMC’19]
HTTPS	01	Censys: A Search Engine Backed by Internet-Wide Scanning [CCS’15]
HTTPS	02	An End-to-End Measurement of Certificate Revocation in the Web's PKI [IMC’15]
HTTPS	03	Measuring and Applying Invalid SSL Certificates: The Silent Majority [IMC’16]
HTTPS	04	Measurement and Analysis of Private Key Sharing in the HTTPS Ecosystem [CCS’16]
HTTPS	05	Analysis of SSL certificate reissues and revocations in the wake of Heartbleed [IMC’14]
HTTPS	06	Tracking Certificate Misissuance in the Wild [Oakland’18]
HTTPS	07	The Security Impact of HTTPS Interception [NDSS17]
HTTPS	08	The Rise of Certificate Transparency and Its Implications on the Internet Ecosystem [IMC’18]
HTTPS	09	A First Look at Certification Authority Authorization (CAA) [CCR’18]
HTTPS	10	Does Certificate Transparency Break the Web? Measuring Adoption and Error Rate [Oakland’19]
HTTPS	11	Is the Web Ready for OCSP Must Staple? [IMC’18]
HTTPS	12	Mission Accomplished? HTTPS Security after DigiNotar [IMC’17]
HTTPS	13	CRLite: a Scalable System for Pushing all TLS Revocations to All Browsers [Oakland’17]
HTTPS	14	You Are Who You Appear to Be: A Longitudinal Study of Domain Impersonation in TLS Certificates [CCS'19]
Email	01	Security by Any Other Name: On the Effectiveness of Provider Based Email Security [CCS’15]
Email	02	Neither Snow Nor Rain Nor MITM... An Empirical Analysis of Email Delivery Security [IMC’15]
RPKI	01	Why Is It Taking So Long to Secure Internet Routing [ACMQueue’14]
RPKI	02	RPKI is Coming of Age: A Longitudinal Study of RPKI Deployment and Invalid Route Origins [IMC'19]
RPKI	04	On the Risk of Misbehaving RPKI Authorities [hotnets’16]
RPKI	05	Are We There Yet? On RPKI's Deployment and Security [NDSS'17]
RPKI	06	MaxLength Considered Harmful to the RPKI  [CoNEXT’17]

The description of project logistics is here Students need to submit their project to Mycourses.