CS405

Security & Cryptography

Protecting systems and data: cryptographic building blocks and common vulnerability classes.

10 modules · 50 lessons · Practice after every lesson

Syllabus

  1. Module 1

    Security Principles and Threat Modeling

    • Assets, Adversaries, and Attack Surfaces
    • Confidentiality, Integrity, and Availability
    • Threat Modeling
    • Least Privilege and Defense in Depth
    • Security Economics and Human Factors
  2. Module 2

    Cryptographic Foundations

    • Security Definitions and Adversarial Games
    • Computational Hardness
    • Randomness and Entropy
    • Perfect and Computational Security
    • Cryptographic Failure Modes
  3. Module 3

    Symmetric Cryptography

    • Block Ciphers
    • Modes of Operation
    • Stream Ciphers
    • Authenticated Encryption
    • Nonce and Key Management
  4. Module 4

    Hashes and Authentication

    • Cryptographic Hash Functions
    • Message Authentication Codes
    • Password Hashing and Key Derivation
    • Merkle Trees
    • Integrity at Scale
  5. Module 5

    Public-Key Cryptography

    • Modular Arithmetic for Cryptography
    • RSA
    • Diffie–Hellman Key Exchange
    • Elliptic-Curve Cryptography
    • Hybrid Encryption
  6. Module 6

    Signatures, PKI, and Secure Channels

    • Digital Signatures
    • Certificates and Public-Key Infrastructure
    • TLS Handshakes
    • Forward Secrecy
    • Protocol Downgrades and Verification
  7. Module 7

    Authentication and Authorization

    • Authentication Factors and Sessions
    • Access-Control Models
    • Capabilities and Tokens
    • Federated Identity and OAuth
    • Authorization Logic and Confused Deputies
  8. Module 8

    Software and Web Security

    • Memory-Safety Vulnerabilities
    • Injection and Input Validation
    • Cross-Site Scripting and Request Forgery
    • Deserialization and Supply-Chain Risks
    • Secure Coding and Review
  9. Module 9

    Systems and Network Security

    • Operating-System Isolation
    • Sandboxing and Virtualization
    • Network Attacks and Defenses
    • Secure DNS and Routing
    • Detection, Logging, and Incident Response
  10. Module 10

    Privacy and Advanced Security

    • Privacy Models and Data Minimization
    • Side Channels
    • Anonymity and Traffic Analysis
    • Zero-Knowledge and Secure Computation: An Introduction
    • Security Governance and Responsible Disclosure

Start Security & Cryptography.

No setup, nothing to install. Try the first lessons before you sign up.