CS338 Computer Security
Wednesday, 16 October 2024

+ No 4a office hour today
- (I'm teaching Bridger's CS208)
- I'll be grading tests but also Zoomable
    3:00-5:00 this afternoon. Slack me if you
    want to talk.

+ Thursday CS Bits & Bytes, 3:30-4:30 AND 329
- Talking about tech news: me, Sneha, Jean
- Cool news stories: AI and art, TikTok's future, encryption & law enforcement
- Come ready with your own thoughts and questions!

+ For Friday
- Read the Doctorow opinion piece
- It's easy to find more info (so much info!) about the DMCA online
- Looking forward to hearing your questions and opinions

- DMCA section 1201 "technical protection measures" (TPMs)
    - What are they?
    - Why would you outlaw "circumvention"?
- One case study: tractors & copyright

+ Ethics homework
- Questions? Comments?

+ Information security & the "CIA Triad"
- Confidentiality
- Integrity
- Availability
- Scenario: simple website with login (e.g., your medical records)
    - What do C, I, and A mean in this context?
        C: protect med data, credit card data from unauthorized viewing
        I: allow updates only when doctor/nurse/other authority does
            a legit update
           login needs to be secure
        A: Backups of the website & data; make sure the website has up-time
    - How can they be attacked (threat model)?
- Scenario: OneCard funds
- What, if anything, is missing from "CIA"?

=====

+ Demo: a little bit of hacking