ENEE457 Computer Systems Security: Fall 2024 Readings

• Some lecture notes from Jennifer Rexford at Princeton on basic assembly language:
  Lecture 14
  Lecture 15
  
• Paper on Return Oriented Programming (full version of Shacham CCS '07 paper) (from lecture on 9/9/24).
• Paper on Control Flow Integrity (from lecture on 9/11/24).
• Paper on Modular Control Flow Integrity (from lecture on 9/11/24).
• Paper on Heap Overflow attacks that target the heap metadata/C memory allocation and deallocation (related to lecture on 9/16/24).
• Samy Kamkar describing how he launched his famous attack on MySpace: here.
• Information on SQL injection that bypasses filtering/escaping: here and here.
• An article on a scalable certificate revocation system by UMD faculty here.
• More background on Static Analysis.
• Reference on Dining Cryptographers (DC-Nets) The Dining Cryptographers Problem: Unconditional Sender and Recipient Untraceability.
• References on adversarial machine learning: A Unified Gradient Regularization Family for Adversarial Examples and a survey paper.
References on differential privacy and differential privacy in machine learning: The Algorithmic Foundations of Differential Privacy and Stochastic gradient descent with differentially private updates.