This course schedule is preliminary, and will be altered as the semester progresses. While I will try to announce changes as they happen, it is the responsibility of the students to frequently check this web-page for any changes to the schedule, readings or assignments.
Note: The slides will be available after each lecture via a slides link below the lecture topic.
| Date | Topics | Readings | Notes | |
|---|---|---|---|---|
| 08/27/2026 | Course Introduction Slides |
- | Project Proposal assigned; due September 15th at 11:59pm | |
| 09/01/2026 | Research Methods 1 (Reading Papers and Writing Effective Reviews) Slides |
[READ] Michael J. Hanson, Efficient Reading of Papers in Science and Technology. University of Washington, 1989. (link) | ||
| 09/03/2026 | [Asher Montague] Smart Home Platform Security Analysis Slides |
[Ungraded REVIEW] 1. Security Analysis of Emerging Smart Home Applications (link) | ||
| 09/08/2026 | CLASS CANCELLED | |||
| 09/10/2026 | Project Speed Dating! | 1. USENIX Security Proceedings (link) 2. ACM CCS Proceedings (link) 3. IEEE Security & Privacy Proceedings (link) 4. ISOC NDSS Proceedings (link) |
Sept 8th, Last Day to ADD/DROP | |
| 09/15/2026 | Research Methods 2 - Writing Papers | 1. Project Proposal Due, 2. Related work assigned; due October 13th at 11:59pm |
||
| 09/17/2026 | [Nic Janis] Basic Crypto Misuse Analysis | [READ] 1. Fahl, Sascha, Marian Harbach, Thomas Muders, Lars Baumgärtner, Bernd Freisleben, and Matthew Smith. “Why Eve and Mallory love Android: An analysis of Android SSL (in) security.” In Proceedings of the 2012 ACM conference on Computer and communications security, pp. 50-61. ACM, 2012. (link) [OPTIONAL] 2. Anderson, R. 1993. Why cryptosystems fail. In Proceedings of the 1st ACM Conference on Computer and Communications Security (Fairfax, Virginia, United States, November 03 - 05, 1993). CCS ‘93. (link) |
||
| 09/22/2026 | [Discussion - only ] Network Security | [REVIEW] SoK: Security Evaluation of Home-Based IoT Deployments (link) | ||
| 09/24/2026 | [Asher Montague] Smart home platforms | [REVIEW] Kaushal Kafle, K. Moran, Sunil Manandhar, Adwait Nadkarni, and D. Poshyvanyk, “A Study of Data Store-based Home Automation,” in Proceedings of the 9th ACM Conference on Data and Application Security and Privacy (CODASPY), Dallas, TX, USA, 2019, pp. 73–84. (link) | ||
| 09/29/2026 | [Maiqi Jiang] Fine-grained access control | [REVIEW] Decentralized Action Integrity for Trigger-Action IoT Platforms (link) | ||
| 10/01/2026 | [Colin Soule] Provenance | [REVIEW] Fear and Logging in the Internet of Things (link) | ||
| 10/06/2026 | [Cora Snyder] Detecting security and safety issues in IoT Apps | [REVIEW] Soteria: Automated IoT Safety and Security Analysis (link) | ||
| 10/08/2026 | FALL BREAK, NO CLASS | |||
| 10/13/2026 | Class Cancelled, Travel | 1. Related Work Due, 2. Research Plan assigned; due November 3rd at 11:59pm |
||
| 10/15/2026 | [Nic Janis] Preventing security and safety issues in IoT Apps | [REVIEW] IoTGuard: Dynamic Enforcement of Security and Safety Policy in Commodity IoT (link) | ||
| 10/20/2026 | [Asher Montague] IoT Apps? | [REVIEW] Sunil Manandhar, K. Moran, Kaushal Kafle, Ruhao Tang, D. Poshyvanyk, and Adwait Nadkarni, “Towards a Natural Perspective of Smart Homes for Practical Security and Safety Analyses.,” in Proceedings of the IEEE Symposium on Security & Privacy (S&P), San Francisco, CA, USA, 2020. (link) | ||
| 10/22/2026 | Project Status Presentations | Oct 26, last day to withdraw | ||
| 10/27/2026 | Project Status Presentations | |||
| 10/29/2026 | [Colin Soule] Economics of IoT Security | [REVIEW] Emami-Naeini, Pardis, Janarth Dheenadhayalan, Yuvraj Agarwal, and Lorrie Faith Cranor. “Are Consumers Willing to Pay for Security and Privacy of IoT Devices?.” In In Proceedings of the 32nd USENIX Security Symposium. 2023. (link) | ||
| 11/03/2026 | ELECTION DAY, NO CLASS | Research Plan Due | ||
| 11/05/2026 | [Paul Brewster] Privacy Policies | [REVIEW] Manandhar, Sunil, Kaushal Kafle, Benjamin Andow, Kapil Singh, and Adwait Nadkarni. “Smart Home Privacy Policies Demystified: A Study of Availability, Content, and Coverage.” In 31st USENIX Security Symposium (USENIX Security 22), pp. 3521-3538. 2022. (Link) | ||
| 11/10/2026 | [Maiqi Jiang] Security Compliance - Analysis and User Perceptions | [REVIEW] Mandal, Prianka, Amit Seal Ami, Victor Olaiya, Sayyed Hadi Razmjo, and Adwait Nadkarni. “Belt and suspenders or just red tape?: Investigating Early Artifacts and User Perceptions of IoT App Security Certification.” (Link) | ||
| 11/12/2026 | [Maiqi Jiang] Industry Perspectives on IoT Security Compliance | [REVIEW] Prianka Mandal and Adwait Nadkarni. “`We can’t change it overnight’: Understanding Industry Perspectives on IoT Product Security Compliance and Certification.” (Link) | ||
| 11/17/2026 | [Paul Brewster] Legal Implications of IoT Security Failures | [REVIEW] Prianka Mandal, Amit Seal Ami, Iria Giuffrida, Daniel Shin, Ella Sullivan, and Adwait Nadkarni. “`We can’t allow IoT vendors to pass off all such liability to the consumer’: Investigating the U.S. Legal Perspectives on Liability for IoT Product Security.” (Link) | ||
| 11/19/2026 | [Nic Janis] Physical Event Verification | [REVIEW] Ozmen, Muslum Ozgur, Ruoyu Song, Habiba Farrukh, and Z. Berkay Celik. “Evasion attacks and defenses on smart home physical event verification.” NDSS, 2023. (Link) | ||
| 11/24/2026 | [Colin Soule] (Remote Class) Sensor spoofing! | [REVIEW] Kim, Hyungsub, Rwitam Bandyopadhyay, Muslum Ozgur Ozmen, Z. Berkay Celik, Antonio Bianchi, Yongdae Kim, and Dongyan Xu. “A systematic study of physical sensor attack hardness.” (Link) | ||
| 11/26/2026 | THANKSGIVING, NO CLASS | |||
| 12/01/2026 | [Cora Snyder] Controllers: Mobile-IoT apps | [REVIEW] Jin, Xin, Sunil Manandhar, Kaushal Kafle, Zhiqiang Lin, and Adwait Nadkarni. “Understanding iot security from a market-scale perspective.” (Link) | ||
| 12/03/2026 | [Cora Snyder] Controllers: Matter | [REVIEW] Wang, Haoqiang, Yiwei Fang, Yichen Liu, Ze Jin, Emma Delph, Xiaojiang Du, Qixu Liu, and Luyi Xing. “Hidden and Lost Control: on Security Design Risks in IoT User-Facing Matter Controller.” (Link) | Final Paper Due, including the artifact |