CS 558: Network Security
Time: Spring Semester, Mondays and Wednesdays, 4:00pm to 5:20pm
Location: Salisbury Labs 411
This course examines the intersection of computer networking and security, which holds many challenging problems and opportunities for research. With guidance from the professor, students will survey recent network security publications, develop a novel research project, and produce their own research paper. Reading and project topics will include online attacks (such as drive-by downloads), cybercrime (such as phishing), and techniques and mechanisms to protect Internet infrastructure and users.
(Prerequisite: a strong background in computer networking and systems, either at the undergraduate or graduate level. Students may take the course concurrently with CS513, even though that is their only background, but the early portion of the course may be challenging.)
Instructor: Craig Shue
Email: cshue at cs.wpi.edu
Office: Fuller Labs 236
Office Hours: Walk-ins welcome. Appointments also available, if desired.
Course Policies and Procedures
The following represent the official policies and procedures for the course. Please review this information and, if you have questions, discuss them with the professor as soon as possible.
This course will use a special system, called InstructAssist, that uses modules specifically designed for this course. We will use this system for all grade posting and assignment submissions. We will not be using the myWPI/Blackboard system in this course. The InstructAssist system is available at https://ia.wpi.edu/classes/2014_spring_cs558/. InstructAssist uses SSL for authenticity and encryption to protect student records.
As a research-focused course, students in CS 558 will read research papers and provide commentary on them through paper critiques. However, students will also learn more about the peer review process by evaluating their classmates' critiques (and vice versa).
Students will be designated as an "author" or a "reviewer" for each assigned reading. As an author, a student will submit a roughly one-page critique of the work. This critique will include three-parts:
- a summary, which describes the problem being addressed, the
paper's contributions, the approach, and the conclusions,
- a critique, which evaluate the significance of the
problem and contribution and the validity of the authors'
- a synthesis, in which students will apply what they learned by describing alternative methodologies, applications to other contexts, future work, and insights gained from the work.
If a student is designated as a "reviewer" for a given paper, the student will not be required to submit a critique. Instead, the student will act as a peer-reviewer for the critiques other students have submitted. The reviewers will comment on and score each of the three parts their peers wrote and provide a final review score. Each reviewer will examine roughly three other students' write-ups.
Students will learn their author or reviewer status and submit their summaries/reviews through the InstructAssist Peer Review system. Submissions will not be accepted in any other format. Further, late submissions will not be accepted since timely participation is required to ensure time for feedback.
After the peer review has completed, the instructor will act as a journal editor. The instructor will score the original critique as well as the comments and scores issued by the reviewers. The instructor will issue a final score to each of the authors and the reviewers. The editor will be influenced by compelling reviews, but will override any reviews that are off-base. Reviewers will receive poor grades for reviews that are not substantiated by comments or that are inconsistent with the quality of the author's submission.
The peer review will be a "double-blind" process: the author will not see the names of the reviewers, nor will the reviewers learn the authors's name. This both eliminates bias and protects student privacy. Naturally, the instructor will see all student names when grading.
The peer review process is meant to be a learning experience. Students will likely begin the course with lower quality summaries and reviews. However, by receiving feedback from the instructor and each other, along with anonymously seeing other students' work, each student is likely to improve in writing quality. Students should expect that submissions that meet all the requirements will be awarded a "B" grade while an exceptional submission will be awarded an "A" grade.
Students will be expected to lead discussions on one or two research papers during the term. Students will be required to provide slides and guide the class discussion. While portions of the presentation may be more traditional lecture style, students are encouraged to involve the course by posing questions (in particular, synthesis questions) to engage the audience.
Students are required to engage in a novel, semester-long research project. The research project will be done in small teams. Students are discouraged from working alone on the research project. In some cases, two separate teams may work on the same research project; however, these teams will work separately and will have separate evaluations.
Students will have the flexibility to either choose from the list of projects provided by the instructor or formulate their own with the help of the instructor. Each project will likely require a different skill set from the participants; students should be prepared to learn new technologies "on the fly" to successfully complete the project.
Each project will culminate in a term paper that is fashioned like the papers found in the network security literature. To make this problem tractable, it has been deconstructed into the following set of required deliverables (all page counts assume ACM/IEEE LaTeX templates). These deliverables must be completed in order (note, the "Introduction" section comes towards the end):
- Project Proposal: The proposal will describe the work
to be performed along with a detailed NABC (Needs, Approach,
Benefits, Competition) analysis on the work. As part of the
proposal, students are expected to ensure the work is novel and
describe the general methodology and resources needed to complete
the work. The research proposal will likely be at least three
- Literature Review: Students must perform a survey of the
research literature to determine what work exists in the field and
how their proposed project will fit in with these goals. Students
should identify at least 15 prior works in the area and compose a
short paragraph describing the work, its contributions, and how it
is distinct from the proposed project. This literature review will
likely be at least three pages.
- Methodology: The methodology write-up will
describe the experiments, in detail, that the students will perform
as part of the project. The methodology must be articulated to the
extent that another researcher in the field could replicate the
methodology without prior knowledge of the project. The methodology
section will likely be at least two pages.
- Empirical Results: Students should describe the results
of conducting their research experiments. This section should
identify what exactly the outcomes are and whether the results are
If the results are not yet ready, the student may use placeholders. However, the results section must be written in detail such that results could simply be plugged into the writing/tables and be perfectly readable. This section will likely be at least a page.
- Conclusion: Students should write a conclusion for the
work, summarizing the contributions, the impact, and potential for
follow-on work. This section will likely be at least half a page.
- Introduction: Once the project is nearly finished, the
students should write an introduction to the work, describing the
motivations (likely reusing the NABC analysis in the proposal), the
intended goals (again, from the proposal), highlights of the
methodology (from the methodology section) and the key results of
the work (from the results section). The introduction will likely be
at least a page.
- Abstract: The abstract will summarize the motivation,
contributions, and key results of the work in a concise manner. The
abstract will likely be at most three paragraphs.
- Presentation: At the culmination of the project, students will present their work to the class using slides. These presentations will likely be a maximum of 20 minutes (and perhaps shorter). Students are expected to prepare and practice the presentation to give it as if it were being presented at a conference.
Each project is expected to produce a publication-quality report at completion. Students will receive full credit for projects that are methodically investigated, even if they yield negative results (e.g., the hypothesis does not hold) through no fault of the students. However, such projects may not be well received by the research community if peer-review publication is pursued.
Students should plan to meet with the instructor as a team outside of class hours on a weekly basis to discuss progress on the project.
While the research project is described in terms of writing outputs, students must also submit any code, tools, and data that have been used in pursuing the research project. If the instructor cannot confirm the research results based on the supplied materials, the instructor may consider the results to be fabricated, which is a violation of the WPI Academic Honesty Policy. As indicated in the Academic Honesty section, such violations will have negative consequences.
Students must be careful to appropriately credit sources. While students may quote other sources with proper citations, such quotations should be minimized. Excluding quotations, students must write every word in their research papers. Copying material without appropriate citation constitutes plagiarism and violates the WPI Academic Honesty Policy. As indicated in the Academic Honesty section, such violations will have negative consequences.
We will use the following deadlines for the research project. All deadlines are at 11:59pm Eastern Time (ET).
- Jan. 26: Proposal due
- Feb. 2: Literature Review due
- Feb. 9: Methodology Section for Paper due
- Mar. 16: Results Section for Paper due
- Mar. 16: Initial Submission of Code/Tools/Data
- Mar. 30: Conclusion Section for Paper due
- Apr. 13: Introduction Section for Paper due
- Apr. 20: Abstract Section for Paper due
- Apr. 20: Final Submission of Code/Tools/Data
- Apr. 27: Presentations due
Project presentations will be presented in class April 28 and 30 and May 4. However, the slides used in the presentations must be uploaded on the deadline indicated above.
This course is focused on research: reading, analyzing, and creating new contributions to the field. Grades for the course are in three main areas:
- Research Project (50%): Students will be required to
complete a Research Project and its
- Peer Review: Summaries and Reviews (40%): Students will be required to
serve as an author or reviewer in the Peer
Review for each of the assigned paper readings. No credit will
be awarded for late summaries or reviews.
Summaries for the assigned readings will be due at 11:59pm on Saturday for papers being discussed on a Monday and at 11:59pm on Monday for papers being discussed on a Wednesday.
Reviews for summaries will be due at 3:30pm on the day the paper will be discussed.
- Presentations and Participation (10%): Students will be required to present one or two research papers in class throughout the semester. These presentations will be evaluated for quality. Further, students are expected to ask questions and engage in academic discussion when prompted during other students' presentations.
Class discussion, class hand-outs, emails to the student's WPI email account, forum posts in InstructAssist, and the course Web pages are avenues for official course communication. Students are responsible for any information posted through these venues.
If you need course adaptations or accommodations because of a disability, or if you have medical information to share with me, please make an appointment with me as soon as possible. If you have not already done so, students with disabilities who believe that they may need accommodations in this class are encouraged to contact the Office of Disability Services (ODS) as soon as possible to ensure that such accommodations are implemented in a timely fashion. This office is located in the West St. House (157 West St) and their phone number is 508.831.4908.
The WPI Academic Honesty Policy describes types of academic dishonesty and requirements in documentation. In the case of academic dishonesty, I am required to report the incident to the Dean of Student Affairs. Further, my penalty for academic dishonesty is to assign an F grade for the course.