Class Schedule and Assignments
Class-by-class schedule. Homework deadlines are shown separately from exams and milestones.
ARP cache harvesting, fping/masscan sweeps, mDNS/SSDP multicast, TCP connect probing with pilot probe, producer-consumer pipeline architecture.
Concurrent multi-protocol probing, nmap service detection, HTTP/TLS/JARM inspection, RTSP/ONVIF probing, MAC OUI lookup, CPE construction, confidence scoring.
CPE-to-CVE pipeline, OpenVAS/GVM integration, Nuclei template scanning, default credential checking, firmware integrity, protocol grammar inference, LLM-guided mutation fuzzing.
NetworkX graph construction, Yen's k-shortest paths, BRS composite formula, what-if simulation, MITRE ATT&CK ICS mapping, STIX 2.1 export, behavioral baselines, threat intelligence integration.
MDP environment design, rule-based agent, PPO agent with hierarchical policy, safety controller (simulation/shadow / controlled / autonomous), campaign orchestration, SHA-256 evidence chains, reward shaping.
Twin builder (scan data -> Docker containers), scenario engine (attack/pentest replay), remediation simulator with checkpoint rollback, cascading failure detection, traffic replay, IEC / NIST compliance.
Two-hour closed-book exam administered on Blackboard during class meeting time.
Shor/Grover algorithms, NIST PQC standards (ML-KEM, ML-DSA, SLH-DSA), TLS cipher suite classification, HNDL risk modelling (Mosca's inequality), Grover oracle simulation, PQ migration planning.
Federated learning paradigm, differential privacy (Gaussian mechanism, Renyi DP), SCAFFOLD algorithm, Transformer-based IDS with INT8 quantisation, Byzantine poisoning defence (Multi-Krum), causal attribution (do-calculus).
SBOM parsing (SPDX/CycloneDX), transitive vulnerability DAGs, multi-signal counterfeit detection, vendor trust scorecards, EU CRA compliance, firmware phylogenetics, SLSA provenance verification.
Honeypot theory and interaction levels, Q-learning RL agent for adaptive behaviour, SHA-256 hash chain session recording, MITRE ATT&CK TTP mapping, Bayesian attacker modelling, honeypot placement optimisation, Merkle tree evidence.
Applied Pi Calculus, Dolev-Yao attacker model, bounded model checking (BFS state exploration), six security property classes (secrecy, authentication, forward secrecy, key freshness, replay protection, sequence integrity), protocol downgrade detection, NL-to-temporal-logic translation.
HYDRA stream aggregation, Pareto multi-objective optimisation, 5-stage safety pipeline (simulate -> verify -> approve -> execute -> health-check), micro-segmentation policy generation (iptables, Palo Alto, AWS SG), IEC 62443 / NIST 800-82 / EU CRA compliance, rollback checkpoints, self-healing loop.
Two-hour closed-book exam administered on Blackboard during class meeting time.