CS 558 Advanced Computer Security (Fall 2026)

Instructor: Dr Nik Sultana, School of Computing, Illinois Institute of Technology
Lecture Time: T+R at 11:25-12:40 CT    Lecture Location: SB 113
TA: N/A.
Office Hours: Tuesdays at 10:20-11:20. (: Away on 9/29)
Announcements: In class or on Canvas.
Course content: This page or Canvas.
Grading: Mini-quizzes (20%), Project (5% for Project Description, 10% for Progress Update, and 15% for final submission), Mid-term Exam (25%), Final Exam (25%).
Policies: See the policies page.

Course Calendar

   The final exam takes place during Exam Week and isn't shown in the course calendar. The date of that exam will be communicated to you by IIT's Registrar later during the semester.

MondayTuesday WednesdayThursday Friday
Aug 17
Aug 18
LEC 1: Introduction and Course Outline
Aug 19
Assignment 1 released
Aug 20
LEC 2: Introduction to FABRIC
Aug 21
Aug 24
Aug 25
LEC 3: Using FABRIC
Aug 26
Aug 27
LEC 4: Using FABRIC
Aug 28
Aug 31
Sep 01
LEC 5: Guest lecture: Jeffery Goldberg
   "Building modern authentication in the before times" (Abstract and Slides)
Sep 02
Sep 03
LEC 6: Containment: Motivation
Mini-Quiz 1 released
Sep 04
DUE: Assignment 1
Sep 07
Labor Day — No Classes
Sep 08
LEC 7: Guest lecture: Alexander Wolosewicz, CREASE project
"Measuring Network Consistency" Abstract: Ideal networks are predictable, consistent; real networks are anything but. How can we tell how "inconsistent" a network is? Previous network measurement work focuses on gathering a set of different measurements and reasoning about them as a group of independent objects. My work instead explores measuring run-to-run variation of a known traffic capture to observe how consistently the network is behaving, using a single metric to capture the overall consistency of the network. I explore running measurements on a network research testbed and a local setup and detail the surprising results in where network (in)consistency appears.
Bio: Alexander is a 3rd year PhD candidate. His work explores improving network observability, resilience, and debugging, especially in cloud contexts.
Sep 09
Mini-Quiz 2 released
Sep 10
LEC 8: Guest lecture: Carol Davids, IIT
"Real-Time Communication" Bio: Carol Davids is a Research Associate Professor at the Illinois Institute of Technology where she has taught since 2003. She founded, designed, and directs the Real Time Communications Laboratory which hosts the National Emergency Numbers Association's (NENA) Industry Collaboration Events (ICE). The RTC Lab has been the site of numerous industry-inspired projects, including a patented method for preventing steganographic theft in the media channel of a VoIP/WebRTC session, and several methods for identifying the z-coordinate of a smartphone user who dials 911 in a multistory building. Carol developed and taught courses in 'Telecommunications over Data Networks', 'Data and Network Communications' and 'Multimedia Communications' and initiated courses in WebRTC and Telecommunications. Carol's focus today is on applications of real time communications technologies to the solution of societal needs such as Next Generation Emergency Services, Indoor Location Solutions and Smart Cities. Carol is a graduate of the Columbia School of Engineering and Applied Science and worked for over 30 years in the telecommunications field, starting at AT&T/Illinois Bell/Ameritech and moving to Motorola and then Tellabs during the period when voice and video communications moved away from circuit- and towards packet-switched solutions. There her work focused on transitional solutions to using the cable infrastructure to deliver telecommunications services. She led integration test groups and developed certification test plans for these solutions. During this period, she developed standards with CableLabs, PacketCable and worked as a member of Specialist Task Forces (STF) at the European Telecommunications Standards Institute (ETSI).

Mini-Quiz 3 released
Sep 11
Sep 14
Sep 15
LEC 9: Guest lecture: Fern Seidel, ESnet
"Methodologies for Blocking Network Traffic" Abstract: In this lecture, we will discuss various methodologies for blocking network traffic for cybersecurity. We’ll look at how we block traffic on our WAN at the US Department of Energy’s facility called The Energy Sciences Network (ESnet). At ESnet, we use Remote Triggered Black Hole (RTBH) BGP announcements to drop malicious traffic that is detected by various methods. These RTBH announcements are made using an open source application called SCRAM which is developed in-house. We’ll also take the opportunity to see how a real SCRAM instance is used for implementing RTBH at ESnet and then dive into an interactive session around alternatives that exist to RTBH.
Bio: Fern Seidel (She/They) is a Software Engineer on the Energy Sciences Network (ESnet) Security Team. Fern has been fascinated by, and heavily involved in, computer networking from a very young age—She has experience in Software Development, Cybersecurity, Service Provider Networking, Enterprise Networking, Optical, Wireless, Network Automation, and more. When not working, Fern is an avid ultramarathoner, permaculturist, backpacker, bikepacker, general-outdoors-person, and cyclist.
Sep 16
Sep 17
LEC 10: Guest lecture: Beau Nuanes, SCinet and ThunderCat Technology
"Securing the world's fastest temporary network" Abstract: Every November, roughly 215 volunteers from over 100 organizations build SCinet — the fastest temporary network in the world — SCinet takes a year to plan, a month to build, a week to operate, and a day to tear down. At SC25, that network carried 13.72 Tbps of peak traffic for 16,499 attendees on nearly $70M in donated gear. Because the Network is built from scratch every year, the SCinet Network Security Team has: no baseline traffic history to lean on, no endpoint agents on attendee devices, and borrowed IP space whose reputation is ours to protect. This talk walks through how a volunteer team uses network telemetry, real-time threat hunting, and automated response — with tools donated by industry vendors— to secure a deliberately open, multi-organization, multi-terabit research network under a hard, unforgiving deadline.
Bio: Beau Nuanes spends his days navigating the intersection of federal missions and enterprise networks. As a Field Sales Engineer at ThunderCat Technology, a federal SDVOSB reseller, he supports federal agencies and Fortune 500 accounts alike, drawing on a background that includes Network Team Lead and red team work at Sandia National Labs and SCADA/EMS operations at PNM Energy. He also volunteers for and co-leads the Network Security team for SCinet at the annual ACM/IEEE Supercomputing conference.
Sep 18

Mini-Quizzes 4 & 5 released DUE: Mini-Quiz 2
Sep 21
DUE: Project Design
Sep 22
LEC 11: Containment: Background
Sep 23
DUE: Mini-Quiz 3
Sep 24
LEC 12: Containment: Software and Network
Sep 25
DUE: Mini-Quiz 4
Sep 28
Sep 29
LEC 13: Project Proposals Review
Sep 30
Oct 01
LEC 14: Containment: Hands-on Example
Oct 02
DUE: Mini-Quiz 5
Oct 05
Oct 06
LEC 15: eBPF
Oct 07
DUE: Mini-Quiz 1
Oct 08
Mid-term Exam
Oct 09
Oct 12
Fall Break Day — No Classes
Oct 13
Fall Break Day — No Classes
Oct 14
Oct 15
LEC 16: Information-Flow Control
Oct 16
More details will be added to the calendar as the semester progresses.