Tue, Thu 4:45pm–6:05pm, Old CS 2120 Zoom
Instructor: Michalis Polychronakis
Office hours: Tue, Thu 3:15pm–4:45pm, NCS 355 Zoom
Teaching Assistants: Shachee Mishra, Pratik Vaishnavi
Communication: Piazza


The course will cover a wide range of topics in network security and online privacy, trying to strike a balance between core concepts and recent advancements. Although clearly distinguishing between “systems” and “network” security is often challenging, our focus will be on technologies, protocols, attacks, and defenses most closely related to the network rather than the endpoints. Indicatively, some of the topics we will explore include: core network protocols, eavesdropping, scanning, DoS attacks, firewalls, VPNs, proxies, intrusion detection, forensics, honeypots, encrypted communication, authentication, services and applications, botnets, targeted attacks, exfiltration, privacy, anonymity.

All topics will be covered from a highly practical perspective, following a mixed format of lectures, hands-on sessions, research paper discussions, and case studies. Other requirements include four programming assignments and two exams.


Study Material

There is no required textbook. The following books are recommended:

  • Charlie Kaufman, Radia Perlman and Mike Speciner. Network Security: Private Communication in a Public World, Second Edition, Prentice Hall PTR, 2002, ISBN 0130460192.
  • William R. Cheswick, Steven M. Bellovin, and Aviel D Rubin. Firewalls and Internet Security: Repelling the Wily Hacker, Second Edition, Addison-Wesley Professional, 2003, ISBN 020163466X.
  • Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone. Handbook of Applied Cryptography, CRC Press, ISBN 0849385237.
  • Ross Anderson. Security Engineering: A Guide to Building Dependable Distributed Systems, Second Edition, Wiley, ISBN 0470068523.

Additionally, there will be recommended readings for each lecture—see the schedule.

University Policies

Students are expected to attend every class, report for examinations and submit major graded coursework as scheduled. If a student is unable to attend lecture(s), report for any exams, or complete major graded coursework as scheduled due to extenuating circumstances, the student must contact the instructor as soon as possible. Students may be requested to provide documentation to support their absence and/or may be referred to the Student Support Team for assistance. Students will be provided reasonable accommodations for missed exams, assignments, or projects due to significant illness, tragedy, or other personal emergencies. In the instance of missed lectures or labs, the student is responsible for reviewing posted slides and recorded lectures. Please note, all students must follow Stony Brook, local, state, and Center's for Disease Control and Prevention (CDC) guidelines to reduce the risk of transmission of COVID. For questions or more information click here.

Disability Support Services

If you have a physical, psychological, medical or learning disability that may impact your course work, please contact Disability Support Services, ECC (Educational Communications Center) Building, room 128, (631) 632-6748. They will determine with you what accommodations, if any, are necessary and appropriate. All information and documentation is confidential.

Academic Integrity

Each student must pursue his or her academic goals honestly and be personally accountable for all submitted work. Representing another person's work as your own is always wrong. Faculty are required to report any suspected instances of academic dishonesty to the Academic Judiciary. Faculty in the Health Sciences Center (School of Health Technology & Management, Nursing, Social Welfare, Dental Medicine) and School of Medicine are required to follow their school-specific procedures. For more comprehensive information on academic integrity, including categories of academic dishonesty, please refer to the academic integrity website.

Critical Incident Management

Stony Brook University expects students to respect the rights, privileges, and property of other people. Faculty are required to report to the Office of Judicial Affairs any disruptive behavior that interrupts their ability to teach, compromises the safety of the learning environment, or inhibits students' ability to learn. Faculty in the HSC Schools and the School of Medicine are required to follow their school-specific procedures.