MIT 6.858 Computer Systems Security Final Projects

Here&#x27;s the full course (20+ lectures) on youtube if anyone&#x27;s interested:<p><a href="https://www.youtube.com/results?search_query=6.858+Fall+2014" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;results?search_query=6.858+Fall+2014</a>

From Pretty Good Chat:<p>&quot;We consider the case of the private key being stolen as very unlikely. The users themselves are not able to access it outside the app, and no other adversary will be able to either&quot;

Interesting how 4 of the 25 projects are related to Bitcoin. It just goes show that the cryptocurrency inspires a good fraction of computer &amp; network security people:<p>CheckBits: <a href="http://css.csail.mit.edu/6.858/2014/projects/adat-bschang-ericadu-ptew.pdf" rel="nofollow">http:&#x2F;&#x2F;css.csail.mit.edu&#x2F;6.858&#x2F;2014&#x2F;projects&#x2F;adat-bschang-er...</a><p>TorCoin: <a href="http://css.csail.mit.edu/6.858/2014/projects/bchrobot-ynnad19-dereklax.pdf" rel="nofollow">http:&#x2F;&#x2F;css.csail.mit.edu&#x2F;6.858&#x2F;2014&#x2F;projects&#x2F;bchrobot-ynnad1...</a><p>Dryer21, a Bitcoin Anonymizer Service: <a href="http://css.csail.mit.edu/6.858/2014/projects/asuhl-dannybd-snp.pdf" rel="nofollow">http:&#x2F;&#x2F;css.csail.mit.edu&#x2F;6.858&#x2F;2014&#x2F;projects&#x2F;asuhl-dannybd-s...</a><p>Merkelized Abstract Syntax Trees: <a href="http://css.csail.mit.edu/6.858/2014/projects/jlrubin-mnaik-nityas.pdf" rel="nofollow">http:&#x2F;&#x2F;css.csail.mit.edu&#x2F;6.858&#x2F;2014&#x2F;projects&#x2F;jlrubin-mnaik-n...</a>

I&#x27;d like to congratulate all the students for all of their hard work. 6.858 always produces new, original results, and this year is no different.

I was a consultant for MIT and a student decided his final project would be to hack the custom LMS system we were working on. To our surprise, he figured out at least two ways before letting us know he was working on a final project. Gotta love MIT.

If anyone has taken the time to go through all&#x2F;all projects of a certain category, I&#x27;d love to hear some impressions&#x2F;TL;DRs.

To compare with previous years (<a href="http://css.csail.mit.edu/6.858/2013/projects.html" rel="nofollow">http:&#x2F;&#x2F;css.csail.mit.edu&#x2F;6.858&#x2F;2013&#x2F;projects.html</a>):<p>2013 vs 2014<p>2&#x2F;35 vs 4&#x2F;25 - Bitcoin Projects<p>12&#x2F;35 vs 4&#x2F;25 - Encrypted Filesystems<p>2&#x2F;35 vs 1&#x2F;25 - Privilege Separation

The reference materials page is also worth checking out: <a href="http://css.csail.mit.edu/6.858/2014/reference.html" rel="nofollow">http:&#x2F;&#x2F;css.csail.mit.edu&#x2F;6.858&#x2F;2014&#x2F;reference.html</a>

There should be a final project like this to make distributed systems. It&#x27;s a new area and could disrupt major players.

That&#x27;s a lot of encrypted filesystems :)

I want to know about the Hacking MIT writeup! It&#x27;s not available yet, I wonder what they achieved?

I really want to see the package manager security paper when it&#x27;s out.

MAST looks interesring.<p>As to Kerby, all I have to say is Xposed.