Secure Computer Hardware & Systems
CSC2237 (Graduate, UTSG) & CSC498 (Undergraduate, UTM) · Fall 2026
Overview
In recent years, numerous hardware vulnerabilities have left software systems open to exploitation: processor speculation attacks like Spectre and Meltdown, cache side-channel attacks, and DRAM Rowhammer. These attacks let malicious software extract sensitive data, tamper with critical data, and even seize control of entire systems via privilege escalation.
This course covers both the offensive and defensive sides of micro-architectural security, spanning cache side-channel attacks, transient execution, Rowhammer, trusted execution environments, and memory safety, with material drawn from security (USENIX Security, IEEE S&P) and computer architecture (ISCA, MICRO, HPCA, ASPLOS) papers. Students will develop proof-of-concept exploits on real systems, complete two programming assignments, and undertake a mini-research project.
Course Information
- Instructor: Gururaj Saileshwar
- E-mail: gururaj@cs.toronto.edu
- Class Time: Mondays, 3:00 PM – 5:00 PM
- Location (CSC2237, UTSG): WB 130 (in person)
- Location (CSC498, UTM): DH 4001 (live streamed from UTSG)
- Office Hours: Tuesdays, 2:00 PM – 3:00 PM, BA 7266 (Bahen, UTSG); and Thursdays, 3:00 PM – 4:00 PM, virtual over Zoom
Important Links
- Course Website: https://gururaj-s.github.io/teaching/csc2237_csc498.html
- Quercus (for announcements, assignments): link to be added
- Piazza (for discussion): link to be added
Prerequisites
A general understanding of computer organization and architecture, and operating systems is required. There is no textbook for this course, but material is drawn from security (USENIX Security, IEEE S&P) and computer architecture (ISCA, MICRO, HPCA, ASPLOS) papers.
Course Evaluation
- 40% Two mid-term exams, during class time (20% each)
- 30% Two programming assignments (15% each)
- 20% Research project: report and presentation
- 10% Reviews of three research papers (3.33% each)
The assignments are programming-based and involve coding up micro-architectural attacks on real systems. The paper reviews focus on security papers selected from the computer architecture (ISCA, MICRO, HPCA, ASPLOS) and security (IEEE S&P, USENIX Security) conferences. Please submit all the slides and reports required in the course in PDF format. Course projects can be done in teams of 1–2, and project topics must be approved by the instructor.
Policy on the Use of Artificial Intelligence
You are welcome to use AI assistants (ChatGPT) to help you understand course material and for brainstorming on your research project. You remain fully responsible for the correctness of the material you submit. Any use of AI tools on the research project should be disclosed in your submission. You may not use AI assistants for writing the paper reviews, or programming assignments or midterms. If you have any questions about this policy, please reach out.