Computer and Network Security

Spring 2025

The course covers principles of building secure systems. Many hands-on examples during the course will show how things go wrong when these principles are not followed.

Administrative

Course announcements will be made via Ed Discussions. All non-sensitive questions/concerns should be asked through that dicussion board. Regrade requests should be made through Gradescope. Sensitive questions and OAE letters should be sent to the CA mailing list.

Final Exam

The in person final exam is scheduled for Monday June 9 a 3:30pm. Remote CGOE students can take the final exam through Gradescope.

Here are sample final exams from previous years. These are intended for practice only and need not be turned in.

2024, 2023, 2022, 2019, 2018, 2017, 2016, 2015, 2014.

Homework and Projects

All homework submission is to be done via Gradescope. Please use course code PG5GER to sign up. Note: Gradescope requires that the solution to every problem start on a new page.

	Project #1:   Control hijacking.   Assignment pdf Starter Code VM box Due: Part 1: Thursday, April 10.    Part 2: Thursday, April 17. Relevant Materials: Aleph One - Smashing the Stack for Fun blexim - Basic Integer Overflows scut/team teso - Exploiting Format String Vulnerabilities anonymous - Once upon a free() c0ntex - How to hijack the Global Offset Table with pointers for root shells Intel - Intel Architecture Guide for Software Developers , Ch. 3 and 6.
	Homework #1:   Available Here Due: Thursday, Apr. 24, 11:59pm
	Project #2:   Web Security.   Handout Starter Code Due: Part 1: Thursday, May 8.    Part 2: Thursday, May 15.
	Homework #2:   Available Here Due: Thursday, May 22, 11:59pm
	Project #3:   Network Security.   Handout Starter Code   Due: Parts 1-3: Thursday, May 29.    Part 4: Wednesday, June 4.

Course Calendar

Lecture recordings

Video cameras located in the back of the room will capture the instructor presentations in this course. For your convenience, you can access these recordings by logging into the course Canvas site. These recordings might be reused in other Stanford courses, viewed by other Stanford students, faculty, or staff, or used for other education and research purposes. Note that while the cameras are positioned with the intention of recording only the instructor, occasionally a part of your image or voice might be incidentally captured. If you have questions, please contact a member of the teaching team.