Computer and Network Security

Spring 2019

The course covers principles of building secure systems. We give many examples of how things can go wrong if these principles are not followed.

Administrative

Homework

All homework submission is to be done via Gradescope. Please use course code 922REV to sign up. Note that Gradescope requires that the solution to every problem start on a new page.

	Homework #1:   html Due: Thursday, Apr. 25, 11:59pm
	Homework #2:   not out yet. Due: Thursday, May 23, 11:59pm

Projects

	Project #1:   Control hijacking. Assignment pdf VM box starter code Due: Part 1: Thursday, April 11.    Part 2: Thursday, April 18. Relevant Materials: Aleph One - Smashing the Stack for Fun blexim - Basic Integer Overflows scut/team teso - Exploiting Format String Vulnerabilities anonymous - Once upon a free() c0ntex - How to hijack the Global Offset Table with pointers for root shells Intel - Intel Architecture Guide for Software Developers , Ch. 3 and 6.
	Project #2:   Web security, not out yet Due: Part 1: Thursday, May 9.     Part 2: Thursday, May 16.
	Project #3:   Networking , not out yet Due: Wednesday, June 5. (at most one late day allowed)

Course Calendar