General Information
Instructor
Overview
This course is designed to provide students with good understanding of the theories, principles, techniques and tools used for software and system hacking and hardening. Students will study, in-depth, binary reverse engineering, vulnerability classes, vulnerability analysis, exploit/shellcode development, defensive solutions, etc. to understand how to crack and protect native software. In particular, this class covers offensive techniques including stack-based buffer overflow, heap-based buffer overflow, format string vulnerability, return-oriented programming, etc. This class also covers defensive techniques including canary, shadow stack, address space layout randomization, etc. A key part of studying security is putting skills to the test in practice. Hacking challenges known as Capture The Flag (CTF) competitions are a great way to do this. In this class the progress of students are evaluated by lab assignment and in-class Capture-The-Flag (CTF) competitions. The course can be used to satisfy the MS project requirement.
Downloads: Course Syllabus
Downloads: Virtual Machine
Tentative Schedule
Date | Topic | Notes |
---|---|---|
Week-1 8/31 | Overview and Background Knowledge Slides Code HW1 Video UB Cloud YouTube Youku | |
Week-2 9/7 | Stack-based Buffer Overflow 1 Slides Code HW2 Video UB Cloud YouTube Youku | |
Week-3 9/14 | Stack-based Buffer Overflow 2 Slides Code HW3 Video UB Cloud YouTube Youku | |
Week-4 9/21 | Stack-based Buffer Overflow 3 & Defenses 1 Slides Code HW4 Video UB Cloud YouTube Youku | |
Week-5 9/28 | Defenses 2 Slides HW5 Video UB Cloud YouTube Youku | |
Week-6 10/5 | Defenses 3 Slides HW6 Video UB Cloud YouTube Youku | |
Week-7 10/12 | Shellcoding Slides Code HW7 Video UB Cloud YouTube Youku | |
Week-8 10/19 | ||
Week-9 10/26 | Format String Slides Code HW9 Video UB Cloud YouTube Youku | |
Week-10 11/2 | Format String Slides Code HW10 Video UB Cloud YouTube Youku | |
Week-11 11/9 | Return-oriented Programming Slides Code HW11 Video UB Cloud YouTube Youku | |
Week-12 11/16 | Return-oriented Programming Slides HW12 Video UB Cloud YouTube Youku | |
Week-13 11/23 | Cache Side Channel Attack Slides Code HW13 Video UB Cloud YouTube Youku | |
Week-14 11/30 | Cache Side Channel Attack Slides HW14 Video UB Cloud YouTube | |
Week-15 12/7 | Cache Side Channel Attack Slides HW15 Video UB Cloud YouTube |