CE6107
The Attack and Defense of Computers

• Project 1 Grade (posted: 11th Jan. 2010)
• If you have any questions regarding to your final grade, please contact the TAs.
• The temporary time to post the final grade of this course is around 10:00AM 21st Jan. 2010. If you have any questions about your final grade, come to my office before 3:00PM 21st Jan. 2010. After the above time, I will submit the grade of this course to the Office of Academic Affairs and will no longer be able to change your grade.
• The final grade of this course has been posted on this web site. If you have any questions about your final grade, come to my office between 1:00PM and 3:00PM on 21st Jan. 2010. (Posted: 21st Jan. 2010)
• Happy Winter Break and Chinese New Year!

Project

• Lab VmWare User Guide
• Lab Location: Room A208, Engineering Building 6.
• Group List and Host Allocation Map (posted 27th Oct.)
• Project 1 (posted: 8th Nov.)
  • example
• Project 2 (posted: 26th Nov.)
  • option 1
  • option 2
  • You only need to chose one of the above two options as your project 2.
  • Grading Criteria of Option 2. (5th Jan. 2010)
  • List in StopBadware may contain web sites that spread spyware. (5th Jan. 2010)
  • Please be advised that spyware is different from adware. (5th Jan. 2010)

Announcement

• Black Board System (posted: 11th Sep.)
  • Press the ``User Login'' button on the left side of your screen to enter into the login screen.
  • Enter your Login Name and Password to login the system.
  • After loggining into the system, choose the ``0981CE6107_電腦攻擊與防禦'' item from the ``My Course'' block on the right side of your screen to select the course that you plan to work on.
  • After switching to the new page, choose the "Discussion Area" item on the left hand side of your screen to enter into the forum area.
  • From the middle bottom of your screen choose the Fourm you want to use.
  • Forum Name: ``Security Course Discussion Forum''
• Bonus Question:
  • Bonus Question 1: (25 points) (posted 10th Sep.)
    FInd a solution to detect/block backdoors inside 3rd party source code.
  • Due Day: The 3rd day after the final exam.
    Submission: Send your answers to me by an e-mail. Don't forget to put your name and student ID in the mail.
• Project Teammate (posted: 21st Oct.):
  • The member number of each Security project team is 6 persons.
  • Please choose your teammates ASAP and send the list of your teammates to the TAs, so that you can have your computer earlier.
  • In your mail, don't forget to put your names and student IDs.
• Roll Call (posted: 21st Oct.)
  • On 29th Oct.'s class, I will give a roll call to make sure each of you has already found your teammates.
  • For those who still could not find their teammates after 29th Oct.'s class, the TAs will assign your teammates for you.
  • The final team member list will be posted on the website soon after 29th Oct.
• Project 1 has been posted on the course website. (posted: 8th Nov. 2009)
• There are 14 short essay questions in the midterm. (posted: 8th Nov. 2009)
• The grade of the midterm has been posted on this course web site. (posted: 25th Nov. 2009)
• Midterm Make-up Exam. (posted: 25th Nov. 2009)
  • For those of you that did not pass the midterm, please DO come to Dec. 3's class during which we will discuss the make-up exam of the midterm and after which the TAs will discuss the Q&As of the midterm.
  • Make-up Exam.
    • There will be 4 questions in your make-up exam.
    • We will chose 4 questions from your miderm exam. as the questions of your make-up exam.
    • For graduate students, if the grade of yor make-up exam is above 90 points, your midterm exam. grade will be changed to 70 ; otherwise, your score will not be changed.
    • For undergraduate students, if the grade of yor make-up exam is above 80 points, your midterm exam. grade will be changed to 60 ; otherwise, your score will not be changed.
• Project 2 has been posted on this web site. (posted: 26th Nov.)
• An answer example of Project 1 was posted in the web site. (Posted: 12th Dec.)
• The make-up exam. of the midterm will be held on 17th Dec. 2009 after the class. (Posted: 12th Dec.)
• The grade of the midterm make-up exam has been posted on this web site. (18th Dec. 2009)
• The due day of Project 2 is postponed to 11:59PM 11th Jan. 2010. (posted 5th Jan. 2010)
• The temporary time to post the final grade of this course is around 10:00AM 21st Jan. 2010. If you have any questions about your final grade, come to my office before 3:00PM 21st Jan. 2010. After the above time, I will submit the grade of this course to the Office of Academic Affairs and will no longer be able to change your grade. (posted: 11th Jan. 2010)
• The final grade of this course has been posted on this web site. If you have any questions about your final grade, come to my office between 1:00PM and 3:00PM on 21st Jan. 2010. (Posted: 21st Jan. 2010)

Referenced Material

• Shell Code
• Some interesting security-related or attacker web sites: (posted: 9th Sep.)
  • National Vulnerability Database
  • US CERT
  • SANS InfoSec Reading Room
  • Phrack Magazine
  • Blackhat
  • SecurityFocus
• Buffer Overflow-Related Papers (posted: 9th Sep.)
  • Smashing The Stack For Fun And Profit
  • Stack Smashing Vulnerabilities in the Unix Operating System
  • The Art of Writing Shellcode, by smiler.
  • w00w00 on Heap Overflows
  • The advanced return-into-lib(c) exploits
  • The Tao of Windows Buffer Overflow
  • New Chips Stop Buffer Overflow Attacks
  • Sined's collection of intermediate papers WEB Page
  • HP-UX (PA-RISC 1.1) Overflows
• 第一次網路大戰
• 張維韓-How to Turn off the Non-executable Stack Option in Ubuntu