CE6107
The Attack and Defense of Computers

• 劉哲豪 (Ph.D. student) (104522118 at cc dot ncu dot edu dot tw)
  • Office Hour: Wednesday 14:00~17:00
  • Location: Room B322-1
• 彭泰祺 (master student) (tanjipon at gmail dot com)
  • Office Hour: Tue. 13:00-16:00) and Thu. 13:00-16:00
  • Location: Room B322-1

*** 即時線上發問系統 ***

Grade

• Total Grades (updated: 15th Jan. 2020)
  • If you have any question about your grade, please come to my office before 12:00 PM, 16th Jan. 2020.
  • After the above time, I will send your grades to the office of academic affairs, which means I am no longer able to change your grades after then.

1. Syllabus(9th Sep.)
2. Malware: Logic Bombs, Key Logger, URL Injection, Browser Hijackers, Trojan Horses, and Spyware. (16th Sep.)
3. Internet Worms, Buffer Overflow Attacks, and Heap Overflow Attacks and Return-into-libc attacks, BOA Countermeasures, Drive-by Download, Rogue Anti-Virus (23rd Sep.)
4. Botnet (30th Sep.)
5. Disk Layout, BIOS, and Viruses (7th Oct.)
6. Macro Viruses and Boot Record Viruses (14th Oct.)
7. Backdoors, sniffer, and Rootkits for Linux/Unix (21st Oct.)
8. Rootkits for Linux/Unix (28th Oct.)
9. Magic Cookies and Web Bugs (4th Nov.)
10. Midterm
    • Date: 11th Nov., 2019
    • Location: The same place as the class's.
    • There are 16 short essay-questions in the midterm.
    • The total score of the midterm is 110 points.
    • All midterm exam. questions come from the materials that I have taught before the midterm.
      • slide 110 of file 2_1_Botnet.ppt
    • Close book exam.
11. HTTP cookies (18th Nov.)
12. Cross-Site Scripting (XSS) (25th Nov.)
13. DOM-based XSS(2nd Dec.)
14. SQL Injection and Account Stealing (9th Dec.)
15. Account Stealing, TCP Session Hijacking (16th Dec.)
16. ARP Spoofing and Format String Attacks, and DoS/DDoS Attacks (23rd Dec.)
17. ARP Spoofing and Format String Attacks, and DoS/DDoS Attacks (30th Dec.)
18. Final Exam. (updated: 29th Dec. 2019)
    • Date: 6th Jan., 2020
    • Location: The same location as the class
    • The exam. questions will be given in the essay-question form.
    • There are 17 short essay-questions in the final.
    • The total score of the final is 120 points.
    • All final exam. questions come from the materials taught after the midterm.
    • Close book exam.
19. supplementary material, not covered in the final exam.
    • Rootkits for Windows
    • Idle Scan, OS Fingerprinting, Footprinting, and Port Scanning.
    • DNS Servers and DNS Server Attacks
    • Whois Server

Bonus Competition

• If you win an excellent award in the following important contests this semester, we may add at most 80 points to your final grade of this course.
  • 金盾獎：https://security.cisanet.org.tw/index.aspx
  • HITCON CTF： 這個是線上的比賽，來參賽的隊伍都是世界各地的高手，難度會高一點。

Semester Project

• Lab Location: Room A206, Engineering Building 6 (工程五館).
• Installtaion manual of Virtual Box. (posted: 2nd Sep.)
• Group List (posted: 7th Nov.)
• Host Allocation Map (posted: 7th Nov.)
• Project 1 (posted: 7th Nov.)
  • Due day: 9th Dec. 2019
  • project 1 web page
  • PWN BASIC (posted: 7th Nov.)
• Project 2 (posted: 19th Dec.)
  • project 2 web page
  • Due Day: 12th Jan. 2020.

Announcement

• Project Teammate (posted: 31st Aug.)
  • Each team has 4 members.
• The classroom has been changed to Room A306. (posted: 9th Sep.)
• Roll Call (posted: 26th Oct.)
  • We will give a roll call on 28th Oct.'s class to make sure that each of you has already found your teammates.
  • For those who have not found your teammates, we will help you find your teammates after the roll call.
  • If you have formed your team, please give your teammate list to TA 彭泰祺 (tanjipon at gmail dot com) before 28th Oct.
  • A teammate list should contain the following information.
    • English Name of the team.
    • The name, student ID, phone number, and e-mail address of each team member.
• The midterm exam. will be advanced to 11th Nov. (posted: 26th Oct.)
• Project 1 has been posted on this course web page. (posted: 7th Nov.)
• Midterm (posted: 7th Nov.)
  • Date: 11th Nov., 2019
  • Location: The same place as the class's.
  • There are 16 short essay-questions in the midterm.
  • The total score of the midterm is 110 points.
  • All midterm exam. questions come from the materials that I have taught before the midterm.
    • slide 110 of file 2_1_Botnet.ppt.
  • Close book exam.
• Midterm Grades
  • The grades of midterm exam. have been posted on this web page. (posted: 29th Nov.)
• Project 1 Demo
  • 本學期電腦攻擊與防禦課程Project 1 demo日期為 12/19，12/19 及 12/20 三天的 9:00-12:00 和 13:00-16:00 , 請同學於12/16前至表單內填寫組別demo時段(在該時段內填寫你們是第幾組)。
  • 表單連結
  • Demo 時主要會問 Project 1 的題目是如何解題的、原理或相關的問題。
  • 若同學有問題請email給助教。
• Project 2 has been posted on this course web page. (posted: 19th Dec.)
• The adjusted grades of midterm exam. and the grades of project 1 have been posted on this web page. (posted: 24th Dec.)
• Project 2 Demo
  • 本學期電腦攻擊與防禦課程 Project 2 demo日期為 1/13 及 1/14 兩天,請同學於 1/12 前至表單內填寫組別demo時段 (在該時段內填寫你們是第幾組)。
  • 表單連結
  • Demo 時主要會問 Project 2 的題目是如何解題的、原理或相關的問題。
  • 若同學有問題請email給助教。
• Final Exam. (updated: 29th Dec. 2019)
  • Date: 6th Jan., 2020
  • Location: The same location as the class
  • The exam. questions will be given in the essay-question form.
  • There are 17 short essay-questions in the final.
  • The total score of the final is 120 points.
  • All final exam. questions come from the materials taught after the midterm.
  • Close book exam.
• Final Grade Announcement (posted: 11th Jan. 2020)
  • The temporary time to announce the total grades of this course is 11:00 AM, 16th Jan. 2020.
  • If you have any question about your grade, please come to my office before 12:00 PM, 16th Jan. 2020.
  • After the above time, I will send your grades to the office of academic affairs, which means I am no longer able to change your grades after then.
• Total Grades (posted: 15th Jan. 2020)
  • The Total Grades of this course have been posted on this course web page.
  • If you have any question about your grade, please come to my office before 12:00 PM, 16th Jan. 2020.
  • After the above time, I will send your grades to the office of academic affairs, which means I am no longer able to change your grades after then.

Referenced Material

• Shell Code
• Function Pointer Tutorials
• Some interesting security-related or attacker web sites:
  • National Vulnerability Database
  • US CERT
  • SANS InfoSec Reading Room
  • Phrack Magazine
  • Blackhat
  • SecurityFocus
• Buffer Overflow-Related Papers
  • Smashing The Stack For Fun And Profit
  • Stack Smashing Vulnerabilities in the Unix Operating System
  • The Art of Writing Shellcode, by smiler.
  • w00w00 on Heap Overflows
  • The advanced return-into-lib(c) exploits
  • The Tao of Windows Buffer Overflow
  • New Chips Stop Buffer Overflow Attacks
  • Sined's collection of intermediate papers WEB Page
  • HP-UX (PA-RISC 1.1) Overflows