Computer and Network Security

Spring 2018

The course covers principles of building secure systems. We give many examples of how things can go wrong if these principles are not followed.

Administrative

Final Exam

Students may take the final at either one of the following two dates:

• Option 1: (scheduled)   Fri., 6/8,  12:15-2:15pm. Nvidia Aud. and Huang 18
• Option 2: (alternate)   Thu., 6/7,  12:15-2:15pm. STLC 111

For remote SCPD students: Please email the TAs with your email address, the email address of your SCPD monitor if you have one, and which day you would like to take the exam. We will email a pdf which you should print, complete, scan as a PDF, and email back to the TAs. We will email you with confirmation of receipt so hold on to your exam until you receive confirmation. Note that if you are local to the bay area, you must come to one of two exam slots unless you contact us in advance.

Previous final exams: 2017, 2016, 2015, 2014, 2013, 2012, 2011, 2010, 2009, 2008, 2007, 2006, 2005.

Homework

All homework submission is to be done via Gradescope. Please use course code 974RJ8 to sign up. Note that Gradescope requires that the solution to every problem start on a new page.

	Homework #1:   html Due: Thursday, Apr. 26, 11:59pm
	Homework #2:   html Due: Thursday, May 24, 11:59pm

Projects

	Project #1:   Control hijacking Assignment pdf VM box starter code Due: Part 1: Thursday, April 12.    Part 2: Thursday, April 19. Relevant Materials: Aleph One - Smashing the Stack for Fun blexim - Basic Integer Overflows scut/team teso - Exploiting Format String Vulnerabilities anonymous - Once upon a free() c0ntex - How to hijack the Global Offset Table with pointers for root shells Intel - Intel Architecture Guide for Software Developers , Ch. 3 and 6.
	Project #2:   Web security Handout starter code Due: Part 1: Thursday, May 10.     Part 2: Thursday, May 17.
	Project #3:   Networking pdf VM box   (md5: 644c9ced488b59b9cf602aed7590672c) Due: Wednesday, June 6. (at most one late day allowed)