CSE466 -- Computer Systems Security, Fall 2007

Disclaimer:

This is a set of notes, that summarizes the class coverage of material. By no means is this comprehensive or is a substitute for class notes and attendance. Also, updating of this page is not guaranteed to be frequent.

This page will be updated as class progresses....

Class 1: Aug 21

Introduction to the class
Class Notes (need JNT viewer to see the file, download from Microsoft)
Class Audio

Class 2: Aug 23

Security Basics
Class Notes
Class Audio

Class 3: Aug 28

Malware
Threat Models
Thompson compiler attack
Buffer Overflow
Class Notes
Class Audio

Class 4: Aug 20

Monitoring techniques
Attacks
Virus, trojan, rootkit
Class Notes
Class Audio

Class 5: Sept 4

Web browser Tracking
Buffer overflows and tricks
XSS attacks on browsers
[no class notes]
Class Audio

Class 6: Sept 6

Web Attacks, XSS
Attacks Techniques
Network Attacks
Class Notes
Class Audio

Class 7: Sept 11

Countermeasures for systems and network attacks
Cryptography [large numbers] [hashes]
Class Notes
Class Audio

Class 8: Sept 13

Buffer overflow project
Cryptography - encryption [vignere] [DES]
Class Notes
Class Audio

Class 9: Sept 18

Using hashes for integrity and authentication (message authentication codes)
Asymmetric encryption [RSA]
Signatures
MITM, introduction
Class Notes
Class Audio

Class 10: Sept 20

Secure communications
MITM
Digital Signatures
Digital certificates
Attacks on signatures and authentication
Secure hybrid communications with certificates [comm]
Class Notes
Class Audio

Class 11: Sept 25

Malware and Prevetion [slides]

Class 12: Sept 27

Birthday Paradox [slides]
Birthday Attack on Signatures
Secure Coding
Strings and string fuctions
Class Notes
Class Audio

Class 13: Oct 2

String programming errors and buffer overflows
Stack structure
Class Notes
Class Audio

Class 14: Oct 4

Safe programming with strings
Memory layout
Pointer problems
Class Notes
Class Audio

Class 15: Oct 9

Using pointers to attack programs
Arbitrary memory writes
Memory allocation and errors
Class Notes
Class Audio

Class 16: Oct 11

Errors with dynamic allocation
Memory allocators
Buffer overflow and unlink attack
Mitigation strategies
Class Notes
Class Audio

Class 17: Oct 16

Integer representations
C integer handling (rank, promotion, conversion)
Arithmetic, and overflows
Attacks
Class Notes
Class Audio

Class XX: Oct 18: Mid Term Exam

Class 18: Oct 23

Format string vulnerabilities
Class Notes
Class Audio

Class 19: Oct 25

Format string vulnerabilities
writing arbitrary values to specific locations
Class Notes
Class Audio

Class 20: Oct 30

Firewalls [slides]

Class 21: Nov 1

Unix password storage
Operating Systems
Interrupts and OS operation
Class Notes
Class Audio

Class 22: Nov 6

Operating Systems and application programs
Attacks
gaining root, overwriting kernel memory
port scanning, vulnerabilities
rootkits
class notes, mysteriously missing.
No Audio

Class 23: Nov 8

Rainbow tables
Password cracking
Virtual machines
How VMMs work?
Class Notes
Class Audio

Class 24: Nov 13

Using VMM
Detecting VMM
Attacking VMM
Root of trust
Hardening VMM
Class Notes
Class Audio

Class 25: Nov 15

TPM and its features [slides] [slides] [slides]
Remote authentication and attestation
Class Notes
Class Audio

Class 26: Nov 20

Smartcards
RFID
PKI cards and protocols
Class Notes
Class Audio

Thanksgiving break

Class 27: Nov 27

personal security
privacy and security, hippa
Orange book
Access control
Common Criteria
Class Notes

Class 28: Nov 29

presentations on sniffing/stealing wifi data

Class 29: Dec 4

Hacking Ethics
Review
Class Notes
Class Audio

Final exams are on Tuesday December 11 2:40pm-4:30pm in BYAC 150