CEA036
The Attack and Defense of Computers

• Location: 工程五館 Room B301

• Office Hour:
• Location: 工程五館 Room B322-1

Total Grades

• Grade (updated: 25th June)
  • If you have any question about your final grades of this course, come to my office between 11:00 AM and 12:00 PM 28th June. After that time, I will submit the grades of this course to the school, which means after then I am no longer able to change any grade. (posted: 16th June)

1. Chinese New Year. The school is NOT in session. (21st Feb.)
2. Peace Memorial Day. The school is NOT in session. (28th Feb.)
3. Syllabus(7th March)
4. Malware: Logic Bombs, Key Logger, URL Injection, Browser Hijackers, Trojan Horses, and Spyware.(14th March)
5. Internet Worms, Buffer Overflow Attacks, and Heap Overflow Attacks (21st March)
6. Return-into-libc attacks, BOA Countermeasures, Drive-by Download, Rogue Anti-Virus and Botnet (28th March)
7. Children's Day. The school is NOT in session. (4th April)
8. Disk Layout, BIOS, and Viruses (11th April)
9. Midterm
   • Date: 7:00PM ~ 9:00PM, 18th April
   • Location: The same place as the class's
   • The exam. questions will be given in the essay-question form.
   • There are 12 short essay questions in the Midterm.
   • The total score of the midterm is 110.
   • The midterm only covers the materials taught before the midterm and the materials used in the semester project.
   • Close book exam.
10. Macro Viruses and Boot Record Viruses (25 April)
11. Backdoors, sniffer, and Rootkits for Linux/Unix (2nd May)
12. Rootkits for Linux/Unix (9th May)
13. Magic Cookies and Web Bugs (16th May)
14. HTTP cookies (23rd May)
15. Cross-Site Scripting (XSS) and SQL Injection (30th May)
16. SQL Injection and Account Stealing (6th June)
17. TCP Session Hijacking, ARP Spoofing and Format String Attacks, and DoS/DDoS Attacks (13th June)
18. Final Exam.
    • Date: 7:00PM ~ 9:00PM, 20th June
    • Location: The same location as the class
    • The exam. questions will be given in the essay-question form.
    • There are 14 short essay questions in the final exam.
    • The total score of the final exam. is 110 points.
    • All of the final exam. questions come from the materials taught after the midterm.
    • Close book exam.
19. supplementary material, not covered in the final exam.
    • Idle Scan, OS Fingerprinting, Footprinting, and Port Scanning.
    • DNS Servers and DNS Server Attacks
    • Whois Server

Semester Project

• Project (posted: 9th April)
• Group List (posted: 9th April)
• Lab Location: Room A206, Engineering Building 6.
• Installtaion manual of Virtual Box. (posted: 20th April)
• Host Allocation Map (posted: 20th April)

Announcement

• Project Team (posted: 22nd Feb.)
  • Each team consists of 3 students.
  • Please e-mail your team list to the TA before 20th March.
  • The team list should contain the name, student ID, and e-mail address of every team member.
• Roll Call (posted: 25th March)
  • We will give a roll call on 28th March's class to make sure that each of you has already found your teammates.
  • For those who have not found their teammates, we will help you find your teammates after the roll call.
• The semester project has been posted on this web page. (posted: 9th April)
• Midterm (posted: 14th April)
  • Date: 7:00PM ~ 9:00PM, 18th April
  • Location: The same place as the class's
  • The exam. questions will be given in the essay-question form.
  • There are 12 short essay questions in the Midterm.
  • The total score of the midterm is 110.
  • The midterm only covers the materials taught before the midterm and the materials used in the semester project. .
  • Close book exam.
• The Midterm Grades have been posted on this course web page. (posted: 25th April)
• We will discuss the make-up exam. of the midterm on 2nd May. (posted: 1st May)
• The midterm makeup exam. grades have been posted on this course web page. (posted: 5th June)
• Final Exam. (posted: 16th June)
  • Date: 7:00PM ~ 9:00PM, 20th June
  • Location: The same location as the class
  • The exam. questions will be given in the essay-question form.
  • There are 14 short essay questions in the final exam.
  • The total score of the final exam. is 110 points.
  • All of the final exam. questions come from the materials taught after the midterm.
  • Close book exam.
• The total grades have been posted on this course web page. (posted: 25th June)

Referenced Material

• Shell Code
• Some interesting security-related or attacker web sites:
  • National Vulnerability Database
  • US CERT
  • SANS InfoSec Reading Room
  • Phrack Magazine
  • Blackhat
  • SecurityFocus
• Buffer Overflow-Related Papers
  • Smashing The Stack For Fun And Profit
  • Stack Smashing Vulnerabilities in the Unix Operating System
  • The Art of Writing Shellcode, by smiler.
  • w00w00 on Heap Overflows
  • The advanced return-into-lib(c) exploits
  • The Tao of Windows Buffer Overflow
  • New Chips Stop Buffer Overflow Attacks
  • Sined's collection of intermediate papers WEB Page
  • HP-UX (PA-RISC 1.1) Overflows