CE6107
電腦攻擊與防禦
The Attack and Defense of Computers

• 錢宇倫 (rumyyyy283 at gmail dot com)
  • Office Hour:
  • Location: Room B322-1
• 陳衍廷 (yenting95015 at gmail dot com)
  • Office Hour: .
  • Location: Room B322-1

Grade

• Total Grades (posted: )

1. Syllabus (8th Sep.)
2. Buffer Overflow Attacks (15th Sep.)
   • Do NOT go to the classroom.
   • Video (posted: 14th Sep.)
3. Buffer Overflow Attacks (22nd Sep.)
4. Return-into-libc attacks, BOA Countermeasures (e.g. ASLR) (29th Sep.)
5. Return Oriented Programming (ROP), 64-bit return-into-libc attacks, Heap Spray, and Drive-by Download (6th Oct.)
6. Disk Layout, BIOS, and Viruses(13th Oct.)
7. Malware: Logic Bombs, Key Logger, URL Injection, Browser Hijackers, Trojan Horses, Spyware, and Internet Worms. (20th Oct.)
   • Do NOT go to the classroom.
   • Video 1
   • Video 2
   • Video 3(time: 28:30~2:23:50)
   • Video 4(time: 1:11:50~1:40:30)
8. Fileless Malware (27th Oct.)
   • Windows Fileless Malware
     • Powershell
     • Registy
     • Macro
     • HTA
     • Metasploit
     • PsExec
   • Linux Fileless Malware
9. Magic Cookies, Web Bugs, and HTTP cookie (3rd Nov.)
10. Cross-Site Scripting (XSS) (10th Nov.)
11. Cross-stie Request Forgery
    SQL Injection (17th Nov.)
12. Midterm (24th Nov.)
    • Date:24th Nov.
    • Location: Classroom
    • The exam questions are given in the short essay form.
    • Close book exam.
13. DoS/DDoS Attacks. (1st Dec.)
14. Security of AI (8th Dec.)
15. Vehicle Security (15th Dec.)
    • Do NOT go to the classroom.
    • Video
16. Final Exam (22nd Dec.)
    • Date:22nd Dec.
    • Location: classroom

• supplementary material, not covered in the final exam.
  • Botnet
  • Backdoors.
  • sniffer, and Rootkits for Linux/Unix
  • Rootkits for Windows
  • DOM-based XSS
  • Account Stealing and TCP Session Hijacking
  • ARP Spoofing and Format String Attacks
  • Whois Server
  • Idle Scan, OS Fingerprinting, Footprinting, and Port Scanning.
  • DNS Servers and DNS Server Attacks

Bonus Competition

• If you win an excellent award in the following important contests this semester, we may add at most 80 points to your final grade of this course.
  • 金盾獎：https://security.cisanet.org.tw/index.aspx
  • HITCON CTF： 這個是線上的比賽，來參賽的隊伍都是世界各地的高手，難度會高一點。

Project

• GDB & PWN Tools
• VirtualBox
• 分組名單。
• Project 2 will be posted around 11th Nov.
• Project 1 (posted: 14th Oct.)
  • 平台連結
  • 截止時間 : 11/3 23:59
  • 注意事項 :
    • 各組在 ctfd 平台註冊的隊伍名稱格式為 Team_組別編號 (例如 : Team_01)，個人註冊名稱則不限，組別請參考 eeclass 的小組專區確認自己的分組
    • Project 需進行 demo，demo 時間將在之後開表單給同學填寫
    • Project 成績以 demo 結果為主，助教會在 demo 時針對解題方法詢問相關問題，若答出來的題目 demo 時無法妥善說明會斟酌扣分，答不出來的題目若在 demo 時能夠說明部分進度會斟酌給分
    • 請勿在截止前公開解法與散佈 flag，違者以零分計算
    • 請勿對題目與 ctfd 平台進行任何形式的 DoS/DDoS 攻擊
    • ctfd 平台上的題目 "pwn101" 為範例題，已經附上題目解法，大家可以嘗試看看，助教則會視作答情形釋出提示
    • 同小組組員分數一致，有任何小組問題請盡快與助教聯絡。
    • 另外請各位繳交解題 write-up，須說明題目在做什麼、如何利用漏洞進行解題，以及最終的 exploit 腳本，請小組組長至作業區以 hackmd 連結繳交，並記得開啟權限以便助教檢視。
    • 允許遲交: 否

Announcement

• Project Teammate (posted: 5th Sep.)
  • Each team has 3 members.
  • If you cannot find your teammates, the TAs will assign your teammates for you. However, because we do not know you, our arrangement may not be good for you; hence, you had better find your teammates yourself.
  • Please send your team member list to the TA before 1st Oct. After then the TA will find your team members for you.
  • Your grade of this course is determined by the projects; hence, if you cannot find appropriate project teammates and you cannot handle the projects alone, please consider carefully whether it is appropriate for you to take this course.
• Project 1 has been posted on this coure web page.(posted: 14th Oc.)
• Lecture Video Viewing: (posted: 19th Oct.)
  
  • Oct. 20th's lectures are provided by video viewing.
  • Do not go to the classroom on 20th Oct.
  • Video 1
  • Video 2
  • Video 3(time: 28:30~2:23:50)
  • Video 4(time: 1:11:50~1:40:30)

Referenced Material

• Shell Code
• Function Pointer Tutorials
• Some interesting security-related or attacker web sites:
  • National Vulnerability Database
  • US CERT
  • SANS InfoSec Reading Room
  • Phrack Magazine
  • Blackhat
  • SecurityFocus
• Buffer Overflow-Related Papers
  • Smashing The Stack For Fun And Profit
  • Stack Smashing Vulnerabilities in the Unix Operating System
  • The Art of Writing Shellcode, by smile