11020IIS 500600
電腦攻防實務
Practice of the Attack and Defense of Computers

• 黃建鴻 (gordon636798 at gmail dot com)
  • Office Hour:
  • Location: Room B322-1
• 陳建欣 (opp556687 at gmail dot com)
  • Office Hour:
  • Location: Room B322-1
• 黃士憲 (zaqxsw1475369 at gmail dot com)
  • Office Hour:
  • Location: Room B322-1

*** 即時線上發問系統 ***

*** 即時線上課程 ***

• Please go to the above 即時線上發問系統 to find the hyper link of 即時線上課程 every week before every week's lecture.
• The TAs will update the hyper link every week before every week's lecture.

Grade

• Total Grades (updated: 7th June)
• If you have any questions about your grades, please contact the TAs before 12:00PM (noon) 8th June.
• We will submit the grades of this course to the school after 12:00PM (noon) 8th June, which means after then, we are no longer be able to change the grades.

1. Syllabus (14 Feb.)
2. Buffer Overflow Attacks and Heap Overflow Attacks (21 Feb.)
3. 228 Peace Memorial Day (No Class)(28 Feb.)
4. Return-into-libc attacks, BOA Countermeasures, Drive-by Download (7 March)
5. Disk Layout, BIOS, and Viruses (14 March)
6. Linux Fileless Malware (21 March)
   • Supplementary Materials:
     • Metasploit
     • Powershell
     • PsExec
7. Backdoors, sniffer, and Rootkits for Linux/Unix (28 March)
8. Children's Day (No Class)(4 April)
9. Project Demo Time, no lecture. (11 April)
10. Rootkits for Linux/Unix (18 April)
11. Magic Cookies and Web Bugs (25 April)
12. HTTP cookies (2 May)
13. Cross-Site Scripting (XSS) (9 May)
14. SQL Injection and Account Stealing (16 May)
15. ARP Spoofing and Format String Attacks, and DoS/DDoS Attacks (23 May)
16. Project Demo Time, no lecture. (30 May)
17. supplementary material
    • Botnet
    • Account Stealing, TCP Session Hijacking
    • Rootkits for Windows
    • Idle Scan, OS Fingerprinting, Footprinting, and Port Scanning.
    • DNS Servers and DNS Server Attacks
    • Whois Server

Bonus Competition

• If you win an excellent award in the following important contests this semester, we may add at most 80 points to your final grade of this course.
  • 金盾獎：https://security.cisanet.org.tw/index.aspx
  • HITCON CTF： 這個是線上的比賽，來參賽的隊伍都是世界各地的高手，難度會高一點。

Semester Project

• GDB & PWN Tools
• project team member list (posted: 16th March)
• Project 1 (posted: 15th March) (updated: 10th April)
  • URL of project 1 web page: http://ctf.adl.tw
  • Deadline: 23:59 10th April. (After the dealine, you will not be able to log into the web page of project 1. )
  • Demo starting date: 11th April.
  • Please fill out your demo time before 11th April in this form. (posted: 1st April)
  • All members of a team must show up during the team's demo time. The TAs will ask you some questions about the project. Part of project 1 grade of a team is determined by the team's answers to the questions.
  • Demo will proceed through this google meeting.
  • After all members of a team have assembled completely, the team can attend the meeting to make your demo at your chosen demo time.
  • To avoid influencing the demo of other teams. Please show up at the meeting on time.
• Project 2 (posted: 18th April)
  • project 2已公告 於作業區，請同學至作業區查看第二次作業內容。
• Project 3 (posted: 5th May) (updated: 27th May)
  • Deadline: 23:59 29th May
  • You need to submit your team's writeup for project 3 to 作業區 before the due day.
  • Demo starting date: 30th May.
  • Please fill out your demo time before 29th May in this form.
  • All members of a team must show up during the team's demo time. The TAs will ask you some questions about the project. Part of project 1 grade of a team is determined by the team's answers to the questions.
  • Demo will proceed through this google meeting.
  • To avoid influencing the demo of other teams. Please show up at the meeting on time. Otherwise, we will deduct some points from your project 3 grades.
  • If you have any questions about project 3, please contact the TAs.

Announcement

• Project Teammate (posted: 6th Feb.)
  • Each team has 3 members.
  • If you cannot find your teammates, we will assign your teammates for you. However, because we do not know you, our arrangement may not be good for you; hence, you had better find your teammates yourself.
• Project 1 has been posted on this course web page. (posted: 15th March.)
• If you have questions about project 1, please write your questions in this form. The TAs will answer your questions. (posted: 24th March.)
• Please fill out your demo time before 11th April in this form. (posted: 1st April)
• 作業請繳交至國立清華大學 eeclass 數位學習平台， 本課程作業專區，詳細內容已公布在作業區。 (posted: 1st April)
• Project 1 demo (posted: 10th April)
  • Demo starting date: 11th April.
  • Please fill out your demo time before 11th April in this form. (posted: 1st April)
  • All members of a team must show up during the team's demo time. The TAs will ask you some questions about the project. Part of project 1 grade of a team is determined by the team's answers to the questions.
  • Demo will proceed through this google meeting.
  • After all members of a team have assembled completely, the team can attend the meeting to make your demo at your chosen demo time.
  • To avoid influencing the demo of other teams. Please show up at the meeting on time.
• If you want to change your project team, please contact the TAs ASAP. (12th April)
• project 2已公告於作業區，請同學至作業區查看第二次作業內容。 (18th April)
• Project 3 has been posted on this course web page. (posted: 5th May)
• Project 3 demo (posted: 27th May)
  • Demo starting date: 30th May.
  • You need to submit your team's writeup for project 3 to 作業區 before the due day.
  • Please fill out your demo time before 29th May in this form.
  • All members of a team must show up during the team's demo time. The TAs will ask you some questions about the project. Part of project 1 grade of a team is determined by the team's answers to the questions.
  • Demo will proceed through this google meeting.
  • After all members of a team have assembled completely, the team can attend the meeting to make your demo at your chosen demo time.
  • To avoid influencing the demo of other teams. Please show up at the meeting on time. Otherwise, we will deduct some points from your project 3 grades.
  • If you have any questions about project 3, please contact the TAs.
• Total Grades: (posted: 7th June)
  • The Total Grades of this course have been posted on this course web page.
  • If you have any questions about your grades, please contact the TAs before 12:00PM (noon) 8th June.
  • We will submit the grades of this course to the school after 12:00PM (noon) 8th June, which means after then, we are no longer be able to change the grades.

Referenced Material

• Shell Code
• Function Pointer Tutorials
• Some interesting security-related or attacker web sites:
  • National Vulnerability Database
  • US CERT
  • SANS InfoSec Reading Room
  • Phrack Magazine
  • Blackhat
  • SecurityFocus
• Buffer Overflow-Related Papers
  • Smashing The Stack For Fun And Profit
  • Stack Smashing Vulnerabilities in the Unix Operating System
  • The Art of Writing Shellcode, by smiler.
  • w00w00 on Heap Overflows
  • The advanced return-into-lib(c) exploits
  • The Tao of Windows Buffer Overflow
  • New Chips Stop Buffer Overflow Attacks
  • Sined's collection of intermediate papers WEB Page
  • HP-UX (PA-RISC 1.1) Overflows