CSCI 1951H

Lectures

12/05/2016	`0xb`	`Toolchain-based Hardening (cont'd)`	Lecture code `RELRO` – A (not so well known) Memory Corruption Mitigation Technique Enhance application security with `FORTIFY_SOURCE` DynaGuard: Armoring Canary-based Protections against Brute-force Attacks (optional)
11/28/2016	`0xa`	`Toolchain-based Hardening`	Lecture code Buffer overflow protection Strong stack protection for GCC Uncontrolled format string C-Based Toolchain Hardening StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks (optional)
11/21/2016	`0x9`	`Memory Disclosure` `Just-In-Time Code Reuse`	Lecture code Position Independent Code (PIC) ASLR Weaknesses in Linux and PaX Exploiting Format String Vulnerabilities Just-In-Time Code Reuse: On the Effectiveness of Fine-Grained Address Space Layout Randomization (optional)
11/14/2016	`0x8`	`Return-Oriented Programming`	Lecture code Return-oriented Programming: Exploitation without Code Injection Intro. to Return-Oriented Programming `ropshell` \| `ropeme` The Geometry of Innocent Flesh on the Bone: Return-into-`libc` without Function Calls (on the `x86`) (optional)
11/07/2016	`0x7`	`Code Reuse`	Lecture code `ret2libc` chaining, `%esp` lifting Surgically returning to randomized lib(c) (optional)
10/31/2016	`0x6`	`Return-to-libc (cont'd)` `Address Space Randomization`	Lecture code Modern Binary Exploitation Address Space Layout Randomization On the Effectiveness of Address-Space Randomization (optional)
10/24/2016	`0x5`	`Non-Executable Memory` `Return-to-libc`	Lecture code Executable space protection x86 `NX` support Advanced return-into-`lib`(`c`) exploits Getting around non-executable stack
10/17/2016	`0x4`	`Shellcode Development`	Lecture code Modern Binary Exploitation Shellcoding Writing `ia32` alphanumeric shellcodes Shellcoding for Linux ~~and Windows~~ Tutorial Linux `syscall` Reference Online x86 Assembler \| Linux assemblers English Shellcode (optional)
10/10/2016	`NUL`	`Indigenous Peoples' Day`	No class The Security Mindset (optional) Reflections on Trusting Trust (optional)
10/03/2016	`NUL`	`Hack Day`
09/26/2016	`0x3`	`Control-Flow Hijacking` `Code Injection`	Lecture code Buffer overflow \| Stack buffer overflow Smashing The Stack For Fun And Profit Buffer Overflows for Beginners Introduction \| Part 1 \| Part 2
09/19/2016	`0x2`	`Basic Concepts (cont'd)`	x86 Assembly x86 Instruction Set Reference Load-time reloc. of shared libraries Using GDB to Develop Exploits `nm(1)` \| `objdump(1)` \| `gdbinit`
09/12/2016	`0x1`	`Introduction and Basic Concepts`	Lecture slides Anatomy of a Program in Memory The ELF file format `elf(5)` \| `readelf(1)`

Meetings

Monday 3PM – 5:20PM (M hour)
CIT 477 (Lubrano)

Instructor

`Vasileios (Vasilis) Kemerlis`

https://cs.brown.edu/~vpk
echo @cs.brown.edu|sed 's/^/vpk/'
CIT 505 (Mon. 6PM – 8PM)

Teaching Assistant

`Luke Camery`

echo @cs.brown.edu|sed 's/^/lcamery/'
CIT 227 (Tue. 7PM – 9PM, Sun. 1PM – 3PM)

Communication

Announcements

12/12/2016	Final exam.
12/05/2016	Final is on 12/12/2016.
12/05/2016	Assignment `0x3` is due today.
12/05/2016	Lecture `0xb` posted.
11/28/2016	Assignment `0x3` is due on 12/05/2016.
11/28/2016	Lecture `0xa` posted.
11/21/2016	Assignment `0x3` posted.
11/21/2016	Assignment `0x2` is due today.
11/21/2016	Lecture `0x9` posted.
11/14/2016	Assignment `0x2` is due on 11/21/2016.
11/14/2016	Lecture `0x8` posted.
11/07/2016	Assignment `0x2` posted.
11/07/2016	Assignment `0x1` is due today.
11/07/2016	Lecture `0x7` posted.
10/31/2016	Assignment `0x1` is due on 11/07/2016.
10/31/2016	Midterm exam.
10/31/2016	Lecture `0x6` posted.
10/24/2016	Assignment `0x1` posted.
10/24/2016	Midterm is on 10/31/2016.
10/24/2016	Lecture `0x5` posted.
10/17/2016	Lecture `0x4` posted.
10/10/2016	No class today.
10/03/2016	Hack Day!
09/26/2016	Lecture `0x3` posted.
09/19/2016	Lecture `0x2` posted.
09/12/2016	Lecture `0x1` posted.
09/07/2016	Welcome to CSCI 1951H!