After the course students can:
- explain how standard C data types are represented, and write C programs to inspect and manipulate these representations
- explain how the stack and heap are used to allocate data in C programs
- write C programs that make use of pointers and pointer arithmetic
- explain how the stack is used to administer procedure calls
- explain how buffer overflows work
- explain some of the countermeasures against these vulnerabilities, how these work, and apply some of them
- develop simple exploits for code with buffer overflow weaknesses.
|
|
|
Most security problems have their origin in software, esp. software that is accessible via the internet. In particular, the vast majority of software security problems are the result of memory safety issues. This course is about software security vulnerabilities, standard types of such vulnerabilities, what the causes are, what can be done about them and how they can be detected and exploited. The course focuses on typical memory safety problems in C programs and machine code: buffer overflows (on heap and stack), integer overflows, and format string attacks.
Instructional Modes
- Lecture
- Computer Practical Sessions
- Self-study
|
|
|
|
The first-year courses Processors (3EC) and Imperative Programming (6EC)
|
|
|
Practical assignments and Capture-the-Flag style online exam with report. The grade is determined by the online exam with report, but the practical assignments must be seriously attempted to obtain the grade.
|
|
| This course is taught in English. |
|