Course pages 2016–17

Security I

Study materials

• Slide show (not suitable for printing)
• Handout – 4 slides per side of A4
• Largeprint version – 2 slides per side of A4
• Exercises
• lecture recordings (experimental, incomplete)

The information for supervisors page is open to this year’s Part IB students from 2017-06-01 09:30 (after the end of supervisions) and has:

• Solution notes for some of the exercises
• Past exam questions with solution notes

Practicals

Frank Stajano and Graham Rymer have prepared two practical capture-the-flag exercises related to the “Software vulnerabilities” chapter of this course:

• Challenge 1: SQL injection – website, handout
• Challenge 2: format string vulnerability – mystery binary (paper: Exploiting format string vulnerabilities)

You can try these “hacking” challenges on your own time, but we also have arranged two help sessions in the MCS Intel Lab where the lecturer and the challenge creator will be available for questions:

• Friday 19 May 2017, 14:00–15:30
• Monday 22 May 2017, 14:00–15:30

There are also solution notes for supervisors.

The second challenge, in particular, is perhaps better left for after exams (can take over an hour, unless you have done something similar before, in which case it could be done in a few minutes).