Lectures
- Software security (Buffer Overruns):
C Memory and Pointers,
C, assembly, memory and the stack.
Smashing the Stack
x86 guide
and prevention (canary, stack non execute, randomize the stack, safe c libraries).
Required reading: Smashing the Stack for Fun and Profit
Required reading: Reflections on Trusting Trust
- Software security: Avoiding bufferoverruns, know your input, integer overflow, canonical naming, format string vulnerabilities, heartbleed
- Software security: SQL injection
- Software security: Cross Site Scripting (XSS)
- Software security: Cross Site Request Forgery (CSRF)
- System Security: lecture
- Introduction to Cryptography
- Network Security: lecture