Syllabus
- Vulnerabilites and Exploits : buffer overflows, return-to-libc, ROPs, double frees, format string vulnerabilities, covert channels
- Mitigations : W^X, ASLR, Canaries, hardware and compiler mitigations
- Capability and sandboxing systems : SGX, Trustzone
Schedule
Lecture Slides
- Course Evaluation
- Introduction
- Security Engineering
- Binary Exploitation 1 (Stack overflows, NX-bit, Canaries, ASLR)
- Binary Exploitation 2 (Heartbleed, Integer Overflows, Format String Vulnerabilities, Heap Exploits)
- Access Control
- Confinement
- Trusted Execution Environments
- Hardware Security
- Micro Architectural Attacks