CSC 4992 Cyber Security Practice -...

19
CSC 4992 Cyber Security Practice Fengwei Zhang Wayne State University CSC 4992 Cyber Security Practice 1

Transcript of CSC 4992 Cyber Security Practice -...

Page 1: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

CSC4992CyberSecurityPractice

FengweiZhang

WayneStateUniversity CSC4992CyberSecurityPractice 1

Page 2: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

WhoAmI?

•  FengweiZhang– AssistantProfessorofComputerScience– Office:MaccabeesBuilding,Room14109.3–  Emai:fengweiatwaynedotedu– Website:http://fengwei.me

•  CourseInformation–  Coursewebsite:http://www.cs.wayne.edu/fengwei/18sp-csc4992/index.html

– OfficeHours:Friday,01:00PM-02:30PM

WayneStateUniversity CSC4992CyberSecurityPractice 2

Page 3: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

WhyStudySecurity?

WayneStateUniversity CSC4992CyberSecurityPractice 3

Page 4: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

WhyStudySecurity?

It’scooltobeahackerIt’sahottopicandmediatalkaboutitIt’susefulforfindingajob

WayneStateUniversity CSC4992CyberSecurityPractice 4

Page 5: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

CourseOverview

•  Providinghands-onexperienceinplayingwithsecuritysoftwareandnetworksystemsinalivelaboratoryenvironment

•  Takingbothoffensiveanddefensemethodstohelpstudentexploresecuritytoolsandattacksinpractice

•  Focusingonattacks,hackingfundamentals,defenses.

WayneStateUniversity CSC4992CyberSecurityPractice 5

Page 6: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

CourseObjectives

•  Understandingonreal-worldsecurityvulnerabilities,exploitsanddefenses

•  Havinghands-onlabsinnetworkandsystemsecurityexperiments

•  Learningknowledgeofpracticalsecurityproblemsandtheirsolutions

WayneStateUniversity CSC4992CyberSecurityPractice 6

Page 7: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

CourseLabs

•  Lab1:PacketSniffingandWireshark•  Lab2:BufferOverflow•  Lab3:ScanningandReconnaissance•  Lab4:MetasploitFramework•  Lab5:ReverseEngineeringandObfuscation•  Lab6:OSSecurityfortheInternetofThings•  Lab7:WirelessExploitation&Defenses•  Lab8:Firewalls&IntrusionDetectionSystems(IDS)

WayneStateUniversity CSC4992CyberSecurityPractice 7

Page 8: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

LabAssignments

•  8labassignments– Sourcecode– WriteupPDF

•  SubmittingviaBlackboardwithasingleZipfile– http://blackboard.wayne.edu

•  Makingsureyourfilecanbeunzippedacrossplatforms(Windows,MacOSX,Linux)

WayneStateUniversity CSC4992CyberSecurityPractice 8

Page 9: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

TeamProjects

•  Aresearchprojectwith3-5individuals– buildinganewsystem–  improvinganexistingtechnique– performingalargecasestudy

•  ProjectproposalsdueonFeb21– a2-pagedescription

•  ProjectpresentationsareonApril18&20•  ProjectfinalreportsdueonApril20

WayneStateUniversity CSC4992CyberSecurityPractice 9

Page 10: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

CoursePrerequisites

•  CSC2110ComputerScienceIandCSC2111ComputerScienceILab

•  Basiccomputersecurityconcepts•  BasicC,operatingsystems,andcomputernetworks

WayneStateUniversity CSC4992CyberSecurityPractice 10

Page 11: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

PoliciesonLateSubmissions

•  Labandprojectdeadlineswillbefirm.•  Latehomeworkwillbeacceptedwitha10%reductioningradeforeachdaytheyarelateby.

•  Onceahomeworkassignmentisdiscussedinclass,submissionswillnolongerbeaccepted.

WayneStateUniversity CSC4992CyberSecurityPractice 11

Page 12: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

GradingPolicy

WayneStateUniversity CSC4992CyberSecurityPractice 12

Page 13: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

GradingScale

WayneStateUniversity CSC4992CyberSecurityPractice 13

Thegradesforthecoursewillbebaseduponthepercentagesgivenbelow

Page 14: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

AcademicIntegrity

•  PleasereadtheUniversity'sAcademicIntegrityPage– http://doso.wayne.edu/academic-integrity.html

•  WSUStudentCodeofConduct.– http://doso.wayne.edu/assets/codeofconduct.pdf

WayneStateUniversity CSC4992CyberSecurityPractice 14

Page 15: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

StudentDisabilitiesServices

•  Ifyouhaveadocumenteddisabilitythatrequiresaccommodations,youwillneedtoregisterwithStudentDisabilityServicesforcoordinationofyouracademicaccommodations.

•  TheStudentDisabilityServices(SDS)officeislocatedintheAdamanyUndergraduateLibrary.TheSDStelephonenumberis313-577-1851or313-202-4216(Videophoneuseonly).

WayneStateUniversity CSC4992CyberSecurityPractice 15

Page 16: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

OtherResources

•  VMwaresoftwareandMicrosoftproductsthroughDreamsparkatWSU.–  InstallVMWareonyourlaptopsforhomedesktops–  http://apps.eng.wayne.edu/MPStudents/Dreamspark.aspx

•  KaliLinux-PenetrationTestingLinuxDistribution.–  https://www.kali.org/downloads/

WayneStateUniversity CSC4992CyberSecurityPractice 16

Page 17: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

Lab0

•  MakesureyoucanloginasCSC4992studentonZeroClient– UseyourWSUaccessIDandpass– ProvideyouVMsforlabexperiments

WayneStateUniversity CSC4992CyberSecurityPractice 17

Page 18: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

Lab0(cont’d)•  [email protected]–  ListHomepage(webinterfaceforsubscriberstojoin/leavelist,postmessages,viewarchives):http://lists.wayne.edu

•  Sendanemailtothelisttointroduceyourselfbynextclass

•  Sendazippedtest.txtfileonBackboardbythisweek

WayneStateUniversity CSC4992CyberSecurityPractice 18

Page 19: CSC 4992 Cyber Security Practice - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/CourseOverview.pdfLab 0 (cont’d) • Subscribe course mailing-list csc4992@lists.wayne.edu

NextClass

•  Lab1:PacketSniffingandWireshark– Beprepared!

WayneStateUniversity CSC4992CyberSecurityPractice 19


Lab 1: Packet Sniffing and Wiresharkwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/... · • Wireshark, TCPDump Wayne State University Course: Cyber Security Practice 4 TCP/IP

Lab 1: Packet Sniffing and Wiresharkwebpages.eng.wayne.edu/~fy8421/18sp-csc4992/slides/... · • Wireshark, TCPDump Wayne State University Course: Cyber Security Practice 4 TCP/IP

webpages.eng.wayne.eduwebpages.eng.wayne.edu/~en4166/Team 3 Final Report.docx · Web viewIf the light sensor reads a value designated as a green ball value, the robot lifts the drives

webpages.eng.wayne.eduwebpages.eng.wayne.edu/~en4166/Team 3 Final Report.docx · Web viewIf the light sensor reads a value designated as a green ball value, the robot lifts the drives

Lab 6: OS Security for the Internet of Thingswebpages.eng.wayne.edu/~fy8421/18sp-csc4992/labs/lab6...Fengwei Zhang - CSC Course: Cyber Security Practice 2 Starting the Lab 6 Virtual

Lab 6: OS Security for the Internet of Thingswebpages.eng.wayne.edu/~fy8421/18sp-csc4992/labs/lab6...Fengwei Zhang - CSC Course: Cyber Security Practice 2 Starting the Lab 6 Virtual

18SP L ARCH 3002 BRGE URBS 3001 BRGE German …syllabi.ciee.org/Documents/Sp18_ARCH 3002 BRGE URBS 3001 BRGE_GAD... · 1rqh 0hwkrgv ri ,qvwuxfwlrq 7klv frxuvh lv wdxjkw wkurxjk ohfwxuhv

18SP L ARCH 3002 BRGE URBS 3001 BRGE German …syllabi.ciee.org/Documents/Sp18_ARCH 3002 BRGE URBS 3001 BRGE_GAD... · 1rqh 0hwkrgv ri ,qvwuxfwlrq 7klv frxuvh lv wdxjkw wkurxjk ohfwxuhv

Awareness & Prevention of Black Hat Hackerscysecure.org/470/18sp/groupProposal/gFinalO18mohamed... · 2018-05-06 · •Script Kiddie: Uses existing computer scripts or code to hack

Awareness & Prevention of Black Hat Hackerscysecure.org/470/18sp/groupProposal/gFinalO18mohamed... · 2018-05-06 · •Script Kiddie: Uses existing computer scripts or code to hack

2-view Alignment and RANSAC - University of Washingtoncourses.cs.washington.edu/courses/csep576/18sp/lectures/3_2_ransac.pdf2009). These techniques are discussed in more detail in

2-view Alignment and RANSAC - University of Washingtoncourses.cs.washington.edu/courses/csep576/18sp/lectures/3_2_ransac.pdf2009). These techniques are discussed in more detail in

4.2 Sorting and Searching - cis.upenn.educis110/18sp/lectures/42iterativesort.pdf · Find “awsome" aardvark aardwolf abacate aback abacus ... 1 day Million instant instant Thousand

4.2 Sorting and Searching - cis.upenn.educis110/18sp/lectures/42iterativesort.pdf · Find “awsome" aardvark aardwolf abacate aback abacus ... 1 day Million instant instant Thousand

Lab 7: Wireless Exploitation & Defenseswebpages.eng.wayne.edu/~fy8421/18sp-csc4992/labs/lab7-instructio… · Step 1: Start to capture all the traffic This is what we just did in

Lab 7: Wireless Exploitation & Defenseswebpages.eng.wayne.edu/~fy8421/18sp-csc4992/labs/lab7-instructio… · Step 1: Start to capture all the traffic This is what we just did in

ENSURING OPPORTUNITIES FOR DISADVANTAGED CHILDREN … · Ensuring Opportunities for Disadvantaged Children and Families Highlights of GAO-09-18SP, a GAO forum Investments in the education

ENSURING OPPORTUNITIES FOR DISADVANTAGED CHILDREN … · Ensuring Opportunities for Disadvantaged Children and Families Highlights of GAO-09-18SP, a GAO forum Investments in the education

Lab 3: Scanning and Reconnaissance - Wayne State …webpages.eng.wayne.edu/~fy8421/18sp-csc4992/labs/lab3...Lab 3: Scanning and Reconnaissance Introduction The key to successfully

Lab 3: Scanning and Reconnaissance - Wayne State …webpages.eng.wayne.edu/~fy8421/18sp-csc4992/labs/lab3...Lab 3: Scanning and Reconnaissance Introduction The key to successfully

Lecture 1 CIS 341: COMPILERScis341/18sp/lectures/lec01.pdfWhy OCaml? • OCaml is a dialect of ML – “Meta Language” – It was designed to enable easy manipulation abstract syntax

Lecture 1 CIS 341: COMPILERScis341/18sp/lectures/lec01.pdfWhy OCaml? • OCaml is a dialect of ML – “Meta Language” – It was designed to enable easy manipulation abstract syntax

stagethree2015.weebly.comstagethree2015.weebly.com/uploads/.../year...2015.docx  · Web viewOUTCOMES. SUBSTRAND. MA3-9MG LENGTH. MA3-13MG. TIME. MA3-14MG. 3D SPACE. MA3-18SP. DATA.

stagethree2015.weebly.comstagethree2015.weebly.com/uploads/.../year...2015.docx  · Web viewOUTCOMES. SUBSTRAND. MA3-9MG LENGTH. MA3-13MG. TIME. MA3-14MG. 3D SPACE. MA3-18SP. DATA.

Intro to Linux & Command Line - University of Washingtonstudents.washington.edu/uwigem/18sp/documents/Drylab Unix-Shell-SSH-Git.pdfLinux vs Unix •What the heck is a Unix? Early OS,

Intro to Linux & Command Line - University of Washingtonstudents.washington.edu/uwigem/18sp/documents/Drylab Unix-Shell-SSH-Git.pdfLinux vs Unix •What the heck is a Unix? Early OS,

First Last City State Country Program Term Statuscommunity.saintleo.edu/wp-content/uploads/2018/05/18SP-Deans-Li… · 18/05/2018  · Mikayla Alford Spring Hill FL BA.HTY 2018SP1

First Last City State Country Program Term Statuscommunity.saintleo.edu/wp-content/uploads/2018/05/18SP-Deans-Li… · 18/05/2018  · Mikayla Alford Spring Hill FL BA.HTY 2018SP1

CISC 7310X C11: Mass Storagehuichen-cs.github.io/course/CISC7310X/18SP/lecture/cisc...Cache Registers ~10ms ~10ns ~2ns ~1ns ~TB ~GB ~MB

CISC 7310X C11: Mass Storagehuichen-cs.github.io/course/CISC7310X/18SP/lecture/cisc...Cache Registers ~10ms ~10ns ~2ns ~1ns ~TB ~GB ~MB

Lecture 19 - webpages.eng.wayne.eduwebpages.eng.wayne.edu/.../NotesFall07/Lecture19.pdf · Enhanced Hybrid Fiber Coax • Increased bandwidth (up to 1GHz)Increased bandwidth (up to

Lecture 19 - webpages.eng.wayne.eduwebpages.eng.wayne.edu/.../NotesFall07/Lecture19.pdf · Enhanced Hybrid Fiber Coax • Increased bandwidth (up to 1GHz)Increased bandwidth (up to

Lab 7: Wireless Exploitation & Defenses › fengwei › 17sp-csc4992 › labs › lab7... · Lab 7: Wireless Exploitation & Defenses Introduction In this lab students will explore

Lab 7: Wireless Exploitation & Defenses › fengwei › 17sp-csc4992 › labs › lab7... · Lab 7: Wireless Exploitation & Defenses Introduction In this lab students will explore

Lab 2: Buffer Overflowswebpages.eng.wayne.edu/~fy8421/17sp-csc4992/slides/lab2... · 2017. 1. 24. · How It Works • Applicaons define buffers in the memory – Unsigned char

Lab 2: Buffer Overflowswebpages.eng.wayne.edu/~fy8421/17sp-csc4992/slides/lab2... · 2017. 1. 24. · How It Works • Applicaons define buffers in the memory – Unsigned char

M68HC11 REFERENCE MANUAL - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~ad5781/ECECourses/ECE3620/68HC11.pdf · Motorola reserves the right to make changes without further notice

M68HC11 REFERENCE MANUAL - webpages.eng.wayne.eduwebpages.eng.wayne.edu/~ad5781/ECECourses/ECE3620/68HC11.pdf · Motorola reserves the right to make changes without further notice

Public Hearing Item # 4 · File 10972-18SP Zoning AdministrationMeeting 14632 Stonebridge Court Page 3 February 7, 2019 Item # 4 The location of the barn and game room conforms to

Public Hearing Item # 4 · File 10972-18SP Zoning AdministrationMeeting 14632 Stonebridge Court Page 3 February 7, 2019 Item # 4 The location of the barn and game room conforms to