CISC/CPEG 367 (Spring 2016) Lecture Notes

• Buffer Overflow Attacks
  • A stack-based buffer overflow tutorial
  • Overflowing the stack on Linux x86
  • Smashing The Stack For Fun And Profit or html version
  • Basic Shellcode Example
  • Address Space Layout Randomization (ASLR)
  • 64 Bits Linux Stack Based Buffer Overflow
• Cryptographic Systems
  • Public-key cryptography
  • Introduction to Public-Key Cryptography, RedHat.
  • Message authentication code
• Secure Email
• Firewall
  • iptables firewall
• Port Scanning and Cyber Scanning
  • Elias Bou-Harb, Mourad Debbabi, and Chadi Assi, Cyber Scanning: A Comprehensive Survey, IEEE Communications Surveys & Tutorials, Vol. 16, No. 3, Third Quarter 2014.
  • Nmap Network Scanning
  • Idle Scan
  • Port Scanning Techniques
• Malicious Software
  • Virus in Python
  • Worm in Python
• Denial-of-Service Attacks
  • T. Peng, C. Leckie, and K. Ramamohanarao, Survey of network-based defense mechanisms countering the DoS and DDoS problems, ACM Computing Surveys, Volume 39, Issue 1, 2007.
  • Anatomy of a DNS DDoS Amplification Attack
  • DNS Amplification Attacks [Alert (TA13-088A)]
  • What are DDoS attacks? DDoS Explained, Radware
  • DNS Amplification Attack, Radware
  • Lessons from Surviving a 300Gbps Denial of Service Attack, Black Hat USA, 2013
  • Raspberry Pi as a Local DNS Resolver Install Unbound
  • How do I set DNS Servers on Raspberry Pi?
• Secure Socket Layer (SSL)
  • SSL and TLS: A Beginners Guide, SANS Institute.
• Social Engineering Attacks
• Wireless Security
  • Using Raspberry Pi 3 as a WiFi access point with hostapd.
  • Wi-Fi security - WEP, WP and WPA2.
  • Tutorial: How to Crack WPA/WPA2.
  • (1)
  • (2)
  • (3)
  • (4)
• Web Security
• Shellcode
  • Demystifying the Execve Shellcode (Stack Method)
• Botnet
• Cross Site Scripting Attack
  • XSS Attack Examples
  • Cross-Site Scripting Explained by Amit Klein
  • WealthTracker.cgi