Computer and Network Security

Spring 2022

The course covers principles of building secure systems. Many hands-on examples during the course will show how things go wrong when these principles are not followed.

Administrative

Course announcements will be made via Ed Discussions. All non-sensitive questions/concerns should be asked through that dicussion board. Regrade requests should be made through Gradescope. Sensitive questions and OAE letters should be sent to the CA mailing list.

Final Exam

The final exam will take place online via gradescope. You will have a 24-hour window to complete the 3-hour exam: from 9am PT on Tuesday June 7 to 9am PT on Wednesday.

For students with OAE accomodations: Please email your OAE letters to the 155ta@cs.stanford.edu by Wednesday, June 1st.

Final exams from previous years. These are intended for practice only and need not be turned in.

2019, 2018, 2017, 2016, 2015, 2014, 2013, 2012, 2011, 2010, 2009, 2008, 2007, 2006, 2005.

Homework

All homework submission is to be done via Gradescope. Please use course code N86BR6 to sign up. Note: Gradescope requires that the solution to every problem start on a new page.

	Homework #1: Available Here Due: Thursday, Apr. 21, 11:59pm
	Homework #2:   Available Here Due: Thursday, May 19, 11:59pm

Projects

	Project #1:   Control hijacking. Assignment pdf VM box Starter Code Due: Part 1: Thursday, April 7.    Part 2: Thursday, April 14. Relevant Materials: Aleph One - Smashing the Stack for Fun blexim - Basic Integer Overflows scut/team teso - Exploiting Format String Vulnerabilities anonymous - Once upon a free() c0ntex - How to hijack the Global Offset Table with pointers for root shells Intel - Intel Architecture Guide for Software Developers , Ch. 3 and 6.
	Project #2:   Web Security. Handout Starter Code Due: Part 1: Thursday, May 5.    Part 2: Thursday, May 12.
	Project #3:   Network Security. Handout Starter Code   Due: Part 1: Friday, May 27.    Part 2: Friday, June 3.

Course Calendar