Computer and Network Security

Spring 2023

The course covers principles of building secure systems. Many hands-on examples during the course will show how things go wrong when these principles are not followed.

Administrative

Course announcements will be made via Ed Discussions. All non-sensitive questions/concerns should be asked through that dicussion board. Regrade requests should be made through Gradescope. Sensitive questions and OAE letters should be sent to the CA mailing list.

Final Exam

Students may take the final at either one of the following two dates:

• Option 1: (scheduled)   Mon., 6/12,  3:30-6:00pm. STLC 111.
• Option 2: (alternate)   Sun., 6/11,  3:30-6:00pm. STLC 104.

For remote SCPD students taking the exam remotely: Please email the TAs with your email address and we will coordinate. If you are local to the bay area, we encourage you come to one of the two exam slots.

For students with OAE accomodations: Please email your OAE letters to the 155ta@cs.stanford.edu by Wednesday, June 7.

Final exams from previous years. These are intended for practice only and need not be turned in.

2022, 2019, 2018, 2017, 2016, 2015, 2014, 2013, 2012, 2011, 2010.

Homework

All homework submission is to be done via Gradescope. Please use course code E7NGZK to sign up. Note: Gradescope requires that the solution to every problem start on a new page.

	Homework #1: Available Here Due: Thursday, Apr. 27, 11:59pm
	Homework #2: Available Here Due: Thursday, May 25, 11:59pm

Projects

	Project #1:   Control hijacking. Assignment pdf Starter Code VM box Due: Part 1: Thursday, April 13.    Part 2: Thursday, April 20. Relevant Materials: Aleph One - Smashing the Stack for Fun blexim - Basic Integer Overflows scut/team teso - Exploiting Format String Vulnerabilities anonymous - Once upon a free() c0ntex - How to hijack the Global Offset Table with pointers for root shells Intel - Intel Architecture Guide for Software Developers , Ch. 3 and 6.
	Project #2:   Web Security. Handout Starter Code Due: Part 1: Thursday, May 11.    Part 2: Thursday, May 18.
	Project #3:   Network Security. Handout Starter Code   Due: Part 1: Friday, June 2.    Part 2: Friday, June 9.

Course Calendar

Lecture recordings

Video cameras located in the back of the room will capture the instructor presentations in this course. For your convenience, you can access these recordings by logging into the course Canvas site. These recordings might be reused in other Stanford courses, viewed by other Stanford students, faculty, or staff, or used for other education and research purposes. Note that while the cameras are positioned with the intention of recording only the instructor, occasionally a part of your image or voice might be incidentally captured. If you have questions, please contact a member of the teaching team.