University of Minnesota
Introduction to Computer Security
index.php

Home

Welcome to CSci 5271. The latest course announcements will be posted on this front page, and more detailed course information is available via the menu on the left-hand side of the page.

12/23: Numeric scores from the final exam are now visible on the Moodle. A few parts of the exam ended up being more challenging than I'd planned, so to compensate, there will be an upward adjustment equivalent to + 5 final exam points added to the exam score when calculating your final course grade (this is not yet visible on the Moodle).

11/18: The information about HA2 has been updated with the extended due date of Monday, November 30th; of course you are still free to submit the assignment earlier if you finish earlier. The project description has been updated with the requirement that the third progress report (due 12/4) should include a sample of material in the format of your final report.

11/14: HA2 VM information should now have been sent to everyone who registered.

11/11: We've started releasing materials for HA2, with the questions handout available on the assignments page. Remember to email Nishad with your group requests.

10/14: Exercise set 2 has been updated to correct a mistake in question 5, and the newly-posted version of the slides from today's lecture includes some slides about capabilities that had been accidentally omitted.

10/12: Two directory traversal vulnerabilities have been found in BCZIP version 1.3, as well as a missed hardening opportunity in bcunzip-as-root. We've now released version 1.4, ready for you to find and exploit more bugs. See the Assignments page for updated source code and instructions for copying it into your VM.

10/5: A record three vulnerabilities have been found in BCZIP version 1.2. We've now released version 1.3, ready for you to find and exploit more bugs. See the Assignments page for updated source code and instructions for copying it into your VM.

9/28: A pair of vulnerabilities have been found in BCZIP version 1.1. We've now released version 1.2, ready for you to find and exploit more bugs. See the Assignments page for updated source code and instructions for copying it into your VM.

9/21: A vulnerability has been found in BCZIP version 1.0. We've now released version 1.1, ready for you to find and exploit more bugs. See the Assignments page for updated source code and instructions for copying it into your VM. We won't update test-exploit until tomorrow, for the convenience of those of you still working on your first attacks.

9/16: To compensate for the late release of HA1, we've moved the deadline for the first attack to Monday, September 21st, at 11:55pm. However you can obtain 5 points of extra credit if you submit by the original deadline of Friday the 18th at 11:55pm.

9/16: The source code and instructions for HA1 have now been posted (see the Assignments page). Email Nishad to reserve your group's VM if you haven't already. I realize this late release makes the timing for Friday's attack tight: we'll discuss what to do about that at Wednesday's lecture.

9/2: Demand for 5271 appears high again this year: to help make sure we have as many seats as possible for students who want them, we'll be following the campus policy on first-day attendance. If you want to take the course, regardless of your official registration status, you must attend the first lecture on Wednesday September 9th, at which I'll take attendance. If you don't attend or notify me in advance, I'll assume that you don't want to take the class, so you won't get off the waiting list, or if you are registered, we may give your seat to someone else. (Of course this requirement doesn't apply to UNITE students, whose registration is separate.) If for any reason you can't attend the first lecture, contact the instructor before the class by email to mccamant@cs.umn.edu. Also if you aren't yet on the waiting list please add yourself, there are still open spots as of this writing.

9/2: Look for more material appearing on the page between now and the first class on September 9th.