Course assignments

Problem set 1

Covering threat modeling. Questions here.

Due on Canvas by Friday, February 25th at 11:59pm.

Project 1: memory safety

In this assignment you will threat model, attack, and write a security report on a Linux C program that has memory-safety and other low-level bugs. Available now:

Project instructions (PDF)

BCImgView source code

BCImgView victim binary

Sample input images (4MB)

Problem set 2

Covering OS interaction, web security, and cryptographic primitives. Questions here. (Corrected 4/22: the attack in Q4 involves two messages)

Due on Canvas by Wednesday, April 27th at 11:59pm.

Project 2: online proctoring

In this assignment you will design and then analyze the security of a system to let students take exams online. Available now:

Project instructions (PDF)

Due on Canvas by Monday, May 2nd at 11:59pm.