Danh mục
Duocmmo Tedu Tin học văn phòng Laravel Cyberlearn Khoá học miễn phí Tất cả khoá học
Get link khoá học
Trang chủ
Khoá học
Computer Security: A Hands-on Approach

Computer Security: A Hands-on Approach

Attacks and defense: buffer overflow, race condition, dirty COW, meltdown and spectre , shellshock, format string

image
50.000 VND
85 VND
Đầy Đủ Bài Giảng
Học Online Tiện Lợi
Kích Hoạt Nhanh 2-5 Phút
Thanh toán tự động
Được phép tải xuống

Tổng quan

Nội dung khoá học

Đánh giá

Mô tả

This course focuses on a variety of attacks on computer systems. Some of them are classical attacks, and some are quite new, such as the recently discovered Dirty COW, Meltdown, and Spectre attacks. The course emphasizes hands-on learning. For each attack covered, students not only learn how the attack work in theory, they also learn how to actually conduct the attack, in a contained virtual machine environment. The hands-on exercises developed by the instructor are called SEED labs, and they are being used by over 1000 institutes worldwide. The course is based on the textbook written by the instructor. The book, titled "Computer & Internet Security: A Hands-on Approach, 2nd Edition", has been adopted by over 120 universities and colleges worldwide.

Bạn sẽ học được gì

How to exploit software vulnerabilities, and launch attacks

How to defend against various attacks and how to write secure code

Practical skills in cybersecurity

The fundamental problems of various software vulnerabilities

Yêu cầu

  • Have basic programming background.
  • Understand basic operating system concepts, such as users, process, memory, etc.

Nội dung khoá học

9 sections

Lab Setup and Linux Security Basics

7 lectures
Introduction
01:23
Set Up the Lab Environment
11:28
Textbook
03:17
Linux Users and Groups
10:26
Access Control and Permissions
13:20
Running Commands as Superuser
05:04
Summary
01:11

Set-UID Privileged Programs

9 lectures
Introduction
01:25
The Need for Privileged Programs
08:40
The Set-UID Mechanism
18:43
What Can Go Wrong?
08:06
Attacks via Environment Variables
23:19
Attacks via Explicit User Inputs
15:05
Capability Leaking
11:48
Security Analysis and Summary
11:20
Lab Exercise
00:08

Shellshock Attack

6 lectures
Introduction
00:49
Shellshock Vulnerability
15:58
Exploit the Vulnerability
14:42
Reverse Shell
15:50
Launch the Reverse Shell Attack & Summary
04:06
Lab Exercise
00:14

Buffer-Overflow Attacks

17 lectures
Introduction
03:33
Memory Layout
07:11
Stack Layout
11:30
Buffer Overflow Vulnerability
10:45
Experiment Environment Setup
05:02
Launching Buffer Overflow Attacks
18:38
Exercises
08:07
Writing Shellcode
18:00
Countermeasures Overview
01:32
Developer's Approach
08:42
Address Space Layout Randomization
14:12
Shell Program's Defense
09:12
Non-Executable Stacks
07:19
Compiler's Approach: StackGuard
10:12
Heap-Based Buffer Overflow
09:22
Summary
02:30
Lab Exercise
00:11

Return-to-Libc Attacks

10 lectures
Introduction
01:35
Non-Executable Stacks
12:06
Overcome the Challenges
08:38
The Return-to-libc Attack
15:51
Return Oriented Programming
06:46
Chaining Function Calls w/o Arguments
06:31
Chaining Function Calls with Arguments
09:34
Chaining Function Calls from Library
14:52
The Final Attack
12:00
Lab Exercise
00:08

Race Condition

7 lectures
Introduction
07:11
Race Condition Vulnerability
16:12
Attack
11:24
Improved Attack
05:50
Countermeasures
13:49
Principle of Least Privilege
07:33
Lab Exercise
00:08

Dirty COW Attack

7 lectures
Introduction and Background
01:55
Background
08:29
Memory Mapping
11:27
Mapping Read-Only Files
10:28
The Dirty COW Vulnerability
09:15
Launch the Attack & Summary
10:03
Lab Exercise
00:15

Meltdown and Spectre Attacks

10 lectures
Introduction
03:18
Side Channels
13:52
Use CPU Cache as Side Channel
08:51
"Secret Room and Guards"
03:20
Out Of Order Execution in Meltdown Attack
10:09
Launch the Meltdown Attack
13:58
Speculative Execution in Spectre Attack
09:46
Launch the Spectre Attack
07:59
Summary
03:12
Lab Exercises
00:18

Format String Vulnerability and Attack

11 lectures
Introduction
01:40
How Format String Works
13:23
Format Stings with Missing Arguments
08:42
Read from Memory Using Vulnerabilities
12:06
Write to Memory
18:19
Write to Memory Faster
16:01
Code Injection
22:04
Remote Code Injection
09:48
Countermeasures
06:30
Summary
02:02
Lab Exercise
00:12

Đánh giá của học viên

Chưa có đánh giá
Course Rating
5
0%
4
0%
3
0%
2
0%
1
0%

Bình luận khách hàng

Viết Bình Luận

Bạn đánh giá khoá học này thế nào?

Khoá học liên quan

令和６年秋版：参考書の著者直伝！【応用情報技術者試験　午前版】講座 　合格に必要な知識の徹底解説＋過去問題解説

令和６年秋版：参考書の著者直伝！【応用情報技術者試験　午前版】講座 　合格に必要な知識の徹底解説＋過去問題解説

25 VND
50.000 VND
Diploma in Criminal Psychology - ACCREDITED

Diploma in Criminal Psychology - ACCREDITED

25 VND
50.000 VND
Appium -Mobile Testing (Android/IOS) from Scratch+Frameworks

Appium -Mobile Testing (Android/IOS) from Scratch+Frameworks

95 VND
50.000 VND
Appium - Mobile Testing with Latest 2.0 and Live Projects

Appium - Mobile Testing with Latest 2.0 and Live Projects

70 VND
50.000 VND
Học chứng chỉ MOS Powerpoint 2019 ứng dụng thành thạo MO-300

Học chứng chỉ MOS Powerpoint 2019 ứng dụng thành thạo MO-300

55 VND
50.000 VND
Học Chứng chỉ MOS Excel 2019 ứng dụng chuyên sâu (MO-200)

Học Chứng chỉ MOS Excel 2019 ứng dụng chuyên sâu (MO-200)

55 VND
50.000 VND
Học chứng chỉ MOS Word 2019 kỹ năng chuyên nghiệp (MO-100)

Học chứng chỉ MOS Word 2019 kỹ năng chuyên nghiệp (MO-100)

55 VND
50.000 VND
Deep Learning for Object Detection with Python and PyTorch

Deep Learning for Object Detection with Python and PyTorch

899.000 VND
50.000 VND
Learn Korean from Scratch - Start Speaking Korean in 30 Days

Learn Korean from Scratch - Start Speaking Korean in 30 Days

75 VND
50.000 VND
Kerberos authentication in Windows domains

Kerberos authentication in Windows domains

45 VND
50.000 VND
Docker for Node.js Projects From a Docker Captain

Docker for Node.js Projects From a Docker Captain

85 VND
50.000 VND
IELTS Pro: Reading | Writing | Listening | Speaking

IELTS Pro: Reading | Writing | Listening | Speaking

25 VND
50.000 VND
Autonomous Cars: Deep Learning and Computer Vision in Python

Autonomous Cars: Deep Learning and Computer Vision in Python

85 VND
50.000 VND
Sales Copywriting With ChatGPT & Landing Page Optimization

Sales Copywriting With ChatGPT & Landing Page Optimization

60 VND
50.000 VND
Ethical Hacking Course by Black Hat Pakistan

Ethical Hacking Course by Black Hat Pakistan

26 VND
50.000 VND
SEO:Complete SEO Master Course + SEO for WordPress (Sinhala)

SEO:Complete SEO Master Course + SEO for WordPress (Sinhala)

25 VND
50.000 VND
image

Đăng ký get khoá học Udemy - Unica - Gitiho giá chỉ 50k!

Get khoá học giá rẻ ngay trước khi bị fix.

Get khoá học cho tôi