HW#4 --- last modified February 07 2019 23:05:55..

Solution set.

Due date: Dec 10

Files to be submitted:
  Hw4.zip

Purpose:

Related Course Outcomes:

The main course outcomes covered by this assignment are:

LO7 -- Understand certain widely used security protocols, including SSL, IPSec and Kerberos; understand the limitations and security issues related to these protocols.

LO8 -- Understand the role that software flaws play in security; understand the buffer overflow attack and various ways to prevent it; exploit a simple buffer overflow condition; understand race conditions.

LO9 -- Understand different types of malicious software (malware) including viruses, worms and Trojan horses; understand the details of the Morris Worm, and at least one modern virus or worm, such as Code Red or Slammer; understand the methods used to prevent and detect malware attacks.

LO10 -- Understand software reverse engineering and the security threat that it poses; implement a simple reverse engineering attack.

LO11 -- Understand the role that operating systems plays in security and the need for a trusted OS; understand the principles of a trusted OS.

Specification:

This homework consists of two parts: A set of book problems, which are to be done individually, should be handwritten (no typing), and must be turned in at the start of class on the day indicated; a coding assignment, which can be done in a team of at most three people. For the coding portion only one team member needs to submit -- just be sure to mention the names of your teammates in the documentation for your code.

The book problems I want you to do are: Ch 9 Exercise 2 and 3 (due Nov. 14). Ch 10 Exercise 2 and 6 (due Nov. 21). Ch 11 Exercise 6 and 27 (due Nov. 28). Ch 13.6 Exercise 1 and 2 (due Dec. 5).

The coding portion of this assigment is again a sequence of exercises from the book. Your code and notes about these problem should be included in Hw4.zip which is due Dec. 5. Do problem 11.15. Put the code in a file Ex1115.c . In a comment at the end of this file put your answers to (a), (b), and (c). Do problem 12.1 submit your patched executable in Ex121.exe, submit your screenshot as Ex121.jpg, and text answers for this as Ex121.txt . Do problem 12.3. Submit the reversed version of the class file as Ex123.java put your answers to the problem in a comment at the end of this file.

Point Breakdown