CSC5991CyberSecurityPrac1ce
FengweiZhang
WayneStateUniversity CSC5991CyberSecurityPrac1ce 1
WhoAmI?
• FengweiZhang– AssistantProfessorofComputerScience– Office:MaccabeesBuilding,Room14109.3– Emai:fengweiatwaynedotedu– Website:hQp://fengwei.me
• CourseInforma1on– Coursewebsite:hQp://www.cs.wayne.edu/fengwei/16sp-csc5991/index.html
– OfficeHours:M,W12:20PM–01:20PM
WayneStateUniversity CSC5991CyberSecurityPrac1ce 2
WhyStudySecurity?
It’scooltobeahackerIt’sahottopicandmediatalkaboutitIt’susefulforfindingajob
WayneStateUniversity CSC5991CyberSecurityPrac1ce 3
CourseOverview
• Providinghands-onexperienceinplayingwithsecurityso]wareandnetworksystemsinalivelaboratoryenvironment
• TakingbothoffensiveanddefensemethodstohelpstudentexploresecuritytoolsandaQacksinprac1ce
• FocusingonaQacks,hackingfundamentals,defenses.
WayneStateUniversity CSC5991CyberSecurityPrac1ce 4
CourseObjec1ves
• Understandingonreal-worldsecurityvulnerabili1es,exploitsanddefenses
• Havinghands-onlabsinnetworkandsystemsecurityexperiments
• Learningknowledgeofprac1calsecurityproblemsandtheirsolu1ons
WayneStateUniversity CSC5991CyberSecurityPrac1ce 5
CourseLabs
• Lab1:PacketSniffingandWireshark• Lab2:BufferOverflow• Lab3:MetasploitFramework&HeapSpray• Lab4:MalwareandKernelRootkits• Lab5:ScanningandReconnaissance• Lab6:DenialofService(DOS)• Lab7:WirelessExploita1on&Defenses• Lab8:Firewalls&IntrusionDetec1onSystems(IDS)
WayneStateUniversity CSC5991CyberSecurityPrac1ce 6
LabAssignments
• 8labassignments– Sourcecode– WriteupPDF
• SubmiingviaBlackboardwithasingleZipfile– hQp://blackboard.wayne.edu
• Makingsureyourfilecanbeunzippedacrossplakorms(Windows,MacOSX,Linux)
WayneStateUniversity CSC5991CyberSecurityPrac1ce 7
TeamProjects
• Aresearchprojectwith2-3individuals– buildinganewsystem– improvinganexis1ngtechnique– performingalargecasestudy
• ProjectproposalsdueonFeb24– a2-pagedescrip1on
• Projectpresenta1onsareonApril20&25• ProjectfinalreportsdueonApril25
WayneStateUniversity CSC5991CyberSecurityPrac1ce 8
CoursePrerequisites
• CSC4290Introduc1ontoComputerNetworking
• CSC4420ComputerOpera1ngSystems
• CSC5270ComputerSystemsSecurity
WayneStateUniversity CSC5991CyberSecurityPrac1ce 9
PoliciesonLateSubmissions
• Labandprojectdeadlineswillbehard.• Latehomeworkwillbeacceptedwitha10%reduc1oningradeforeachdaytheyarelateby.
• Onceahomeworkassignmentisdiscussedinclass,submissionswillnolongerbeaccepted.
WayneStateUniversity CSC5991CyberSecurityPrac1ce 10
GradingPolicy
WayneStateUniversity CSC5991CyberSecurityPrac1ce 11
GradingScale
WayneStateUniversity CSC5991CyberSecurityPrac1ce 12
Thegradesforthecoursewillbebaseduponthepercentagesgivenbelow
AcademicIntegrity
• PleasereadtheUniversity'sAcademicIntegrityPage– hQp://doso.wayne.edu/academic-integrity.html
• WSUStudentCodeofConduct.– hQp://doso.wayne.edu/assets/codeofconduct.pdf
WayneStateUniversity CSC5991CyberSecurityPrac1ce 13
StudentDisabili1esServices
• Ifyouhaveadocumenteddisabilitythatrequiresaccommoda1ons,youwillneedtoregisterwithStudentDisabilityServicesforcoordina1onofyouracademicaccommoda1ons.
• TheStudentDisabilityServices(SDS)officeislocatedintheAdamanyUndergraduateLibrary.TheSDStelephonenumberis313-577-1851or313-202-4216(Videophoneuseonly).
WayneStateUniversity CSC5991CyberSecurityPrac1ce 14
OtherResources
• VMwareso]wareandMicroso]productsthroughDreamsparkatWSU.– InstallVMWareonyourlaptopsforhomedesktops– hQp://apps.eng.wayne.edu/MPStudents/Dreamspark.aspx
• KaliLinux-Penetra1onTes1ngLinuxDistribu1on.– hQps://www.kali.org/downloads/
WayneStateUniversity CSC5991CyberSecurityPrac1ce 15
Lab0
• SigntheCSC5991CyberSecurityPrac1ceClassStudentAgreement
• MakesureyoucanloginasCSC5991studentonZeroClient– UseyourWSUaccessIDandpass– ProvideyouVMsforlabexperiments
WayneStateUniversity CSC5991CyberSecurityPrac1ce 16
Lab0(cont’d)
• [email protected]– ListHomepage(webinterfaceforsubscriberstojoin/leavelist,postmessages,viewarchives):hQp://lists.wayne.edu/cgi-bin/wa?A0=csc5991-security
• Sendanemailtothelisttointroduceyourselfbynextclass
• Sendazippedtest.txtfileonBackboardbythisweek
WayneStateUniversity CSC5991CyberSecurityPrac1ce 17
NextClass
• Lab1:PacketSniffingandWireshark– Beprepared!
WayneStateUniversity CSC5991CyberSecurityPrac1ce 18