CSC5991CyberSecurityPrac1ce

FengweiZhang

WayneStateUniversity CSC5991CyberSecurityPrac1ce 1

WhoAmI?

•  FengweiZhang– AssistantProfessorofComputerScience– Office:MaccabeesBuilding,Room14109.3–  Emai:fengweiatwaynedotedu– Website:hQp://fengwei.me

•  CourseInforma1on–  Coursewebsite:hQp://www.cs.wayne.edu/fengwei/16sp-csc5991/index.html

– OfficeHours:M,W12:20PM–01:20PM

WayneStateUniversity CSC5991CyberSecurityPrac1ce 2

WhyStudySecurity?

It’scooltobeahackerIt’sahottopicandmediatalkaboutitIt’susefulforfindingajob

WayneStateUniversity CSC5991CyberSecurityPrac1ce 3

CourseOverview

•  Providinghands-onexperienceinplayingwithsecurityso]wareandnetworksystemsinalivelaboratoryenvironment

•  TakingbothoffensiveanddefensemethodstohelpstudentexploresecuritytoolsandaQacksinprac1ce

•  FocusingonaQacks,hackingfundamentals,defenses.

WayneStateUniversity CSC5991CyberSecurityPrac1ce 4

CourseObjec1ves

•  Understandingonreal-worldsecurityvulnerabili1es,exploitsanddefenses

•  Havinghands-onlabsinnetworkandsystemsecurityexperiments

•  Learningknowledgeofprac1calsecurityproblemsandtheirsolu1ons

WayneStateUniversity CSC5991CyberSecurityPrac1ce 5

CourseLabs

•  Lab1:PacketSniffingandWireshark•  Lab2:BufferOverflow•  Lab3:MetasploitFramework&HeapSpray•  Lab4:MalwareandKernelRootkits•  Lab5:ScanningandReconnaissance•  Lab6:DenialofService(DOS)•  Lab7:WirelessExploita1on&Defenses•  Lab8:Firewalls&IntrusionDetec1onSystems(IDS)

WayneStateUniversity CSC5991CyberSecurityPrac1ce 6

LabAssignments

•  8labassignments– Sourcecode– WriteupPDF

•  SubmiingviaBlackboardwithasingleZipfile– hQp://blackboard.wayne.edu

•  Makingsureyourfilecanbeunzippedacrossplakorms(Windows,MacOSX,Linux)

WayneStateUniversity CSC5991CyberSecurityPrac1ce 7

TeamProjects

•  Aresearchprojectwith2-3individuals– buildinganewsystem–  improvinganexis1ngtechnique– performingalargecasestudy

•  ProjectproposalsdueonFeb24– a2-pagedescrip1on

•  Projectpresenta1onsareonApril20&25•  ProjectfinalreportsdueonApril25

WayneStateUniversity CSC5991CyberSecurityPrac1ce 8

CoursePrerequisites

•  CSC4290Introduc1ontoComputerNetworking

•  CSC4420ComputerOpera1ngSystems

•  CSC5270ComputerSystemsSecurity

WayneStateUniversity CSC5991CyberSecurityPrac1ce 9

PoliciesonLateSubmissions

•  Labandprojectdeadlineswillbehard.•  Latehomeworkwillbeacceptedwitha10%reduc1oningradeforeachdaytheyarelateby.

•  Onceahomeworkassignmentisdiscussedinclass,submissionswillnolongerbeaccepted.

WayneStateUniversity CSC5991CyberSecurityPrac1ce 10

GradingPolicy

WayneStateUniversity CSC5991CyberSecurityPrac1ce 11

GradingScale

WayneStateUniversity CSC5991CyberSecurityPrac1ce 12

Thegradesforthecoursewillbebaseduponthepercentagesgivenbelow

AcademicIntegrity

•  PleasereadtheUniversity'sAcademicIntegrityPage– hQp://doso.wayne.edu/academic-integrity.html

•  WSUStudentCodeofConduct.– hQp://doso.wayne.edu/assets/codeofconduct.pdf

WayneStateUniversity CSC5991CyberSecurityPrac1ce 13

StudentDisabili1esServices

•  Ifyouhaveadocumenteddisabilitythatrequiresaccommoda1ons,youwillneedtoregisterwithStudentDisabilityServicesforcoordina1onofyouracademicaccommoda1ons.

•  TheStudentDisabilityServices(SDS)officeislocatedintheAdamanyUndergraduateLibrary.TheSDStelephonenumberis313-577-1851or313-202-4216(Videophoneuseonly).

WayneStateUniversity CSC5991CyberSecurityPrac1ce 14

OtherResources

•  VMwareso]wareandMicroso]productsthroughDreamsparkatWSU.–  InstallVMWareonyourlaptopsforhomedesktops–  hQp://apps.eng.wayne.edu/MPStudents/Dreamspark.aspx

•  KaliLinux-Penetra1onTes1ngLinuxDistribu1on.–  hQps://www.kali.org/downloads/

WayneStateUniversity CSC5991CyberSecurityPrac1ce 15

Lab0

•  SigntheCSC5991CyberSecurityPrac1ceClassStudentAgreement

•  MakesureyoucanloginasCSC5991studentonZeroClient– UseyourWSUaccessIDandpass– ProvideyouVMsforlabexperiments

WayneStateUniversity CSC5991CyberSecurityPrac1ce 16

Lab0(cont’d)

•  Subscribecoursemailing-listcsc5991-security@lists.wayne.edu–  ListHomepage(webinterfaceforsubscriberstojoin/leavelist,postmessages,viewarchives):hQp://lists.wayne.edu/cgi-bin/wa?A0=csc5991-security

•  Sendanemailtothelisttointroduceyourselfbynextclass

•  Sendazippedtest.txtfileonBackboardbythisweek

WayneStateUniversity CSC5991CyberSecurityPrac1ce 17

NextClass

•  Lab1:PacketSniffingandWireshark– Beprepared!

WayneStateUniversity CSC5991CyberSecurityPrac1ce 18