CS 390S: Secure Programming
Labs
August 23: Shell mini-lab in the ReAssure systemThe mini-lab is explained in the slides. It should take you 10 minutes to create a ReAssure account and 20 more minutes to do the mini-lab. It is due at the start of class (on paper please) August 30.
August 30: Back-door mini-lab in the ReAssure system
The mini-lab showing the dangers of setuid programs is explained in the slides. It should take you 2 hours to do. Please email me your script before the start of class September 6.
Important note: the slides on setting up NX are missing a step. In the NX configuration, Desktop settings, NX should be set to run the following command: "/usr/bin/vmware".
September 13: Taint mini-lab (works on any UNIX system, and Windows systems with Perl installed)
Email me your answers to the questions on the slide before the start of class on September 20.
September 20: Buffer Manipulation Lab (counts as much as 3 mini-labs)
Due before the start of class on October 11.
The start file contains all the tests you will be graded on: strings_start.c There are three functions to fill up: one to return the length of a string (strlen), copy (strcpy) and concatenation (strcat), each being passed the length of the buffers. You should be able to complete one of the functions each week, with on average 1 hour of work on each.