CSE 634 Network/System Attack Methods (Spring 2002)
Homework I
Deadline: 4PM, 2/15/2002



Reading Assignments

Chapter 1, 2, 3, and 8 of the textbook "Hacking Exposed".

Programming Assignments

  1. Use the tool nmap (http://www.insecure.org/nmap) and other tools if necessary to derive a detailed map of the departmental network. This map should include the set of machines on the network, their IP addresses, and the set of ports that are open on each host. You are required to do this on ECSL machines because they are outside the department firewall and this makes it more challenging. If you don't have an account on the ECSL machines, please send me email to request one. You need to turn in a report describing the process through which you derive the map, including any utility you write to get the job done. Please write the report in HTML, and please send me the URL pointer to where your report is when you submit the report.
  2. A network sniffer such as TCPdump is a useful tool to debug network programs and to serve as the basis for network intrusion detection systems. Design a scheme to detect whether a machine is running a network sniffer or not.
  3. Write a program that is still vulnerable to buffer overflow attack despite the defense of the RAD algorithm that we talked about in the class, and demonstrate how to attack it.