CSE 634 Network/System Attack Methods (Spring 2002)
Homework I
Deadline: 4PM, 2/15/2002
Reading Assignments
Chapter 1, 2, 3, and 8 of the textbook "Hacking Exposed".
Programming Assignments
- Use the tool nmap (http://www.insecure.org/nmap)
and other tools if necessary
to derive a detailed map of the departmental network.
This map should include the set of machines on the network, their IP addresses,
and the set of ports that are open on each host.
You are required to do this on ECSL machines because
they are outside the department firewall and this makes it
more challenging. If you don't have
an account on the ECSL machines, please send me email to request one.
You need to turn in a report describing the process through which
you derive the map, including any utility you write to get the job done.
Please write the report in HTML, and please send me the URL pointer
to where your report is
when you submit the report.
- A network sniffer such as
TCPdump is a useful tool to debug network programs
and to serve as the basis for network intrusion detection systems.
Design a scheme to detect whether a machine is running a
network sniffer or not.
- Write a program that is still vulnerable to
buffer overflow attack despite the defense of
the RAD algorithm that we talked about in the class,
and demonstrate how to attack it.