CSC-295 HackPack

Course Details

Course Resources

You can find the class schedule and all slides from the lectures here.
We will use Slack for our communication.
The lectures are recorded and available here.

Course Prerequisites

Prerequisite: no prerequisites

Informal: You will need to build attacks. I expect you to:

• know how to code (in language of your choice)
• I will use mix of pseudocode, Python, JavaScript, PHP
• be(come) comfortable with Linux/UNIX

If you do not have a basic understanding of these areas, you will have difficulty with the course. If you have questions regarding these prerequisites, please contact the instructor.

Overview

In this class, we will explore several aspects of practical web security with the goal of understanding the attacker’s mindset. The class will help the students to understand web security vulnerabilities, what cause them, how to attack them and how to defend them. We will participate in Capture The Flag (CTF) competitions and solve together web security challenges.

Textbooks and Reading Material

This course has no formal textbook. The course readings will come from online book chapters, seminal papers, and other informative sources.

Here are some useful online books that provide additional information:

• The Web Application Hacker’s Handbook: Finding and Exploiting Security Flaws
• The Tangled Web: A Guide to Securing Modern Web Applications

Student Learning Outcomes

By the end of this course, students will be able to:

• Practical hacking
• Focus on web security specifically
• How to identify and exploit web vulnerabilities
• Solve CTF challenges

Course Structure and Grading

The course will consist of one midterm, a final and several homework assignments that contribute to the final grade in the following propotions:

The final letter grade will be based on the final percentage as follows:

A+ <= 97% < A <= 93% < A- <= 90% < B+ <= 87% < B <= 83% < B- <= 80% < C+ <= 77% < C <= 73% < C- <= 70% < D+ <= 67% < D <= 63% < D- <= 60% < F

REG 02.50.03 (Grades and Grade Point Average) describes the grade point interpretation of letter grades.

Homework Assignments

The instructor will assign homework assignments on a periodic basis for topics associated with the class assignments. These homework assignments require the students to write, program, or perform other basic research. The content and due dates of these assignments will be decided over the course of the semester. If you cannot attend a lecture, contact other students to see if any assignments have been made and consult the syllabus.

Class Participation

To do well in this course, students must take active and regular roles in discussion and demonstrate comprehension of the reading and lecture themes. Students are required to do the assigned reading before class. This will be closely monitored by the instructor, thereby making a student’s ability to demonstrate their comprehension of papers essential to a receiving a passing grade.

Weekly Course Schedule

See the course schedule. Note that the schedule is subject to change as the semester evolves.

Late Policy

Due to COVID, all assignments (weekly writeups) can be submitted until the end of the course.

Attendance Policy

The instructor will not take any formal attendance for class meetings.

Academic Integrity Policy

The university, college, and department policies against academic dishonesty will be strictly enforced. You may obtain copies of the NCSU Code of Student Conduct from the Office of Student Conduct, or from the following URL: http://policies.ncsu.edu/policy/pol-11-35-01

The instructor expects honesty in the completion of test and assignments. The instructor has a zero tolerance policy for violations of academic integrity. The instructor carefully monitors for instances of offenses such as plagiarism and illegal collaboration, so it is very important that students use their best possible judgement in meeting this policy. The instructor will not entertain any discussion on the discovery of an offense, and will assign the 'F' grade and refer the student to the appropriate University bodies for possible further action. It is the understanding and expectation of instructor that the student's signature on any test or assignment means that the student neither gave nor received unauthorized aid. For additional information, visit http://studentconduct.ncsu.edu/

Note that students are explicitly forbidden to copy anything off the Internet (e.g., source code, text) for the purposes of completing an assignment or the final project. Also, students are forbidden from discussing or collaborating on any assignment except were explicitly allowed in writing by the instructor.

Ethics Statement

This course considers topics involving personal and public privacy and security. As part of this investigation we will cover technologies whose abuse may infringe on the rights of others. As an instructor, I rely on the ethical use of these technologies. Unethical use may include circumvention of existing security or privacy measurements for any purpose, or the dissemination, promotion, or exploitation of vulnerabilities of these services. Exceptions to these guidelines may occur in the process of reporting vulnerabilities through public and authoritative channels. Any activity outside the letter or spirit of these guidelines will be reported to the proper authorities and may result in dismissal from the class. For a general basis of ethical decision-making refer to the ACM Code of Ethics and Professional Conduct.

When in doubt, please contact the course professor for advice. Do not undertake any action which could be perceived as technology misuse anywhere and/or under any circumstances unless you have received explicit permission from the instructor.

Statement on transportation

Students have to provide their own transportation for any and all class related trips.

Statement on safety and risk assumption

This course does not require activities that pose physical risk to students.

Statement for students with disabilities

Reasonable accommodations will be made for students with verifiable disabilities. In order to take advantage of available accommodations, students must register with Disability Resources Office for Students at 1900 Student Health Center, Campus Box 7509, 919-515-7653. For more information on NC State’s policy on working with students with disabilities, please see the Academic Accommodations for Students with Disabilities Regulation (REG 02.20.01).

N.C. State University Polices, Regulations, and Rules (PRR)

Students are responsible for reviewing the PRRs which pertain to their course rights and responsibilities. These include: http://policies.ncsu.edu/policy/pol-04-25-05 (Equal Opportunity and Non-Discrimination Policy Statement), http://oied.ncsu.edu/oied/policies.php (Office for Institutional Equity and Diversity), http://policies.ncsu.edu/policy/pol-11-35-01 (Code of Student Conduct), and http://policies.ncsu.edu/regulation/reg-02-50-03 (Grades and Grade Point Average).

Course Evaluation

Online class evaluations will be available for students to complete during the last two weeks of class. Students will receive an email message directing them to a website where they can login using their Unity ID and complete evaluations. All evaluations are confidential; instructors will never know how any one student responded to any question, and students will never know the ratings for any particular instructors.

Trans Inclusive Syllabi Act

In an effort to affirm and respect the identities of transgender students in the classroom and beyond, please contact me if you wish to be referred to using a name and/or pronouns other than what is listed in the student directory.