Exploit be demonstrated safely in-class

Assignment Help Basic Computer Science
Reference no: EM13937069

Task: You are required to create and deliver a presentation providing an analysis of an existing software exploit (therefore you are not required to craft a new, unknown exploit yourself).

You should describe the history of the exploit, show clearly how it works, provide a small runnable code example that illustrates the problem and show how the exploit can be fixed. As a second example of the exploit, you must also include code from a reasonably-sized working application that exhibits the problem and provide a patch to fix the exploit in that application.

Note: the code can be in any language running on any operating system as long as the exploit can be demonstrated safely in-class and assessed. Demonstrated safely means that you many not hack into any systems internal or external to the University, nor may you engage in any conduct that would violate the Student

Charter.
Choose from:
• Buffer overflows (heap-based only)
• SQL injections (second-order only)
• Shellcoding
• Cross-site scripting (XSS)
• Insecure protocols
• Exploiting a device (hardware e.g., modem, printer, router etc.)
Put your team members and your choice on the unit discussion board. There are four deliverables for this assignment:
1. A PowerPoint presentation (60 slides, minimum) about your chosen exploit which you will both deliver to the class. Use the standard SCSS template. As part of the presentation you must demonstrate your exploit and fix it live.

Allow 45 minutes for your presentation and 15 minutes for questions.
2. A user manual that describes how to install and configure a system to demonstrate your exploit, exactly as per your presentation.
3. Any software required to demonstrate your exploit.
4. Copies of any files used as references in digital format (e.g. pdf files for journal articles or mht files for web pages).

Reference no: EM13937069

Questions Cloud

What are the pricing objectives and policies : What are the pricing objectives, policies, strategies and procedures? To what extent are prices set on sound cost, demand and competitive criteria?
Simple eigenvalue of a diagonalizable matrix : Let be a simple eigenvalue of a diagonalizable matrix with right and left eigenvectors and , and let be the corresponding eigenvalue of the matrix . Show that to first order it holds that Hint: Consider the perturbed eigenvalue equation .
Select a peer-reviewed article on gender and health : Select a peer-reviewed article on "gender and health," or "ethnicity and health," or "socioeconomic class and health," then answer the following questions:Critique the methods used in these findings. What is your opinion on the validity of the findin..
How to use classes with private and public variables in c++. : I am trying to learn about how to use classes with private and public variables in c++. I've got a conversion program that I would like to use as a prop.
Exploit be demonstrated safely in-class : Task: You are required to create and deliver a presentation providing an analysis of an existing software exploit (therefore you are not required to craft a new, unknown exploit yourself).
Ethical philosophy of an organisation : The ethical philosophy of an organisation is usually embedded into the culture of the organisation by its leaders. Describe what ‘leadership by example' is and how it helps create an ethical culture.
What is the hormone that is tested for in pregnancy : Pregnancy can be detected several days post-implantation, based on a hormone level test. What is the hormone that is tested for in pregnancy, and what is its role? How is the test administered, and who may perform it?
Future career in health care : Consider your future career in health care. What opportunities will you have to promote health enhancing behaviors and discourage health compromising behaviors?
Represent the real numbers : Assume you are given a set of N

Reviews

Write a Review

Basic Computer Science Questions & Answers

  Normally this representation has a fixed size

Most programming languages have a built-in integer data type. Normally this representation has a fixed size, thus placing a limit on how large a value can be stored in an integer variable.

  Problem regarding the interrupts

What is the name given to a routine that is executed in response to an interrupt? What are the advantages of using interrupts to handle data inputs and outputs?

  How can these limitations be overcome

What are the data limitations that occur when creating cookies from JavaScript® language? How can these limitations be overcome?

  Computing time complexity of algorithm

Suppose an algorithm consists of two stages. The time complexity of Stage 1 is O(nlog2n) and that of Stage 2 is O(n2). By using the definition of Big-Oh, show that the overall time complexity is O(n2).

  Using a conductive material such as aluminum foil

Using a conductive material, such as aluminum foil, construct a Faraday cage. Make it big enough to hold a cellphone or portable FM radio receiver and con?rm that it blocks RF signals to such devices. Next, experiment with the size of holes in the ex..

  State and prove an s-m-n theorem for programs

State and prove an s-m-n theorem for programs. 2. Describe how the universal Turing machine locates a particular instruction on its description tape. 3. Show that the class of sets accepted by Turing machines is closed under union.

  Edit this java code add the 3 amounts

Can anyone pls edit this Java code? I need to be able to add the 3 amounts listed on the main method public class Money { private Currency currency; private int wholenum; private int decnum; public Money(Currency currency, int wholenum, int decnum..

  Write a function named daycount() that accepts a month

Write a function named daycount() that accepts a month, day, and year as its input arguments.

  Sentinel-controlled repetition to allow a user

The computeShippingCharges() method should use sentinel-controlled repetition to allow a user to enter shipping data until the user has indicated that he or she is done. The total shipping charges will be computed and returned as a double value.

  Esper is a component for complex event processing

Esper is a component for complex event processing (CEP). We use Esper in this exercise to learn about stream database systems and complex event processing. The scenario used in the exercise is building a stock trading robot. The events (ticks) are..

  Explaining process of making changes as recursive

You can view the process of making changes as recursive. You first see if any dollars are required, subtract them from the total, and then make change for what remains. Complete the LISP program to achieve the above requirements.

  What do you mean by ascii or ebcdic

What is ASCII or EBCDIC? What part do the aforementioned things play in hashing? What is the formula for the PPD? What does the numerator and denominator say about the potential performance issues of this metric?

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd