This is the module web page for Security Workshop (see module specification).
All teaching material written by myself (ie. Dr. Carl Pulley) is placed within this site's resource blog. By subscribing to this blog, you get to see when new material has been released or updated. My teaching materials may also be accessed by clicking on the relevant teaching week link under Teaching Materials on this page's sidebar.
This course assumes you are familiar with the following subjects areas:
- x86 assembler
- basic C/C++ programming
This years teaching materials are a complete rewrite of the previously taught material. The course has been rewritten to place a greater emphasis on discovering and locating vulnerabilities within software applications.
VMWare virtual machines will be used on this course. In particular, we shall make use of two specific virtual machines throughout both terms:
- a Windows virtual machine equipped with tools for performing automated fuzzing of software applications
- an Ubuntu virtual machine equipped with tools for performing file system forensics and web application assessments.
Only these virtual machines will be supported on this module.
This module is assessed by two equally weighted assignments (Note: all assignment related questions should be raised using the appropriate Blackboard forum):
- assignment 1: this will be an exercise in file system forensics
- assignment 2: this will be an exercise in memory forensics.
In addition, throughout this module you will be expected to complete a series of quizzes (some will be in-class and some are expected to be completed before the next practical). These quizzes are designed to measure and monitor your understanding of the taught material.
Whilst these quizzes will not contribute to your overall marks, anyone who fails to maintain a good overall average shall be treated as if they were missing lessons.
Currently, it is anticipated that the term 1 in-class quizzes will occur in weeks 6, 10 and 12. During weeks 2 and 8 of term 1, you will be expected to complete an out of class quiz (each such quiz will close at midnight on the Tuesday of the following week).