ECS 153 -- Computer Security (Winter 2006)
Contact
Till Stegers
e-mail: *my last name* at cs dot ucdavis dot edu
Office hours: Tuesday 1-3 pm in 3106 Kemper Hall
Material
-
Course web page
- 01/11, Robust programming. Fragile example program: fragile.c
- 02/08, Fortify Source Code Analyzer. Hint: Use a command like
/usr/local/FortifySoftware/SCAS-TE/sourceanalyzer -format fvdl gcc file.c > results.xml
to run sourceanalyzer on file.c and dump the results in the XML file
results.xml. Then use the nice graphical auditworkbench:
/usr/local/FortifySoftware/SCAS-TE/auditworkbench results.xml &
- 02/22, Campus authentication system and Kerberos. See links below.
- 03/01, Security auditing tools: Nmap and Nessus. See links below.
- 03/08, Process user-IDs, stat and chown syscalls. Example for stat(), Example for seteuid(), also see links.
Links