SEED:

Developing Instructional Laboratories for Computer SEcurity EDucation

Vulnerability and Attack Labs

People learn from mistakes. In security education, we study mistakes that lead to software vulnerabilities. Studying mistakes from the past not only help students understand why systems are vulnerable, why a "seemly-benign" mistake can turn into a disaster, and why many security mechanisms are needed. More importantly, it also helps students learn the common patterns of vulnerabilities, so they can avoid making similar mistakes in the future. Moreover, using vulnerabilities as case studies, students can learn the principles of secure design, secure programming, and security testing.

(1) Software in general

  1. Set-UID Program Vulnerability Lab: exploit the vulnerabilities of the privileged Set-UID programs. (Survey Results)
  2. Buffer Overflow Vulnerability Lab: exploit the buffer overflow vulnerability using the shell-code approach. (Survey Results)
  3. Return-to-libc Attack Lab: exploit the buffer-overflow vulnerabilities using the return-to-libc attack. (Survey Results)
  4. Format String Vulnerability Lab: exploit the format string vulnerability. (Survey Results)
  5. Race Condition Vulnerability Lab: exploit the race condition vulnerability. (Survey Results)
  6. Chroot Sandbox Vulnerability Lab: explore how the chroot sandbox can be broken.

(2) Network Protocols

  1. TCP/IP Attack Lab: exploit the vulnerabilities of the TCP/IP protocols. (Survey Results)
  2. DNS Pharming Attack Lab (New): exploit the vulnerabilities of the DNS protocol to launch Pharming attacks.

(3) Web Applications

  1. Cross-site Scripting Attack Lab exploiting cross-site scripting vulnerabilities. (Survey Results)
  2. Cross-site Request Forgery Attack Lab (New): exploiting cross-site request forgery vulnerabilities.
  3. SQL-Injection Attack Lab (Under revision): experience the SQL-Injection attacks. (Survey Results)
  4. ClickJacking Attack Lab (Under development): experience the ClickJacking attacks.

Design/Implementation Labs

The objective of the design/implementation labs is to provide students with opportunities to apply security principles in designing and implementing systems. They help students achieve learning by system development.
  1. Role-Based Access Control (RBAC) Lab design and implement an integrated access control system for Minix that uses both capability-based and role-based access control mechanisms. Students need to modify Minix kernel to implement both capability and RBAC (this is a comprehensive project for access control). (Survey Results)
  2. Capability Lab: design and implement a capability-based access control system for Minix (this is a comprehensive project).
  3. Encrypted File System Lab: design and implement an encrypted file system for Minix (a comprehensive project).
  4. Set-RandomUID Lab: design and implement a simple sandbox for Minix.
  5. IPSec Lab: implement the IPSec protocol (simplified) for Minix (a comprehensive project). (Survey Results)
  6. Firewall Lab implement a simple firewall (called "minifirewall") for Minix. (Survey Results)
  7. Address Space Layout Randomization (ASLR) Lab randomize stack and heap in Minix to improve security.

Exploration Labs

The objective of the exploration labs is two-fold: the first is to enhance students' learning via observation, playing and exploration, so they can see what security principles ``feel'' like in a real system; the second objective is to provide students with opportunities to apply security principles in analyzing and evaluating systems. The exploration labs provide a feasible means by which the students have "a direct encounter with the phenomena being studied rather than merely thinking about the encounter, or only considering the possibility of doing something about it".
  1. Linux Capability Exploration Lab (new): explore the capability access control in Linux.
  2. Web Browser Access Control Lab (new): exploring the Same-Origin Access Control Policy in web browsers.
  3. Pluggable Authentication Modules (PAM) Lab: explore a flexible authentication technique.
  4. SYN Cookies Lab: explore the SYN Cookies mechanism in Linux.
  5. Linux Security Module (LSM) Exploration Lab: explore the LSM and see how it can be used to extend and change Linux's access control.
  6. RBAC Exploration Lab (under development)
  7. Mandatory Access Control (MAC) Exploration Lab (under development)
  8. Encrypted File System Exploration Lab (under development)
  9. IPSec and VPN (Virtual Private Network) Exploration Lab (under development)
  10. Intel 80386 Protection Mode Exploration Lab (under development)