Cours : Segurança em Sistemas Informáticos | moodle2324

FEUP-M.EIC025-2023/2024-2S

Aperçu des sections

Généralités

Tout replier Tout déplier
About Exams
- Normal Exam 2022/23 Fichier
  
  290.7 Ko
Lectures
- 0. Presentation Fichier
  
  48.7 Ko
- 0. Presentation (original) Fichier
  
  54.8 Ko
- 1. Introduction (& review) Fichier
  
  170.2 Ko
- 1.A Intro-annex: CIAA simplified Fichier
  
  73.4 Ko
- 2.1 Cryptography Basics Fichier
  
  486.7 Ko
- 2.2 Cryptography - general protection techniques Fichier
  
  331.5 Ko
- 2.3 Cryptography 2nd level (part 1) Fichier
  
  306.3 Ko
- 2.3 Cryptography 2nd level (part 2) Fichier
  
  334.5 Ko
- 2.3 Cryptography 2nd level (part 2) (original) Fichier
  
  327.7 Ko
- 3. Sofware Security Components Fichier
  
  692.1 Ko
- for printing (4 slides per page) Fichier
  
  1.7 Mo
- Lectures from OWASP Page
- 4. Software Security Fichier
  
  958.6 Ko
- For printing (4 slides/page) Fichier
  
  1.6 Mo
- Some Less Common Software Vulnerabilities Page
- Some Simple Vulnerability Demos Fichier
  
  1.0 Mo
- 5. Identity and Authentication Mechanism Fichier
  
  1.4 Mo
- For printing (4 slides/page) Fichier
  
  3.0 Mo
- 6. Access Control (Authorization) Security Mechanism Fichier
  
  839.2 Ko
- For printing (4 slides/page bw) Fichier
  
  1.9 Mo
- 7. Web Security Fichier
  
  2.2 Mo
- Print version (4 per page) Fichier
  
  4.3 Mo
- OAuth Demo (with Node and Koa) Fichier
  
  3.2 Mo
  
  OAuth Koa
  =========
  This demo contains 3 node.js servers illustrating the OAuth protocol in a simplified implementation. It contains the resource server (resource.js), the authorization (with authentication also) server (authorize.js), and the client application (web app) server (client.js).
  The servers were implemented using Koa, a simpler Express replacement, with a separate router file for the API implementations and for generating the web pages (in the client server mostly). The pages are generated using Pug templates containing the HTML (and CSS) and parameters for the content.
  To run:
  Run the three servers in three different command line consoles (>node ....js).
  From a browser, access the client's home page (http://localhost:9001).
  See the logs that appear on the consoles as you progress on the web pages.
- 8. Distributed Systems Security Fichier
  
  1.2 Mo
- Print version (4 per page) Fichier
  
  2.5 Mo
- Authentication using asymmetric cryptography and biometry Dossier
  
  Demo with a Web Application and an Android Authenticator app, using QR-codes.
Practical Classes
- Docker-intro Fichier
  
  162.6 Ko
- 1. Race-Condition Vulnerability Lab Dossier
  
  seedsecuritylabs.org/Labs_20.04/Software/Race_Condition
- 2. Spectre Attack Lab Dossier
  
  seedsecuritylabs.org/Labs_20.04/System/Spectre_Attack
- 3. Pseudo Random Number Generation Lab Dossier
  
  seedsecuritylabs.org/Labs_20.04/Crypto/Crypto_Random_Number
- 4. Padding Oracle Attack Lab Dossier
  
  seedsecuritylabs.org/Labs_20.04/Crypto/Crypto_Padding_Oracle
- 5. Hash Length Extension Attack Lab Dossier
  
  seedsecuritylabs.org/Labs_20.04/Crypto/Crypto_Hash_Length_Ext
- Try Hack Me OWASP Top 10 Vulnerabilities URL
  
  You need to create a free account with Try Hack Me
- Portswigger Labs Page
- 6. TLS Lab Fichier
  
  317.6 Ko
- Lab setup files Fichier
  
  3.4 Ko
- TLS protocol overview Fichier
  
  412.3 Ko
- TLS programming and attacking Fichier
  
  1.0 Mo
- Python TLS wrapper documentation URL
- PKI, CAs, and web server certificates Fichier
  
  1.2 Mo
- GUI tool to generate certificates and keys (and CAs) for Macs or Windows URL
- 7. Blockchain Reentrancy Attack Fichier
  
  102.1 Ko
  
  This lab should be executed by all groups.
- Lab setup files Fichier
  
  4.9 Mo
- Blockchain (bitcoin) more information Fichier
  
  1.4 Mo
Assignment
- Assignment - Security Project Fichier
  
  282.8 Ko
  
  15-minute presentation date: May 21
- Submission Devoir
  
  Procedure:
  1. Prepare a single file (.zip or .rar) containing source code and report
  2. In the report, state all the group members that have contributed to the assignment
  3. One of the members should submit the file in the link (deadline: May 31).
SEED Security Labs