MIT 6.858: Computer System Security

课程简介

MIT 的计算机系统安全课程，实验环境是一个 Web Application Zoobar。学生学习攻防技术并应用于该 Web Application。

Lab 1: you will explore the zoobar web application, and use buffer overflow attacks to break its security properties.
Lab 2: you will improve the zoobar web application by using privilege separation, so that if one component is compromised, the adversary doesn’t get control over the whole web application.
Lab 3: you will build a program analysis tool based on symbolic execution to find bugs in Python code such as the zoobar web application.
Lab 4: you will improve the zoobar application against browser attacks.

Lab 3 通过混合符号执行遍历程序分支，直观展示符号执行的原理与用法。

这个课的 Final Project 是实现 SecFS，一个远端文件系统，面对完全不可信的服务器，提供机密性和完整性。参考论文为 SUNDR。