Merge pull request #24 from MedivhGO/add_course

add security course mit6.858
This commit is contained in:
flyingpig 2021-12-15 12:42:13 +08:00 committed by GitHub
commit 2cdbde8ab3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 27 additions and 1 deletions

View File

@ -3,6 +3,7 @@
- [Libgen](http://libgen.is/)PDF电子书下载网站。 - [Libgen](http://libgen.is/)PDF电子书下载网站。
- [z-epub](https://z-epub.com/)ePub电子书下载网站。 - [z-epub](https://z-epub.com/)ePub电子书下载网站。
- [bitdownloader](https://bitdownloader.io/):油管视频下载器。 - [bitdownloader](https://bitdownloader.io/):油管视频下载器。
- [zlibrary](https://1lib.limited/):电子书下载网站(可能需要翻墙)。
## 设计工具 ## 设计工具
- [excalidraw](https://excalidraw.com/%E4%B9%88)一款手绘风格的绘图工具非常适合绘制课程报告或者PPT内的示意图。 - [excalidraw](https://excalidraw.com/%E4%B9%88)一款手绘风格的绘图工具非常适合绘制课程报告或者PPT内的示意图。

View File

@ -0,0 +1,24 @@
## 课程简介
- 所属大学MIT
- 先修要求:
- 编程语言C, Python
- 课程难度:🌟🌟🌟🌟🌟
- 预计学时150小时
MIT的计算机系统安全课程实验环境是一个Web Application Zoobar. 学生学习攻防技术并应用于该Web Application.
- Lab 1: you will explore the zoobar web application, and use buffer overflow attacks to break its security properties.
- Lab 2: you will improve the zoobar web application by using privilege separation, so that if one component is compromised, the adversary doesn't get control over the whole web application.
- Lab 3: you will build a program analysis tool based on symbolic execution to find bugs in Python code such as the zoobar web application.
- Lab 4: you will improve the zoobar application against browser attacks.
这个课我主要是做了lab3, lab3是通过混合符号执行来遍历程序的所有分支.理解了符号执行的思想后lab并不难做.这个lab直观展示符号执行这种技术的使用方法.
这个课的Final Project是实现一个SecFS,一个远端文件系统,面对完全不可信的服务器,提供机密性和完整性,[骨架代码](https://github.com/mit-pdos/secfs-skeleton),论文是[SUNDR](https://www.usenix.org/legacy/event/osdi04/tech/full_papers/li_j/li_j.pdf)
## 课程资源
- [课程网站](http://css.csail.mit.edu/6.858/2022/)
- 课程视频:参见课程网站
- 课程教材:无
- 课程作业4个lab + Final Project / Lab5
## 资源汇总

View File

@ -53,6 +53,7 @@ nav:
- 'MIT 6.824: Distributed System': '并行与分布式系统/MIT6.824.md' - 'MIT 6.824: Distributed System': '并行与分布式系统/MIT6.824.md'
- 计算机系统安全: - 计算机系统安全:
- 'UCB CS161: Computer Security': '系统安全/CS161.md' - 'UCB CS161: Computer Security': '系统安全/CS161.md'
- 'MIT 6.858: Computer System Security': '系统安全/MIT6.858.md'
- 计算机网络: - 计算机网络:
- 'Computer Networking: A Top-Down Approach': '计算机网络/topdown.md' - 'Computer Networking: A Top-Down Approach': '计算机网络/topdown.md'
- 'Stanford CS144: Computer Network': '计算机网络/CS144.md' - 'Stanford CS144: Computer Network': '计算机网络/CS144.md'
@ -82,4 +83,4 @@ nav:
- 'Stanford CS224n: Natural Language Processing': '深度学习/CS224n.md' - 'Stanford CS224n: Natural Language Processing': '深度学习/CS224n.md'
- 'Stanford CS224w: Machine Learning with Graphs': '深度学习/CS224w.md' - 'Stanford CS224w: Machine Learning with Graphs': '深度学习/CS224w.md'
- 'UCB CS285: Deep Reinforcement Learning': '深度学习/CS285.md' - 'UCB CS285: Deep Reinforcement Learning': '深度学习/CS285.md'
- 后记: '后记.md' - 后记: '后记.md'