Skip to content
lectern.tv
MIT 6.858: Computer Systems Security →0/22
1

1. Introduction, Threat Models

1:17:12
2

2. Control Hijacking Attacks

1:27:38
3

3. Buffer Overflow Exploits and Defenses

1:21:37
4

4. Privilege Separation

1:23:29
5

6. Capabilities

1:21:57
6

7. Sandboxing Native Code

1:23:21
7

8. Web Security Model

1:22:48
8

9. Securing Web Applications

1:22:08
9

Lecture 10: Symbolic Execution (6.858)

1:22:16
10

Lecture 11: Ur/Web (6.858)

1:20:04
11

Lecture 12: Network Security (6.858)

1:18:26
12

Lecture 13: Network Protocols (6.858)

1:21:03
13

Lecture 14: SSL and HTTPS (6.858)

1:18:18
14

Lecture 15: Medical Software (6.858)

1:15:31
15

Lecture 16: Side-Channel Attacks (6.858)

1:22:16
16

Lecture 17: User Authentication (6.858)

1:19:48
17

Lecture 18: Private Browsing (6.858)

1:20:13
18

Lecture 19: Anonymous Communication (6.858)

1:20:13
19

Lecture 20: Mobile Phone Security (6.858)

1:22:00
20

Lecture 21: Data Tracking (6.858)

1:19:38
21

Lecture 22: Information Security at MIT IS&T (6.858)

1:26:51
22

Lecture 23: Security Economics (6.858)

1:17:25

2. Control Hijacking Attacks

Nickolai ZeldovichMIT

Professor of Electrical Engineering and Computer Science

1:27:38·2017·graduate level

This lecture continues the discussion on buffer overflows, detailing various methods for control hijacking attacks, including stack smashing and return-to-libc attacks, and introduces defenses like non-executable stacks and ASLR.

Systems & CSSystems SecurityComputer SecurityBuffer OverflowExploitation

MIT 6.858 Computer Systems Security, Fall 2014

View the complete course: http://ocw.mit.edu/6-858F14

Instructor: James Mickens

Previous · Lecture 1

1. Introduction, Threat Models

Next · Lecture 3

3. Buffer Overflow Exploits and Defenses

Seminar notes & discussion

Sign in to comment

No public seminar notes on this lecture yet.