-
Notifications
You must be signed in to change notification settings - Fork 6
/
Copy pathsso.html
333 lines (277 loc) · 10.2 KB
/
sso.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
<!DOCTYPE html>
<html>
<meta charset="UTF-8">
<head>
<base href="https://cs.unibuc.ro/~pirofti/" />
<title>Paul Irofti | SO: proiectare și securitate</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<meta name="description" content="Sisteme de operare" />
<meta name="keywords" content="research,teaching,university
dictionary learning,sparse representations,
operating systems,security,
development,software,hardware,kernel,bsd,irofti,paul,c,
ruby,lisp,unix,shell,script,voip,security" />
</head>
<body style="font-family: monospace">
<div style="float:left; margin-top:50px">
<a style="text-decoration: none; font-size: x-large" href="index.html">
<b>Paul Irofti</b></a><br/><br/><br/>
<big><b>About me:</b></big> <br/>
<a href="resume/paul-irofti-cv-en.pdf">Resume</a>
(<a href="resume/paul-irofti-cv-ro.pdf">RO</a>)<br/>
<a href="publications.html">Publications</a><br/>
<a href="education.html">Education</a><br/>
<a href="secsem.html">Security Seminar</a><br/>
<a href="https://ilds.ro">ILDS</a><br/>
<a href="https://orcid.org/0000-0002-7541-4334" target="_blank">ORCID</a><br/>
<a href="https://scholar.google.ro/citations?user=yJZpIfgAAAAJ" target="_blank">Scholar</a><br/>
<a href="http://ro.linkedin.com/in/paulirofti" target="_blank">LinkedIn</a><br/>
<a href="https://github.com/pirofti" target="_blank">GitHub</a><br/>
<p/> <big><b>Grants:</b></big> <br/>
<a href="ddnet.html">DDNET</a><br/>
<a href="graphomaly.html">Graphomaly</a><br/>
<a href="netalert.html">NetAlert</a><br/>
<a href="legat.html">LEGAT</a><br/>
<a href="deddos.html">DeDDoS</a><br/>
<p/> <big><b>Teaching:</b></big> <br/>
<a href="so.html">Sisteme de Operare</a><br/>
<a href="uso.html">Utilizarea SO</a><br/>
Securitate SO<br/>
<a href="va.html">Vedere Artificială</a><br/>
<a href="stls.html">Static Analysis</a><br/>
<a href="ps.html">Prelucrarea Semnalelor</a><br/>
<a href="https://numeric.cs.unibuc.ro/cni.html">Calcul Numeric</a><br/>
<a href="https://numeric.cs.unibuc.ro/ad.html">Anomaly Detection</a><br/>
<p/> <big><b>Contact:</b></big> <br/>
<img src="images/email.png" alt="[E-mail address]" /><br/>
</div>
<div style="float:left; border-left: 5px solid black; vertical-align: top;
margin-left: 30px; margin-top: 50px; width: 700px">
<p style="margin-left: 20px; font-size: x-large;"/>
<b>Sisteme de operare: proiectare și securitate</b></br>
<p style="margin-left: 20px"/>
Cursul este bazat pe o serie de articole și lucrări de cercetare
ce privesc securitatea și proiectarea sistemelor de operare.
Studenții vor consulta lucrări de referință înainte de fiecare curs
urmând ca acestea să fie discutate și extinse în cadrul orelor.
La laborator vor aplica conceptele învățate pentru elaborarea diferitor
sarcini practice.
<p style="margin-left: 20px; font-size: large"/>
<b>Restanță</b></br>
<p style="margin-left: 20px"/>
Cei de anul II cu restanță la SOPS vor da pe 4 iunie la ora 12:00 restanța
împreună cu cei de la licență. Materia este aceiași ca anul trecut și o regăsiți
<a href="https://cs.unibuc.ro/~pirofti/so.html">aici</a>.
Proba de examen se va desfășura sub forma unui
Quiz pe Moodle ce va fi disponibil
<a href="https://moodle.fmi.unibuc.ro/course/view.php?id=778">aici</a>.
<p style="margin-left: 20px; font-size: large"/>
<b>Cursuri</b></br>
<p style="margin-left: 20px"/>
La curs vom lucra în principal la tablă, dar vom merge în paralel cu
următoarele materiale și diapozitive.
Articolele ce trebuie pregătite de studenți în avans sunt marcate ca atare.
<p style="margin-left: 20px"/>
<ol>
<li><a href="http://codex.cs.yale.edu/avi/os-book/OS10/">Recapitulare</a>:
procese, paginare, segmentare.</li>
<li><a href="https://codex.cs.yale.edu/avi/os-book/OS10/slide-dir/index.html">Mașini virtuale</a></li>
<li>Timing attacks
<p style="margin-left: 20px"/>
<table>
<tr valign="top">
<td align="right" class="bibtexnumber">
[<a name="valrange">1</a>]
</td>
<td class="bibtexitem">
Kocher, Paul C.
<em>Timing Attacks on Implementations of Die-Hellman, RSA, DSS, and Other Systems</em>,
Advances in Cryptology| Crypto. Vol. 96. 1996.
[ <a href="https://www.paulkocher.com/TimingAttacks.pdf">PDF</a> ]
</td>
</tr>
<tr valign="top">
<td align="right" class="bibtexnumber">
[<a name="spa">2</a>]
</td>
<td class="bibtexitem">
Brumley, Billy Bob, and Nicola Tuveri
<em>Remote timing attacks are still practical</em>,
European Symposium on Research in Computer Security. Springer, Berlin,
Heidelberg, 2011.
[ <a href="https://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf">PDF</a> ]
</td>
</tr>
<tr valign="top">
<td align="right" class="bibtexnumber">
[<a name="spa">3</a>]
</td>
<td class="bibtexitem">
Percival, Colin
<em>Cache missing for fun and profit</em>,
1-13, 2005.
[ <a href="http://www.daemonology.net/papers/htt.pdf">PDF</a> ]
</td>
</tr>
</table>
</li>
<li>Cache attacks
<p style="margin-left: 20px"/>
<table>
<tr valign="top">
<td align="right" class="bibtexnumber">
[<a name="valrange">1</a>]
</td>
<td class="bibtexitem">
Lipp, Moritz, et al
<em>Meltdown</em>,
arXiv preprint arXiv:1801.01207 (2018)
[ <a href="https://arxiv.org/pdf/1801.01207">PDF</a> ]
</td>
</tr>
<tr valign="top">
<td align="right" class="bibtexnumber">
[<a name="valrange">2</a>]
</td>
<td class="bibtexitem">
Mark D. Hill
<em>On the Meltdown & Spectre Design Flaws</em>,
Presentation (2018)
[ <a href="https://research.cs.wisc.edu/multifacet/papers/hill_mark_wisconsin_meltdown_spectre.pdf">PDF</a> ]
</td>
</tr>
</table>
</li>
<li>Cache attacks (2)
<p style="margin-left: 20px"/>
<table>
<tr valign="top">
<td align="right" class="bibtexnumber">
[<a name="valrange">1</a>]
</td>
<td class="bibtexitem">
Kocher, Paul, et al.
<em>Spectre attacks: Exploiting speculative execution.</em>,
2019 IEEE Symposium on Security and Privacy (SP). IEEE, 2019
[ <a href="https://arxiv.org/pdf/1801.01203.pdf">PDF</a> ]
</td>
</tr>
</table>
</li>
<li>Rowhammer attacks
<p style="margin-left: 20px"/>
<table>
<tr valign="top">
<td align="right" class="bibtexnumber">
[<a name="valrange">1</a>]
</td>
<td class="bibtexitem">
Kim, Yoongu, et al.
<em>Flipping bits in memory without accessing them:
An experimental study of DRAM disturbance errors.</em>,
ACM SIGARCH Computer Architecture News 42.3 (2014): 361-372.
[ <a href="https://users.ece.cmu.edu/~yoonguk/papers/kim-isca14.pdf">PDF</a> ]
</td>
</tr>
<tr valign="top">
<td align="right" class="bibtexnumber">
[<a name="valrange">2</a>]
</td>
<td class="bibtexitem">
Gruss, Daniel, Clementine Maurice, and Stefan Mangard.
<em>Rowhammer. js: A remote software-induced fault attack in javascript.</em>
International conference on detection of intrusions and malware, and vulnerability assessment. Springer, Cham, 2016.
[ <a href="https://arxiv.org/pdf/1507.06955.pdf">PDF</a> ]
</td>
</tr>
</table>
</li>
<li>Statistical clock drivers
<p style="margin-left: 20px"/>
AMD Geode CS5536 multi-function general purpose timer.
[ <a href="https://man.openbsd.org/glxclk">manpage</a> | <a href="https://github.com/openbsd/src/blob/master/sys/arch/loongson/dev/glxclk.c">source</a> ]
<table>
<tr valign="top">
<td align="right" class="bibtexnumber">
[<a name="valrange">1</a>]
</td>
<td class="bibtexitem">
McCanne, Steven, and Chris Torek
<em>A Randomized Sampling Clock for CPU Utilization Estimation
and Code Profiling.</em>,
USENIX Winter. 1993.
[ <a href="http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.50.3208&rep=rep1&type=pdf">PDF</a> ]
</td>
</tr>
</table>
</li>
<li>SELinux (<b><a href="http://lacl.fr/dima/">Prof. Cătălin Dima</a></b>)
<p style="margin-left: 20px"/>
Pagina cursului SELinux o găsiți <a href="http://lacl.fr/dima/selinux/">aici</a>.
<ul>
<li> Curs 1:
<a href="http://lacl.fr/dima/selinux/selinux1.pdf">MEVS – SELinux</a>
</li>
<li> Curs 2:
<a href="http://lacl.fr/dima/selinux/selinux2.pdf">MEDI/MEPO – SELinux</a>
</li>
</ul>
</li>
<li>Buffer Overflow
<p style="margin-left: 20px"/>
</li>
<li>Return-to-libc Attacks
<p style="margin-left: 20px"/>
</li>
<li>Address Space Layout Randomization
<p style="margin-left: 20px"/>
</li>
<li>Return Orientated Programming
<p style="margin-left: 20px"/>
</li>
<li>Functional Correctness and Security Proofs: seL4 and Genode
<p style="margin-left: 20px"/>
</li>
</ol>
<p style="margin-left: 20px; font-size: large"/>
<b>Laboratoare</b></br>
<p style="margin-left: 20px"/>
Laboratoarele 3 și 4 conțin un
<a href="https://en.wikipedia.org/wiki/EICAR_test_file">EICAR</a>
și din cauza aceasta arhivele folosesc parola "parola".
<p style="margin-left: 20px"/>
<ol>
<li><a href="sops/sops-lab-1.pdf">Procese și fire de execuție</a></li>
<li><a href="sops/sops-lab-2.zip">Sincronizare și comunicare</a></li>
<li><a href="sops/sops-lab-3.zip">Modulul Linux inotify</a></li>
<li><a href="sops/sops-lab-4.zip">Driver Windows -- mini-filtru</a></li>
<li>SELinux (<b><a href="http://lacl.fr/dima/">Prof. Cătălin Dima</a></b>)
<ul>
<li><a href="http://lacl.fr/dima/selinux/tp1.pdf">Laborator 1</a></li>
<li><a href="http://lacl.fr/dima/selinux/tp2.pdf">Laborator 2</a></li>
</ul>
</li>
<li><a href="sops/sops-lab-6.pdf">Buffer overflow și ASLR</a></li>
<li><a href="sops/sops-lab-7.pdf">Return Oriented Programming</a></li>
</ol>
<p style="margin-left: 20px; font-size: large"/>
<b>Examen</b></br>
<p style="margin-left: 20px"/>
Lista cu teme pentru articol o găsiți
<a href="sops/sops-lista-teme.pdf">aici</a>.
<p style="margin-left: 20px"/>
<b>Elaborare.</b>
Articol de 4 pagini pe două coloane elaborat în echipe de maxim 3 studenți.
Gasiți
<a href="https://www.overleaf.com/latex/templates/template-for-operating-systems-design-and-security-course-at-university-of-bucharest/pyjwzrtzsbvk">aici</a>
șablonul LaTeX pentru articol.
<p style="margin-left: 20px"/>
<b>Încărcare articol.</b>
Un membru al echipei este membru corespondent.
Acesta își va creea un cont tip student
<a href="https://www.turnitin.com/newuser_type.asp?lang=ro_ro">aici</a>
folosind
ID-ul cursului 24781579 cu cheia ArtSops2020
unde va urca articolul.
</body>
</html>