Notices

  • Congratulations on completing COMP6447

    Posted by Adam Tanana Sunday 10 December 2023, 02:12:44 PM.

    Congratulations on finishing the COMP6447 exam. Hopefully you all found the course fun and rewarding

    Congratulations to Jason Codd and Matthew Hiebl for the top marks in the course this year!

    I've released provisional final grades on give (warning these might change).

  • COMP6447 Exam Details

    Posted by Adam Tanana Tuesday 05 December 2023, 10:15:37 PM.

    HI everyone, hopefully you are all excited for the exam coming up on Wednesday :)


    Please make your way to the exam website https://final.exam.comp6447.lol/info and download the encrypted challenges before the exam.

    Please have a thorough read through the exam website, and good luck tomorrow!

  • Final Help Session

    Posted by Adam Tanana Sunday 03 December 2023, 08:53:41 PM.

    Hey everyone, a lot of students have asked for another help session before the exam.


    I know it it late notice, but I'll be running a help session Monday at 6pm at UNSW.

  • COMP6447 Exam Location and Information

    Posted by Adam Tanana Wednesday 29 November 2023, 06:28:37 PM, last modified Wednesday 06 December 2023, 12:08:44 PM.

    Hey Folks,

    Soon I'll be releasing the exam website hosting a skeleton page for the exam, it will look very similar to previous exam websites. But first, some important exam details.

    • The Exam will be in Strings (J17 302).
    • The exam will run on Wednesday (December 6), from 2pm-5pm.
    • Please arrive in the room at least 30 minutes before the exam begins, to have everything setup.
    • Please ensure you BRING YOUR OWN LAPTOP to do the Exam on.
    • Ensure (Test it) you have access to UNSW internet on your laptop.

    If there are any issues, tell me by the end of this week.

  • Help Session and 2021 exam paper

    Posted by Adam Tanana Saturday 25 November 2023, 12:04:16 PM.

    Hey y'all

    The 2021 exam paper is available on https://2021.exam.comp6447.lol/

    Please don't attempt it until you are ready and comfortable with previous wargames. the first time doing the paper you should be comfortable with most wargames.


    Also I'll be running a help session in-person on Monday (6:30 pm) [Normal lecture time]. Please come if you want help studying.

  • Group work with Fuzzer

    Posted by Adam Tanana Thursday 16 November 2023, 09:33:33 AM.

    Hey all, Fuzzer submission date is slowly approaching.

    Some groups have reached out with concerns some group members are not pulling their weight and helping with the project. Reminder, this is a group assignment, if there are group members who do not work on this project fairly and equally, their marks will reflect that.

  • Guest lecture

    Posted by Adam Tanana Saturday 04 November 2023, 12:55:23 PM.

    On Monday we will be having an awesome guest lecture on the topic of "hacking in the real world". Specifically will be talking about what exploitation looks like today.


    The lecture won't be recorded so please come in person for some awesome content and the opportunity to ask someone who does this stuff day to day any questions you may have.

  • Help session

    Posted by Adam Tanana Thursday 26 October 2023, 07:24:38 PM.

    Hey folks.


    Like I discussed in lecture will run another help session in the lecture lab tomorrow Friday at 6pm

  • Groups for the assignment

    Posted by Adam Tanana Wednesday 18 October 2023, 08:31:12 PM.

    Hey everyone,

    It's almost the end of quiet week, reminder that you must please submit your groups for the Major Assignment by the end of the week ( Link ). I'll start assigning groups to people after that.

    The first section of the assignment is due at the end of next week, if you don't have a group soon, you won't be able to start.

  • Midterm exam walkthrough

    Posted by Adam Tanana Thursday 12 October 2023, 05:34:28 PM.

    Hey everyone, good job on completing the midterm exam.

    Next Monday is quiet week, but I'll be going over the midterm exam solutions , some tips on how to approach exams and how to prepare for the final in person in the normal lecture hall.

    We won't be going over new or examinable content, but I might answer questions about the assignment or exam if you have any

  • Midterm exam starting soon...

    Posted by Adam Tanana Sunday 08 October 2023, 09:31:28 PM.

    Hey everyone.


    The challenges are now available for download on https://midterm.comp6447.lol/info .

    Once you begin the exam (By pressing "Start"), the website will show you the password to decrypt the challenges, as well as the server Domain and Port for the challenges.

    You must submit within 2 hours of starting the exam

  • Midterm exam, and 2022 past exam for practice

    Posted by Adam Tanana Saturday 07 October 2023, 07:02:22 PM.

    Howdy everyone. A few of you have asked for some practice challenges for the upcoming midterm exam.

    I suggest trying to complete all the wargames again from scratch, before attempting this practice exam.
    I've made the 2022 midterm exam available on WebCMS ( https://webcms3.cse.unsw.edu.au/COMP6447/23T3/resources/92820 ). There were 3 questions, which should be of similar difficulty to this years exam.


    Reminder:

    The midterm exam is available on https://midterm.comp6447.lol/ , And will be open between Mon, 09 Oct 2023 21:00:00 AEDT to Thu, 12 Oct 2023 08:59:00 AEDT . You will be able to attempt the exam during any 2 hour period in this date, but must submit within 2 hours of starting (and before the exam closes on Thursday).


    Please ensure you are able to login to this website with no issues ASAP. The challenges will be available for download on Monday.

  • Help Session

    Posted by Adam Tanana Friday 06 October 2023, 04:06:45 PM.

    Hey reminder, the help session for the exam is at 6pm today in the normal lecture location (H13 Lawrence East M032).

  • Midterm Exam, Wargame marks, and Help Sessions

    Posted by Adam Tanana Wednesday 04 October 2023, 06:28:40 PM.

    Hey Everyone,

    Hopefully the course is going well for everyone so far, I have some small updates.

    Wargame Marks

    Week 1 and 2 Wargames have been marked and released on WebCMS, please reach out if there are any issues. Wargame 3 is being marked slowly, and should be released soon too.

    Exam

    Next week we will be hosting a Wargame that will be held under "exam conditions" to stimulate the final exam, and give you a chance at solving some challenges with some time pressure.

    Please make sure you can login and access https://midterm.comp6447.lol /, If you have any issues , let us know earlier rather than later.

    The exam will be open to start between Monday Oct 9 9pm and Thursday Oct 12 10 am , and has a 2 hour time limit . More details also available on WebCMS.

    The exam must be submitted within 2 hours of starting . More instructions will be released later in the week.


    Help Sessions

    This Friday, I'll be hosting a HELP session at UNSW in person, at 6pm . I will be answering any questions you have, and walking through some example challenges, teaching more GDB and reversing skills, and more.

    Please come and ask any questions you may have whilst preparing for next week.

  • Public Holiday Lecture

    Posted by Adam Tanana Monday 02 October 2023, 12:27:39 PM.

    Hey all, Just a reminder today is a public Holiday.


    I will still be giving a lecture live (for anyone that would still like to watch and ask questions), But we will also be recording and releasing the lecture recording tomorrow.

    Today we will be covering format string vulnerabilities.

  • First Lecture

    Posted by Adam Tanana Monday 11 September 2023, 04:20:24 AM.

    Hi all, the first lecture will be streamed live on Zoom with the details below.


    https://unsw.zoom.us/j/83094276577?pwd=Nk5MdHJ6VVplZk9aaHhNZ1hOTitvQT09 passcode: 6297485

  • Welcome, Lectures and Course Outline

    Posted by Adam Tanana Sunday 10 September 2023, 07:10:13 PM.

    Gday everyone, Welcome to COMP6447!

    I'm Adam and I'll be running the lectures/course this year. I hope you are all excited to start.

    If you have any questions please either reach out over email or post on the class forum (WebCMS).


    First Lecture

    I'll be traveling back to Sydney during the first lecture, so I won't be able to make it. Lachlan Waugh (One of our tutors) will be covering and giving the first lecture instead.

    The first lecture will also be streamed onto Zoom (link to follow soon), but please try to come in person.

    Course Outline

    We are just waiting for the course outline to be reviewed and published (hopefuly within the next few days), and this will be available on WebCMS. Please review it as it has important information about the course content and examinations that you should review.

    Some resources to look at before we begin

    To help you prepare for this course, we've come up with a list of helpful prerequisite knowledge that you should revise (or skim over for the first time) before starting the course. These include:

    • How process memory is laid out
      • pointers
      • endianness
    • Difference between regions of memory (stack, heap, text, data)
    • Virtual memory/page table
    • Difference between kernel vs user space
    • Familiarity with using Linux, and Linux general knowledge
      • Linux file system
      • system calls
      • etc.
    • Familiarity with using gdb and python

    If you aren't familiar with some of these topics, that's fine. I recommend reviewing them before starting the course to make your experience smoother.

    I also recommend you have access to a Linux machine or VM, with PwnTools , PwnDBG and BinaryNinja installed. These will be required to do many of the challenges in this Course. If you have issues installing anything, that's fine (Lab 1 is about helping you get ready, so no need to panic if you are unsure about anything).

    Also, I've setup 4 polls under Activities to better guage everyone's understanding of different topcis. Please take a look when you get a chance.


Back to top

COMP6447 23T3 (System and Software Security Assessment) is powered by WebCMS3
CRICOS Provider No. 00098G