Software Security Lecture 5 Fang Yu Dept. of MIS, National Chengchi University Spring 2011

Outline  Today we will have Juliette presenting how to attack session management (Ch7) and Jorina presenting how to attack access control (Ch8)  We will also have Hsing demonstrating the tool: Burp Suite which provides:  Intercepting proxy, spider, scanner, intruder etc.  I will continue to talk about Stranger at the end of today’s class  The course website : 

Next Meeting (Apr. 12)  We will have Eric presenting Attacking Application Logics (Chapter 11), Ruei-Jiun presenting Bespoke Attack Controls (Chapter 13)  We will also have Tony lead the discussion on the paper: Prophiler: a Fast Filter for the Large-Scale Detection of Malicious Web Page, WWW 2011