Prof. Andrea Lanzi

Argomenti del programma: - OS Introduction - CPU virtualization - Memory Virtualization - Swapping Mechanism LAB1: Operating system motivation, hardware abstraction, QEMU, MBR assembly programming. LAB2: Development environment, vi, NASM, ELF format, assembly, linking, execution, disassembly. LAB3: C review, system calls, fork/exec, process management, process analysis, fork bomb.

Argomenti del programma: Concurrency: Threads (concepts and APIs), Locks, Locks and Data Structures, Semaphores Device Drivers Disks and RAID File Systems Fast File System Laboratory Sessions LAB7: Bash shell, shell scripting, environment variables, file system administration, Unix utilities. LAB8: Bash pipelines, text-processing tools (grep, sed, awk, etc.), regular expressions, strace.

• Slide basate sul paper Aleph One che introduce il concetto di buffer overflow
• Shellcoder Handbook, manuale di riferimento per exploit e sviluppo di shellcode
• Materiali sul controllo delle difese a basso livello: memory safety, type safety e low-fat pointer
• Materiale su attacchi side-channel come Meltdown & Spectre

Argomenti del programma: Low‑Level attack: Buffer Overflow (Stack‑Based) - Parte 1 Low‑Level attack: Buffer Overflow (Stack‑Based) - Parte 2 (laboratorio pratico) Low‑Level attack: Heap Overflow su Metadata Low‑Level attack: Use‑After‑Free (UAF) Difesa low‑level: Memory safety e Type safety Difesa low‑level: Canary, ASLR, DEP e Return‑Oriented Programming (ROP) Difesa low‑level: Return‑Oriented Programming (ROP), ROP Gadgets Difesa…

• Python notebooks and laboratory material developed by the instructor.

Argomenti del programma: - Introduzione al Machine Learning per la Cybersecurity. - Feature extraction e rappresentazione delle applicazioni Android (DREBIN). - Classificazione tramite Support Vector Machine (SVM). - Explainable AI e interpretazione delle decisioni dei classificatori. - Adversarial Machine Learning e attacchi ai classificatori. - Metriche di valutazione: Confusion Matrix, ROC e Precision-Recall Curve.