Computer & Network Security

EECS 588 – Winter 2014

OverviewScheduleReadingsAttack PresentationsCourse Project

Attack Presentations

Guidelines

  1. Find a partner. If you have trouble, try posting to Piazza.
  2. Topic assignments: Review the list of topics below and assign each topic a preference score from 0–3 stars. Email your nonzero preferences, along with the uniqnames of you and your partner, to eecs588@umich.edu by 5pm on Friday, January 17. Let me know if there are connections to your research area (e.g. machine learning or wireless networking), and I'll take these into account when making assignments. Many topics include optional bonus challenges; I'll award extra credit for these in proportion to the difficulty.
  3. Once you've been assigned an attack, your task is to understand it and write an original exploit. Don't borrow from pre-packaged attack tools; you may, however, use general purpose tools such as disassemblers and packet sniffers. Some vulnerabilities have been fixed in newer software, so you may need to target an old version.
  4. Per the course ethics policy, you must not test your attack against any systems “in the wild” except as noted. If you need demonstration targets, set up your own isolated test systems or VMs. Construct your demo with safety in mind: it should be difficult to use against real systems even if it were to fall into the wrong hands.
  5. Teach the class about the attack in a 20 minute presentation on the assigned date. Be sure to:
    1. Describe how the attack works, how it was discovered, how it was disclosed, and what danger it poses.
    2. Talk about how you implemented it, including any technical challenges you faced.
    3. Give a demonstration of your exploit. (Carefully test your demo first!)
    4. Draw broader lessons from the attack. What does it teach us about security?
    5. Discuss defenses against the attack. If the attack has been fixed, describe how similar problems might be averted in the future; if it's still a threat, suggest some defenses that might be investigated in new research.

Topics

Note on early topics: Since the first few groups will have limited time to prepare, grading will be relatively generous.

DateTopicDescription
1/23/14 Factoring weak keys Implement an efficient algorithm for finding cofactorable RSA keys and apply it to recent HTTPS certificate data collected with Internet-wide scans in order to obtain the private keys for vulnerable servers. Bonus challenge: Identify one or more devices not already known to suffer from this vulnerability; disclose the problem to the manufacturer(s) to help get it fixed.
1/30/14 Control-flow exploitation Pick a control-flow vulnerability discovered in a major application during the past three years and implement your own exploit. Explain how you bypassed modern defenses such as ASLR, DEP, and canaries, if applicable. These articles will help you get started. Bonus challenge: Find and exploit an undocumented buffer overflow in a popular program.
2/4/14 Compiler Trojan horse Modify LLVM to implement the self-propagating compiler-resident Trojan horse suggested by Ken Thompson in Reflections on Trusting Trust. Your Trojan should propagate when LLVM builds a new copy of itself, and it should inject a demonstration payload when compiling some standard utility program. Bonus challenge: Make a single Trojan that works with two or more compilers, propagating when each builds itself or the other.
2/6/14 Kernel-level rootkit For the operating system of your choice, construct a rootkit (like the one described here) that operates in kernel mode and hides from standard administrative tools; while running, it should not be visible in the file system, process list, or startup files. Bonus challenge: Implement a minimal hypervisor rootkit that contains a basic payload. You might adapt techniques from SubVirt.
2/11/14 Malicious code in websites Part 1: Build a simple dummy social networking site and use it to demonstrate SQL injection, XSS, and CSRF vulnerabilities. Part 2: Construct an XSS worm to attack your site, like the Samy worm that infected MySpace. Part 3: Implement defenses against each threat. Bonus challenge: Discover an undocumented XSS vulnerability in a popular website.
2/13/14 Abusing cookies Part 1: Build a simple dummy website and use it to demonstrate XSS-based session hijacking and session fixation vulnerabilities. Explain some basic defenses against these attacks. Part 2: Demonstrate how the evercookie technique combines multiple persistence mechanisms to resist deletion. Experiment with your browser’s private browsing mode and evaluate how effectively it segregates persistent state.
2/13/14 Browser DNS rebinding Implement a DNS rebinding attack that subverts the browser’s same origin policy. Use recent techniques to make your attack work against modern browsers. Show how this attack can be used to target hosts behind a firewall.
2/18/14 CAPTCHA cracking Start with a simple CAPTCHA (like one of these) and create a program that reliably defeats it. Extend your work to defeat a CAPTCHA used by an Alexa Top 500 site. You might adapt some of the techniques used by this work or this work.
2/18/14 Password cracking Implement a fast password cracker based on the Rainbow Table data structure (more details here). Compute a table containing SHA-1 hashes for as many passwords as you can (assuming a length of 8-characters or less). Adapt the wordlist and letter frequency approaches used by programs like John the Ripper. In class, demonstrate that you can quickly recover passwords from the leaked LinkedIn password database (or another recent leak). Explain the time-memory trade-offs you faced and how you chose the parameters for your implementation.
2/20/14 Fooling web users Build a simple mock bank site and demonstrate: (1) an SSL stripping attack, where a man-in-the-middle transparently proxies HTTP requests and rewrites HTTPS links to point to look-alike HTTP links; (2) a clickjacking attack, as described here; (3) picture-in-picture and homograph attacks; (4) enhance your SSL attack to demonstrate the null prefix vulnerability (I’ll provide a cert) and to defeat OCSP revocation.
2/25/14 Smartphone spyware Develop a demonstration spyware program for Android or jailbroken iPhones. Your program should illustrate the dangers of surreptitious data theft, recording, photographing, and location tracking. Think like an attacker: How would you convince users to install the software? How would you conceal it? How would you exfiltrate collected data? Make your demo as realistic as possible. Bonus challenge: Show such spyware can be automatically installed to a user’s Android phone by malware running on the user’s computer.
2/25/14 Jailbreaking Investigate iOS jailbreaking tools (e.g. Spirit, redsn0w, PwnageTool) to understand the low-level techniques they employ. Explain the platform’s security architecture and the major techniques that have been used to compromise it. Evaluate the progression of the war between Apple and device hackers—is either side gaining ground? Adapt the jailbreaking toolset to provide a clear step-by-step demonstration to the class. Try to implement at least one nontrivial component yourselves, and adapt the rest from pieces of existing tools.
3/11/14 TCP attacks Implement an off-path TCP RST attack and show how it can be used to disrupt a long-lived TCP connection (e.g., an SSH tunnel). Your attack should work correctly on modern Windows targets. For your presentation, give a realistic attack scenario, and be sure to describe how you determine the connection parameters (source port, destination port, sequence number) without the ability to observe packets directly. Bonus challenge: Extend the attack to inject arbitrary data into an long-lived TCP connection (with the attacker still off path).
3/11/14 DNS cache poisoning Implement Dan Kaminsky’s fast DNS poisoning attack (another description), where the attacker brute forces responses to insert a false IP address into a DNS cache. Demonstrate the countermeasure described in this paper.
3/13/14 Rogue wireless access point Modify an open-source wireless access point to conduct a man-in-the-middle attack against users who connect through it. Whenever a binary is downloaded via HTTP, modify it on the fly to insert a Trojan horse. I will provide a Linksys WRT54G router.
3/18/14 Hardware Trojan Implement and demonstrate a Trojan horse embedded into a microprocessor core. Use an FPGA (you’ll have to provide your own) and an open source core, as in this paper. Your Trojan should implement a simple malicious function that is difficult to detect in normal operation but easy for an attacker to trigger. Bonus challenge: Implement an attack that directly subverts a widely used cryptosystem.
3/20/14 Firmware-resident malware Demonstrate the potential harm of malicious firmware attacks in the context of a digital camera, using the CHDK framework: (a) Reprogram the camera so that it refuses to take a picture whenever a particular symbol (chosen by the attacker) is visible in the frame; and (b) steganographically embed the time (and location, if the camera has GPS) when each picture is taken in the pixel data, so that it cannot easily be stripped out or decoded by anyone except the attacker. (Other firmware- attacks would also be acceptable; see me to discuss.) Bonus challenge: Program the camera to mask your own face if anyone takes a picture of you, as in this example.
3/25/14 Malicious peripherals I’ll provide a PIC development board that can act as a man-in-the-middle between a PC and a USB device. Program it to simulate the behavior of any two of these malicious peripherals: (1) a keyboard that stores the last n keystrokes and replays them when you type a “secret knock”; (2) a printer that detects official election results and alters them, by shifting votes, to benefit a preset candidate; (3) a drive or a card reader that behaves normally, except during bootup, when it acts like a bootable disk containing malicious code. Bonus challenge: Build your own hardware, and conceal it inside a real peripheral.
3/27/14 TLS protocol attacks Implement the BEAST and CRIME attacks against TLS. Show they allow an attacker to steal a user’s authentication cookie for an HTTPS website. In your presentation, also explain related attacks such as Lucky 13. Bonus challenge: Demonstrate the recent RC4 attack against TLS.
4/1/14 Web tracking Part 1: Implement and demonstrate CSS history sniffing, timing-based history sniffing, and browser fingerprinting. Explain how Tor attempts to defend against these techniques. Part 2: Select a widely deployed web bug and instrument your browser to monitor it. Display the data the web bug reports as it tracks you across various popular sites. Explain how sites could use client-side tracking to show targeted ads with far less invasion of privacy.
4/1/14 Deanonymizing search data In 2006, AOL published logs from its search engine that showed the queries performed by 650,000 randomly selected users. To protect privacy, they replaced each user ID with a unique integer, but people quickly realized that they could reidentify users by combining their search history with information from other sources. Download the AOL dataset and demonstrate this attack by deanonymizing (with high confidence) at least 6 users. (Search the web to make sure these IDs have not already been publicly deanonymized.) In your presentation, explain the process you used, but please be sensitive (e.g., black out the individuals’ names). Show queries from the dataset that illustrate the many kinds of personal information that have been potentially exposed.
4/3/14 Cold-boot attack Targeting a popular disk encryption product, create an automated tool to implement the attacks described here. Your tool should recover memory contents after a cold reboot, locate the encryption keys, and provide access to the disk contents. You may use existing memory imaging tools as part of your implementation. Bonus challenge: Target Windows BitLocker.
4/8/14 Traffic deanonymization Consider a simple anonymizer service, in which clients use SSH tunnels to connect to a SOCKS proxy. Eve is monitoring some of the clients and wants to determine which of them visit a particular website. She enlists the help of Mallory, a man-in-the-middle on the web server’s upstream connection. Mallory inserts a watermark into the server’s outbound traffic—say, by manipulating packet timing to create jitter with a distinct distribution—and Eve tries to detect the watermark in each client’s inbound traffic. Demonstrate this attack, and introduce traffic analysis. Bonus challenge: Demonstrate it against Tor.
4/10/14 VoIP side channels Capture encrypted VoIP traffic and develop a classifier that can accurately distinguish (without decrypting the packets) whether the speaker is male or female. Bonus challenge: Distinguish which of two languages is being spoken.