Security Flaws on Applications


Sponsor Andre Dos Santos
andre@cc.gatech.edu
Area Security

Problem
In order to better understand the security of new applications one needs to understand how the existing applications can be subverted. The goal of this project is to get the student familiarized with the sources of information on known flaws on computing systems. This project will have two parts:

  1. Understanding and defining a flaw to be exploited The student will do a survey of the existing public databases that list computing system flaws. In addition, the student will define one flaw to implement an exploit.
  2. Implementing an exploit The student will implement an exploit in a controlled environment that demonstrates the chosen flaw.

Deliverable
A report with the survey of the publicly known databases and the reason for choosing a particular flaw. The source code for the implementation.

Evalution Although the evaluation will consider the ability of the student in finding good sources of information about known flaws, it will give a great weight on the reasoning of the student for choosing a particular flaw as important. In addition it will consider the implementation done.