CSED559: Software Vulnerability Analysis and Exploitation (소프트웨어 취약점 분석 및 공격)
Previously offered as CSED702C: Binary Analysis and Exploitation.
The intended audience of this course is graduate students who are interested in studying practical software security. We will cover advanced techniques for analyzing binaries, crafting exploits for security vulnerabilities, and developing mitigation strategies. Students will engage in hands-on Capture-The-Flag (CTF) style lab challenges to actively apply and practice the techniques learned.
Course Goals:
- Comprehend low-level program execution
- Gain hands-on experiences in reverse engineering and debugging
- Learn about various types of vulnerabilities and their security implications
- Develop skills for identifying vulnerability and crafting exploits
ℹ️ Information
- Instructor: Seulbae Kim
- Term: Fall 2026 (Sep 8, 2026 ~ Dec 22, 2026)
- Time: Tuesdays and Thursdays, 11:00 AM ~ 12:15 PM
- Location: Room 106, Science Building II
🗓️ Schedule
Lecture Lab release Lab deadline Exam No class
| Mon | Tue | Wed | Thu | Fri |
|---|---|---|---|---|
| September 2026 | ||||
| 7 | 8Lec 01: Intro | 9 | 10Lec 02: x86 and GDBLab 01 release | 11 |
| 14 | 15Lec 03: Review of Lab 01Lab 01 deadline | 16 | 17Lec 04: x64, Anti-Debugging, and DecompilerLab 02 release | 18 |
| 21 | 22Lec 05: Review of Lab 02Lab 02 deadline | 23 | 24Holiday (no class) | 25 |
| 28 | 29Lec 06: ShellcodeLab 03 release | 30 | ||
| October 2026 | ||||
| 1Lec 07: Solving a Real-World CTF Challenge | 2 | |||
| 5 | 6Lec 08: Review of Lab 03Lab 03 deadline | 7 | 8Lec 09: Stack Buffer OverflowsLab 04 release | 9 |
| 12 | 13Lec 10: Review of Lab 04Lab 04 deadline | 14 | 15Lec 11: Flag and PwntoolsLab 05 release | 16 |
| 19 | 20Lec 12: Review of Lab 05Lab 05 deadline | 21 | 22Lec 13: Stack Smashing ProtectorLab 06 release | 23 |
| 26 | 27Lec 14: Review of Lab 06Lab 06 deadline | 28 | 29Midterm Exam | 30 |
| November 2026 | ||||
| 2 | 3Lec 15: Review of Midterm Exam, Flipped Lab Introduction | 4 | 5Lec 16: NX and ASLRLab 07 release | 6 |
| 9 | 10Lec 17: Review of Lab 07Lab 07 deadline | 11 | 12Lec 18: Format String BugsLab 08 release | 13 |
| 16 | 17Lec 19: Review of Lab 08Lab 08 deadline | 18 | 19Lec 20: Return-Oriented ProgrammingLab 09 release | 20 |
| 23 | 24Lec 21: Review of Lab 09Lab 09 deadline | 25 | 26Lec 22: Logical ErrorsLab 10 release | 27 |
| 30 | ||||
| December 2026 | ||||
| 1Lec 23: Review of Lab 10Lab 10 deadline | 2 | 3Holiday (no class) | 4 | |
| 7 | 8Lec 24: HeapLab 11 release | 9 | 10Lec 25: Fuzzing | 11 |
| 14 | 15Lec 26: Review of Lab 11Lab 11 deadline | 16 | 17Lec 27: Other Issues and Next Steps | 18 |
| 21 | 22Final Exam | 23 | 24 | 25 |