SEC204 – Computer Architecture and Low Level Programming Referred Test

Buffer Overflow Vulnerabilities are well-kNown and understood software flaws,which Could result in unexpected unauthorised program behavIoUr,or crash. Your task is to discuss which conditions can cause buffer overflow vulnerabilities,how they can be detected and prevented. You are also expected to consider the secure software development principles,with which one Could avoid buffer overflow vulnerabilities.

You are to write a report entitled ‘Preventing and Detecting Buffer Overflows’,documenting the findings of your investigation. You are expected to support your claims with

SEC204课程作业代做、代写Python/c++语言作业、代写Computer Architecture作业、代做Java程序作业evidence from literature. You are also expected to write a one-page summary,in which you will summarise your findings and provide recommendations. Your mark will depend on the validity and justification of your answer as well as the depth of analysis.

The overall length of the individual report (excluding appendices) should not exceed 3,000 words. Relevant supporting information may be included as appendices if required.

The report that you present should be supported by appropriate evidence. Any such information that you present must be appropriately cited and referenced in your report – please use Harvard referencing style.

Although you will be expected to make use of printed and online literature in researching and producing your materials,it is not acceptable for you to simply copy and paste material from other sources (small quotes are acceptable,but they must be clearly indicated as being quotes and the source must be referenced appropriately).

Marking Criteria:
Executive Summary (10%)
Summarising the main findings of the report and making appropriate high-level recommendations for detecting and preventing buffer overflows. The executive summary should be addressed to a Chief information Security Officer.

Introduction and Conclusion (10%)
In addition to introducing the significance of the topic,any assumptions should be stated. The conclusions should relate to the main report and summarise its main findings.

Background (30%)
Providing background information on how buffer overflow vulnerabilities work and the conditions required for their exploitation. Providing overview of existing detection and prevention approaches.

discussion & Analysis (40%)
Providing further discussion on the effectiveness of existing detection and prevention mechanisms,as well as the extent to which relevant secure software development methodologies Could help alleviate the problem.

Presentation,Structure & References (10%)
Is the report well-presented and structured? Is it readable? Does it elaborate and convey the intended points effectively? Does it make good use of graphs,tables,and images? Is the report supported by a wide set of references? Is the format correct and consistent? Are facts/figures/claims in the report supported by a suitable reference?

Threshold Criteria (these are indicative only):
To achieve a pass (40%+),you must demonstrate basic understanding of buffer overflow vulnerabilities and secure software development methodologies. You are expected to show basic understanding of buffer overflow detection and prevention mechanisms. Your report is expected to have a basic structure and evidence of literature supporting claims in the report.

To achieve a good pass (50%+),you must demonstrate good understanding of buffer overflow vulnerabilities and relevant secure software development methodologies. You are expected to show good understanding of buffer overflow detection and prevention mechanisms. Your report is expected to draw evidence from different sources,include citations,and provide elements of analysis and discussion. Clear conclusions should be made.

To achieve a merit mark (60%+),you must demonstrate very good understanding of buffer overflow vulnerabilities and relevant secure software development methodologies. You are expected to show very good understanding of buffer overflow detection and prevention mechanisms. Your report is expected to draw evidence from a wide range of different academically credible sources,and provide well-evidenced and justified analysis and discussion. Clear conclusions should be made.

To achieve a distinction mark (70%+),you must conduct a thorough,well-documented and well-justified review of the topic,highlighting key considerations in the detection and prevention of buffer overflow vulnerabilities. Clear conclusions should be made based on the discussion. Your report is expected to draw evidence from a wide range of different academically credible sources,and provide evidence in the form of citation for every claim it makes.

因为专业，所以值得信赖。如有需要，请加QQ：99515681 或邮箱：[email protected]

微信：codehelp

https://www.elastic.co/guide/en/elasticsearch/client/java-rest/current/java-rest-overview.html

<dependency>
    <groupId>org.elasticsearch.client</groupId>
    <artifactId>elasticsearch-rest-client</artifactId>
    <version>6.5.4</version>
</dependency>

public static RestClient getRestClient(){

    RestClient restClient = RestClient.builder(

            new HttpHost("localhost", 9200, "http")).build();

    return restClient;

}

restClient.close();

//配置可选参数

RestClientBuilder builder = RestClient.builder(

        new HttpHost("localhost", 9200, "http"));

Header[] defaultHeaders = new Header[]{new BasicHeader("header", "value")};

//设置每个请求需要发送的默认headers，这样就不用在每个请求中指定它们。

builder.setDefaultHeaders(defaultHeaders);

// 设置应该授予的超时时间，以防对相同的请求进行多次尝试。默认值是30秒，与默认socket超时时间相同。

// 如果自定义socket超时时间，则应相应地调整最大重试超时时间。

builder.setMaxRetryTimeoutMillis(10000);

builder.setFailureListener(new RestClient.FailureListener() {



    public void onFailure(HttpHost host) {

        //设置一个监听程序，每次节点发生故障时都会收到通知，这样就可以采取相应的措施。

        //Used internally when sniffing on failure is enabled.(这句话没搞懂啥意思)

    }

});

builder.setRequestConfigCallback(new RestClientBuilder.RequestConfigCallback() {



    public RequestConfig.Builder customizeRequestConfig(RequestConfig.Builder requestConfigBuilder) {

        //设置允许修改默认请求配置的回调

        // （例如，请求超时，身份验证或org.apache.http.client.config.RequestConfig.Builder允许设置的任何内容）

        return requestConfigBuilder.setSocketTimeout(10000);

    }

});

builder.setHttpClientConfigCallback(new RestClientBuilder.HttpClientConfigCallback() {



    public HttpAsyncClientBuilder customizeHttpClient(HttpAsyncClientBuilder httpClientBuilder) {

        //设置允许修改http客户端配置的回调

        // （例如，通过SSL的加密通信，或者org.apache.http.impl.nio.client.HttpAsyncClientBuilder允许设置的任何内容）

        return httpClientBuilder.setProxy(new HttpHost("proxy", 9000, "http"));

    }

});

public static void getCreateIndx(RestClient client){

    String method = "PUT";

    String endpoint = "/book";

    try {

        Request request  = new Request(method, endpoint);

        Response response = client.performRequest(request);

        System.out.println(EntityUtils.toString(response.getEntity()));

    }catch (Exception e) {

        e.printStackTrace();

    }

}