Historically, major defensive security techniques for software systems were developed as a response to the emergence of classes of exploitation techniques. The aims of such defensive techniques are usually not about preventing software developers from writing insecure code, but rather, they are aimed at preventing bugs in software to be exploited by attackers to compromise their targets. Vulnerability Research and Exploit Mitigation examines important exploit mitigation techniques deployed in modern software systems through an adversarial lens: software vulnerabilities are explored in depth, through how they can be discovered and exploited, in order to understand the mechanisms behind the exploit mitigation techniques. The course covers topics ranging from common patterns in software vulnerabilities, such as stack-based buffer overflow, format string vulnerabilities, and heap-based vulnerabilities; exploitation techniques such as code injection, code obfuscation, return-oriented-programming; techniques for vulnerability discovery, such as program binaries reverse engineering, fuzzing and symbolic execution; and mitigation techniques such as memory protection mechanisms, input sanitization, and control flow integrity protection. The course features hands-on lectures and labs to analyse software vulnerabilities, both in the source code and in program binaries, to develop proof-of-concept exploits, and to design and implement appropriate mitigation techniques against exploitation. Students will learn state-of-the-art vulnerability research and exploitation tools and techniques, and apply their knowledge on case studies involving real-world software systems.
Additional source review: awaiting review. Published wording is shown below.
Saved requirements encoded for automatic checks. These are prototype interpretations, not ANU decisions or degree-completion checks.
Requisite and Incompatibility
To enrol in this course, you must be enrolled in the Master of Computing (Advanced) and have completed COMP6034 or COMP3704. Incompatible with COMP3703 and COMP4703.
Referenced entries (4)
Links and code mentions retain their original context above. They may describe options, prerequisites or exclusions.
- COMP6034 · 2027
- COMP3704 · 2027 · saved source not linked
- COMP3703 · 2027 · saved source not linked
- COMP4703 · 2027 · saved source not linked
Learning Outcomes
Upon successful completion, students will have the knowledge and skills to:
Demonstrate a thorough understanding of common sources of vulnerabilities in software.
Demonstrate a thorough understanding in exploitation techniques against software vulnerabilities and defensive techniques against these exploitations.
Demonstrate proficiency in software reverse engineering.
Demonstrate proficiency in vulnerability discovery processes, from both source code and binary.
Apply vulnerability discovery techniques to analyse vulnerabilities in real-world software, and design and implement appropriate mitigation techniques.
Published offerings
Future offerings are indicative. Only recognised 2027 sessions with a published class number are offered in the enrolment demo.
| Year | Session | Class number | Class start date | Last day to enrol | Census date | Class end date | Mode Of Delivery | Class Summary |
|---|---|---|---|---|---|---|---|---|
| 2027 | First Semester | 5113 | 22 Feb 2027 | 01 Mar 2027 | 31 Mar 2027 | 28 May 2027 | In Person | N/A |
| 2028 | First Semester | 6511 | 21 Feb 2028 | 28 Feb 2028 | 31 Mar 2028 | 26 May 2028 | In Person | N/A |
Complete offering text
ANU utilises MyTimetable to enable students to view the timetable for their enrolled courses, browse, then self-allocate to small teaching activities / tutorials so they can better plan their time. Find out more on the Timetable webpage. The list of offerings for future years is indicative only. Class summaries, if available, can be accessed by clicking on the View link for the relevant class number. 2027 2028 First Semester Class number Class start date Last day to enrol Census date Class end date Mode Of Delivery Class Summary 5113 22 Feb 2027 01 Mar 2027 31 Mar 2027 28 May 2027 In Person N/A First Semester Class number Class start date Last day to enrol Census date Class end date Mode Of Delivery Class Summary 6511 21 Feb 2028 28 Feb 2028 31 Mar 2028 26 May 2028 In Person N/A
Source evidence (2 saved copies)
Matching copies share this record. Their original file locations and checksums are retained.
assets/Courses/Cyber Security/8000/Vulnerability Research and Exploit Mitigation/Vulnerability Research and Exploit Mitigation - ANU.html
Published ANU page · saved page URL
SHA-256: 20e06da7312900b24b86b04b307d27870e56b98fb2a0671b041f9fe834651864assets/Courses/Remained/8000/Vulnerability Research and Exploit Mitigation/Vulnerability Research and Exploit Mitigation - ANU.html
Published ANU page · canonical URL in the saved page
SHA-256: db9545a9c3ec458c0461128c0a84b3b5dba02fbe13acc8deacd482154083c035