Network Security in Practice (Wintersemester 2012/2013)

Lecturer: Prof. Dr. Christoph Meinel (Internet-Technologien und -Systeme) , Dr. Feng Cheng (Internet-Technologien und -Systeme)

General Information

• Weekly Hours: 4
• Credits: 6
• Graded: yes
• Enrolment Deadline: 1.10.2012 - 31.10.2012
• Teaching Form: SP
• Enrolment Type: Compulsory Elective Module

Programs, Module Groups & Modules

Description

(last update on 07.01.2013)

In this seminar, we focus on study of the security problems of networked systems or applications. Several network security technologies, such as, firewall, IDS/IPS, SSH, VPN, Application Layer Gateway, Network Scanning and Monitoring, IPv6, etc. will be concerned in this seminar. Some known implementations, tools and methods, incl. commercial products/open source software, are expected to be reviewed and tested with certain practical deployment scenario.

Important Notice: We are NOT guiding you for hacking and participation in this seminar could NOT be an excuse for any kinds of your malicious actions towards unauthorized resources over Internet!!!

Requirements

Good knowledge in

• networking technologies (TCP/IP, Routing, ...)
• operating systems and software engineering
• security basics (e.g., lectures on "Internet Security - Weaknesses and Targets" and "Informationssicherheit", etc.)

Literature

• William R. Cheswick, Steven M. Bellovin, “Firewalls and Internet Security”, second Edition, Addison-Wesley, 2003.
• Andrew S. Tanenbaum, "Computer Networks", fourth edition, Prentice Hall PTR, 2003. 
• Charlie Kaufman, Radia Perlman, and Mike Speciner. "Network Security: Private Communication in a Public World", second Edition, Prentice Hall PTR, 2002.
• Dafydd Stuttard, Marcus Pinto, "The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws",  Wiley & Sons, 2007.
• ......

Learning

This seminar has a limited number of participants! Up to 16 students can apply!

All the students will work as a project group. Within the whole group, the personnels will be distributed into 8 sub-teams (i.e., 2 for each), which will concentrate on 1-2 topics.

Topics

1. Attack Category and Vulnerability Modeling
2. Firewall: Principle and Limitation 
3. IDS/IPS: Challenges and Deployment
4. Application Layer Gateway and its Examples
5. Web Security and SSL/TLS
6. Email Security: PGP, S/MIME, ......
7. Secure Networked Storage
8. SIP and Secure VoIP
9. SSH Tunneling and Virtual Private Network (VPN)
10. Secure Routing
11. Network Scanning and Monitoring
12. IPSec
13. IPv6 and its Security
14. Wireless Security
15. ......

Examination

The interested students are expected to contribute with:

• Throughout investigation of the given topics (Report and Presentation)
• Design and Implementation of attack scenarios, where the security methods can be tested

The final evaluation will be based on: report, presentation, design, implementation, participation in the seminar.

Dates

The seminar will start on Oct. 15, 2012. Regular meeting will be held every week or upon request.

Zurück