Network Security in Practice (Wintersemester 2014/2015)

Dozent: Prof. Dr. Christoph Meinel (Internet-Technologien und -Systeme) , Dr. Feng Cheng (Internet-Technologien und -Systeme)

Allgemeine Information

Semesterwochenstunden: 4
ECTS: 6
Benotet: Ja
Einschreibefrist: 24.10.2014
Lehrform: SP
Belegungsart: Wahlpflichtmodul

Studiengänge, Modulgruppen & Module

IT-Systems Engineering BA

IT-Systems Engineering MA

IT-Systems Engineering A
IT-Systems Engineering B
IT-Systems Engineering C
IT-Systems Engineering D

Beschreibung

(last update on 14.01.2015)

In this seminar, we focus on study of the security problems of networked systems or applications. Several network security technologies, such as, firewall, IDS/IPS, SSH, VPN, Application Layer Gateway, Network Scanning and Monitoring, IPv6, etc. will be concerned in this seminar. Some known implementations, tools and methods, incl. commercial products/open source software, are expected to be reviewed and tested with certain practical deployment scenario.

Important Notice: We are NOT guiding you for hacking and participation in this seminar could NOT be an excuse for any kinds of your malicious actions towards unauthorized resources over Internet!!!

Voraussetzungen

Good knowledge in

networking technologies (TCP/IP, Routing, ...)
operating systems and software engineering
security basics (e.g., lectures on "Internet Security - Weaknesses and Targets" and "Informationssicherheit", etc.)

Literatur

William R. Cheswick, Steven M. Bellovin, “Firewalls and Internet Security”, second Edition, Addison-Wesley, 2003.

Andrew S. Tanenbaum, "Computer Networks", fourth edition, Prentice Hall PTR, 2003.

Charlie Kaufman, Radia Perlman, and Mike Speciner. "Network Security: Private Communication in a Public World", second Edition, Prentice Hall PTR, 2002.

Dafydd Stuttard, Marcus Pinto, "The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws", Wiley & Sons, 2007.

OPSCODE Project: "https://wiki.opscode.com/display/chef/Home", accessed in September 2013.

Social-Engineering Toolkits (SET) Project: https://www.trustedsec.com/downloads/social-engineer-toolkit/, accessed in September 2013.

Armitage Project: "http://www.fastandeasyhacking.com/", accessed in September 2013.

Hashcat Project: "http://hashcat.net/oclhashcat-plus/", accessed in September 2013.

Wifite Project: "http://code.google.com/p/wifite/", accessed in September 2013.

Wireshark Project: "http://www.wireshark.org/", accessed in September 2013.

Leistungserfassung

The interested students are expected to contribute with:

Throughout investigation of the given topics (Report and Presentation)
Design and Implementation of attack scenarios, where the security methods can be tested

The final evaluation will be based on: report, presentation, design, implementation, participation in the seminar.

Termine

The seminar will start from the first week of WS2014/15. The first session will be held at 13:30-15:00, on Oct. 15, 2014 (Wednesday) in Room H-E.52. The detailed plan will be announced soon.

15.10.2014 (Wed.) First session: Introduction
24.10.2014 (Fri.) Subscription Deadline and Team Build (via Email)
30.10.2014 (Thu.) Team meetings for topic discussion (the concrete time slot for each team is upon appointment)
11.2014-01.2015 Bi-weekly Team Meetings (the concrete team slot is upon appointment)
14.01.2015 (Wed.) Closing Session of Phase I
01.-03.2015 Weekly Team Meetings (the concrete time slot is upon appointment)
11.03.2015 (Wed.) Closing Session of Phase II

Zurück