I400/I590 Security for Networked Systems
Motivation pa=
ragraph
Computer network is the most intensive battleground for information attackers and defenders. The unexpected extension of internetworking brings in enormous security concerns and virtually promotes= the advance of the whole area of information security. This course will offer a systematic survey of network security, introducing to students vulnerabilit= ies and threats to Internet communication and important security techniques whi= ch help mitigate these threats.
Course descri=
ptions
This course is an extensive survey of network security= . Course materials will cover threat= s to information confidentiality, integrity and availability in different Intern= et layers and defense mechanisms which control these threats. The course will also provide neces= sary foundation on information security, such as cryptographic primitives/protocols, authentication, authorization and access control technologies, and hands-on experiences through programming assignments and course projects.
Course object=
ive
The objective of this course is to offer a technical r= eview of the threats posed to current computer networks and distributed systems, = and security mechanisms which control them. Students will be trained to understand network systems from the security perspective, think proactively about the vulnerabilities in these systems and associated threats, and deve= lop technologies to counter these threats.
Tentative top=
ics
= 1. Elementary Cryptography
= 1.1. Classic cryptography (Monoalphabetic cipher and polyalphabetic cipher, One-time pad, Stream Cipher,etc)
= 1.2. Modern cryptography (Security model, one-way function, hash functi= ons, symmetric key encryptions, tr= apdoor one-way function, asymmetric key encryption, digital signature, secret sharing,= key establishment, management and certifications, classes of attacks.)
= 2. Authentication
= 2.1. Simple authentications (passwords, challenges and responses, etc)
= 2.2. The Needham-Schroeder protocol
= 2.3. Kerberos
= 3. Access Control
= 3.1. Access control list/matrix
= 3.2. Capabilities
= 3.3. Role-based access control
= 4. Security Policy
= 4.1. Military security policy
= 4.2. Security policy models
= 5. Internet basics
= 6. Security of network software
= 6.1. Buffer overflow
= 6.2. Virus and worm
= 6.3. Mobile code security
= 7. Secure communication mechanisms
= 7.1. SSL/TLS
= 7.2. IPSec
= 8. Firewalls
= 9. Denial-of-service
= 10. Intru= sion detection
= 11. Wirel= ess security
= 12. Priva= cy
= 12.1. = &nb= sp; PGP
= 12.2. = &nb= sp; Anonymous channels
= 13. Other topics
= 13.1. = &nb= sp; Incentive engineering (1)
= 13.2. = &nb= sp; Phishing (1)
= 13.3. = &nb= sp; Digital rights management
= 13.4. = &nb= sp; Risk management
Textbook
We will not strictly follow any text book. However, some of the course materi= als are from the following books: