Coursehero >> New York >> Hofstra >> SESS 01

Course Hero has millions of student submitted documents similar to the one below including study guides, homework solutions, papers, exam answer keys and textbook solutions.

CSC290A network security 02/06/06 Hofstra University network security Course, CSC290A 1 FAQs How Do Corporations Prevent Intrusions Into There Networks? What Does SHA1 And MD5 Mean When You Download? What Is A Certificate And How Does It Secure Your Internet Transaction? Do You Really Have Privacy On The Internet? These are just a few of the many questions related to network security , one of the most active and rewarding areas in Information Technology. These and many other questions will be examined in this topical graduate seminar. This class uses slides, the Web, and handson demonstrations to explore a range of topics from the foundations of cryptography to the latest research concerning security on the Internet, while maintaining a healthy balance between theory and practice. 02/06/06 Hofstra University network security Course, CSC290A 2 Course Description Survey of current issues, techniques, software, hardware and architectures related to network security . Examination of the protocols used for Internet services, their vulnerabilities and how they can be secured. Analysis of firewall design, cryptographic techniques, intrusion detection, port scanning, viruses, trojan horses and denial of services attacks. Basic principles of secure networking and application design will be studied and discussed. Prerequisites: None 02/06/06 Hofstra University network security Course, CSC290A 3 Text Required Text William Stallings, network security Essentials: Applications and Standards 2/e, Prentice-Hall, 2003, 432 pp., ISBN 0-13-035128-8 Reference William Stallings, Business Data Communications, 5/e, PrenticeHall, 2005, 608 pp., ISBN 0-13-144257-0 Cheswick, W. and Bellovin, S., Firewalls and network security : Repelling the Wiley Hacker, Addison Wesley, 2003, 464 pp., ISBN 0-201-63466-X William Stallings, Cryptography and network security : Principles and Practice, 4/e, Prentice Hall, 2006, 569 pp., ISBN 0-13-1873164 Bruce Schneier, Applied Cryptography: Protocols, Algorithms, and Source Code in C, 2/e, Wiley, 1996, 784 pp., ISBN 047-111709-9 02/06/06 Hofstra University network security Course, CSC290A 4 Grading Several assignments, three count mid-term and end-term Class participation Final project or paper No make-up test or extended deadlines 02/06/06 Hofstra University network security Course, CSC290A 5 Point Allocation Assignments 1-3: Final Project: Mid-Term: End-Term: Participation: 5% each 30% 25% 25% 5% 02/06/06 Hofstra University network security Course, CSC290A 6 Attendance Not Mandatory, but you ll probably fail! Participation is very important Let me know if you can t make it 02/06/06 Hofstra University network security Course, CSC290A 7 Course Schedule 1 2 3 4 5 6 7 8 9 10 11 12 13 14 1/30 2/06 2/13 2/27 3/6 3/13 3/20 3/27 4/3 4/19 4/24 5/1 5/8 5/15 Introduction Cryptography Cryptography Authentication Applications E-Mail Security IP Security, Networking, Tools IP Security, Networking, Tools - Mid-Term Exam Due Firewalls Web Security Electronic Commerce Intruder, Viruses and Denial of Service Network Management Security - Final Project/Paper Due Intrusion Detection / Special Topics/Review End-Term Exam Due 02/06/06 Hofstra University network security Course, CSC290A 8 Slides, Links & News www.cs.hofstra.edu/~cscvjc/Spring06 02/06/06 Hofstra University network security Course, CSC290A 9 Class Rules Assignments are to be completed individually Academic honesty taken very seriously Any attempt to gain unauthorized access to any system will be dealt with harshly 02/06/06 Hofstra University network security Course, CSC290A 10 Introduction network security 02/06/06 Hofstra University network security Course, CSC290A 11 Information Security Physical Administrative Lockup the file cabinet 02/06/06 Hofstra University network security Course, CSC290A 12 Private Networks Isolated to individual organizations Emergence of computer security Sharing a system Protecting data 02/06/06 Hofstra University network security Course, CSC290A 13 Networking Networks start talking to each other Gateways Arpanet TCP/IP Everywhere Vinton Cerf, IP On Everything! 02/06/06 Hofstra University network security Course, CSC290A 14 Maturing of the Internet Telephones used by 50% of worlds population Internet attains similar level of growth by 2010 max growth Connecting computers and programmable devices More devices than people 02/06/06 Hofstra University network security Course, CSC290A 15 Early Hacking Cap n Crunch cereal prize Giveaway whistle produces 2600 MHz tone Blow into receiver free phone calls Phreaking encouraged by Abbie Hoffman Doesn t hurt anybody Hofstra University network security Course, CSC290A 02/06/06 16 Captain Crunch John Draper `71: Bluebox built by many Jobs and Wozniak were early implementers Developed EasyWriter for first IBM PC High-tech hobo White-hat hacker Hofstra University network security Course, CSC290A 02/06/06 17 The Eighties 1983 War Games movie Federal Computer Fraud and Abuse Act - 1986 Robert Morris Internet worm -1988 Brings over 6000 computers to a halt $10,000 fine His Dad worked for the NSA!!! 02/06/06 Hofstra University network security Course, CSC290A 18 It Got Worse 1995 Kevin Mitnick arrested for the 2nd time Stole 20,000 credit card numbers First hacker on FBI s Most Wanted poster Tools: password sniffers, spoofing http://www.2600.com Hofstra University network security Course, CSC290A 02/06/06 19 Tracking Attacks http://www.cert.org 02/06/06 Hofstra University network security Course, CSC290A 20 Services, Mechanisms, Attacks (OSI Security Architecture) Attack action that compromises the security of information owned by an organization Mechanisms detect, prevent or recover from a security attack Services enhance the security of data processing systems and xfers counter security attacks 02/06/06 Hofstra University network security Course, CSC290A 21 Security Attacks Information source Information destination Normal Flow 02/06/06 Hofstra University network security Course, CSC290A 22 Security Attacks Information source Information destination Interruption Attack on availability 02/06/06 Hofstra University network security Course, CSC290A 23 Security Attacks Information source Information destination Interception Attack 02/06/06 on confidentiality 24 Hofstra University network security Course, CSC290A Security Attacks Information source Information destination Modification Attack 02/06/06 on integrity 25 Hofstra University network security Course, CSC290A Security Attacks Information source Information destination Fabrication Attack 02/06/06 on authenticity 26 Hofstra University network security Course, CSC290A Security Attacks Passive threats Release of message contents Traffic analysis eavesdropping, monitoring transmissions 02/06/06 Hofstra University network security Course, CSC290A 27 Security Attacks Active threats Masquerade Replay Modification of message contents Denial of service some modification of the data stream 02/06/06 Hofstra University network security Course, CSC290A 28 Security Attacks On the Internet, nobody knows you re a dog by Peter Steiner, New York, July 5, 1993 02/06/06 Hofstra University network security Course, CSC290A 29 Security Attacks 02/06/06 Hofstra University network security Course, CSC290A 30 Security Services Confidentiality protection from passive attacks Authentication you are who you say you are Integrity received as sent, no modifications, insertions, shuffling or replays 02/06/06 Hofstra University network security Course, CSC290A 31 Security Services Nonrepudiation can t deny a message was sent or received Access Control ability to limit and control access to host systems and apps Availability attacks affecting loss or reduction on availability 02/06/06 Hofstra University network security Course, CSC290A 32 network security Model 02/06/06 Hofstra University network security Course, CSC290A 33 network security Model Four basic tasks in designing a security service: Design algorithm Generate secret information to be used Develop methods to distribute and share info Specify a protocol to be used by the two principals 02/06/06 Hofstra University network security Course, CSC290A 34 Protocols Simple To Complex 02/06/06 Hofstra University network security Course, CSC290A 35 Network Access Security Model 02/06/06 Hofstra University network security Course, CSC290A 36 Internet Standards and RFCs Internet Architecture Board (IAB) - overall architecture Internet Engineering Task Force (IETF) - engineering and development Internet Engineering Steering Group (IESG) - manages the IETF and standards process 02/06/06 Hofstra University network security Course, CSC290A 37 Request For Comments (RFC) RFCs are the working notes of the Internet research and development community 02/06/06 Hofstra University network security Course, CSC290A 38 Standardization Process Stable and well understood Technically competent Substantial operational experience Significant public support Useful in some or all parts of Internet Key difference from ISO: operational experience 02/06/06 Hofstra University network security Course, CSC290A 39 RFC Publication Process IE T F < 6 m o n th s IE S G In t e r n e t d ra ft > 6 m o n th s P ro p o s e d s ta n d a rd tw o in d e p e n d e n t im p le m e n ta tio n s E x p e rim e n ta l In f o r m a t io n a l > 4 m o n th s D ra ft s ta n d a rd In t e r n e t s ta n d a rd H is to r ic 02/06/06 Hofstra University network security Course, CSC290A 40 Some Current Topics http://www.aclu.org/pizza/images/screen.swf Eavesdropping Leaps Into 21st Century Matthew Fordahl, NY Times, 1/22/2006 Privacy for People Who Don't Show Their Navels Jonathan D. Glater, NY Times, 1/25/2006 Why We Listen Philip Bobbitt, NY Times, 1/30/2006 02/06/06 Hofstra University network security Course, CSC290A 41 Useful Websites http://www.williamstallings.com/NetSec2e.html Some recommended sites by the text author http://www.rfc-editor.org/rfcsearch.html Search RFCs http://www.cert.org Center for Internet security http://www.counterpane.com/alerts.html Some recent alerts 02/06/06 Hofstra University network security Course, CSC290A 42 Homework Read Chapter One Read NYTimes Articles Under Documents http://www.cs.hofstra.edu/~cscvjc/Spring06 Be Ready To Discuss 02/06/06 Hofstra University network security Course, CSC290A 43 Have A Nice Week!!! 02/06/06 Hofstra University network security Course, CSC290A 44

Find millions of documents here - Study Guides, Homework Solutions, Papers, Exam Answer Keys and more. Course Hero has millions of course related materials that will enable you to learn better, faster and get an A in all your courses.
Below is a small sample set of documents: