CSG 254 - Network Security

Syllabus

Welcome to CSG 254, Network Security. This course provides a graduate-level introduction to network security.

Instructors interested in using the course material (including laboratory setup, configs, and solutions) are welcome to contact me.

Staff

Instructor

Guevara Noubir (noubir ATA ccs DOTA neu DOTA edu)
Phone: (617) 373 5205
Office: 238 West Village H.

Lab TAs

Gilberto Molina (moldz ATA ccs DOTA neu DOTA edu)
San Tan (tansan ATA ccs DOTA ney DOTA edu)

Class Information

Time/Location

Tuesday 6:00pm-9:00pm, 110 West Village H.

Office Hours

Thu 3:00-5:00 PM.

Required Textbook

Network Security: Private Communication in a Public World Charles Kaufman, Radia Perlman, Mike Speciner, Pearson Education, April 2002

Course Home Page

http://www.ccs.neu.edu/home/noubir/Courses/CSG254/S07.

Previous years Home Page

http://www.ccs.neu.edu/home/noubir/Courses/CSG254/S06.

Prerequisites

Fundamentals of Computer Networks or Internetworking course.

Course schedule

Current Schedule.

Lab and Competition Location

Laboratory assignments and final competition will be carried out on the VMware Virtual Network.

Additional Resources

List of books.
List of useful links.

Class Materials

• [PDF] Review of cryptography concepts, algorithms, and security services.
• [PDF] Review of Internet architecture and protocols.
• [PDF] Non-cryptographic network security: tools, etc.
• [PDF] Authentication Protocols
• [PDF] Kerberos.
• [PDF] Secure Socket Layer SSL/TLS.
• [PDF] Public Key Infrastructures (PKI).
• [PDF] IPsec: AH, ESP, IKE.
• [PDF] Viruses, Worms, DDOS.
• [PDF] Multicast Security.
• [PDF] Security in Wireless Sensor Networks.

Assignments

Problem Sets

• PS1 [solution]

• PS2 [solution]

• PS3 [solution]

Lab Assignments

• Introduction

• Buffer Overflow

• Port Scanning

• Network Intrusion Detection

• Host-based Instrusion Detection

• Password Cracking

• Firewall

• Host Hardening

• Man-in-the-Middle Attacks

• Local Exploits

• Vulnerability Scanning

• Application Exploits

Midterm

The midtem will take place on March 20th. Please mark your calendars and make sure that you will be able to attend the midterm.

Finals competition

The main goal is to get a hands-on experience with securing networks and designing/developing secure network applications. An outline of the competition setup will be provided later. The lab assignments will help the teams to prepare for the competition by gradually building a secure network.

• Systems Competition Requirements
• Systems Competition Rules
• Using the GUI on the attacker machine

Notes

• Please keep in mind that the lab assignments can be incremental and will help you prepare for the competition.

• Students may discuss the problem sets with one another, but solutions should be written up separately.

• If a key idea is obtained from another person (other than the TA or the instructor) or from another book or paper (other than the course textbook), then the source of that idea should be cited. Solutions should be presented in a clear and concise manner.

• All the team member should participate actively to the labs and application development. For each laboratory each group member should document his contribution.

Grading

The course grade will be based on:

• 25%: 3 problem sets on network security theoretical concepts
• 10%: 3 quizzes
• 30%: Midterm exam
• 15%: Laboratory assignments
• 20%: Report and final competition