Network Security Welcome and introduction. T Network security Nov-Dec 2013 Tuomas Aura Aalto University

Transcription

1 Network Security Welcome and introduction T Network security Nov-Dec 2013 Tuomas Aura Aalto University

2 Course learning objectives Know common communications systems, classic security protocols and mechanisms, standard security solutions, and some of the latest stuff Understand network security technologies, their properties and limitations to be able to use them right Understand a protocol engineer s point of view to security Be aware of the pitfalls in security engineering: things are not as simple as they look Develop the adversarial mindset of a security engineer Learn to do basic security analysis of security protocols Starting point for learning more on the job or in further studies Additional goal: learning to read protocol standards 2

3 Required background Students are expected to understand: Networking technologies: TCP/IP, etc. Basic security concepts, e.g. T Information security technology Basic cryptography, e.g. T Cryptosystems 3

4 Lecturer: Tuomas Aura Lectures 13 lectures in Nov-Dec 2013 Tuesdays 12:15-14 T6 Thursdays 14:15-16 T3 Attendance not mandatory but much of the material will only be covered in the lectures No tutorial or exercise sessions 4

5 Exercises Six weekly exercises Deadline on Sunday at 23:59; first deadline on Exercises published in Noppa at least a week earlier Reports to be returned to Rubyric Course assistants Aapo Kalliola and Markku Antikainen t @tkk.fi Course assistants available in the Playroom for advice and equipment: Wednesdays 16:15-18 room A120 Thursdays 16:15-18 room A120 You must get 50% points on each exercise round to pass the course Don t panic: we want you to do well in the exercises There ll be an extra exercise round after the course to compensate for one or two failures the course alias if you need a personal extension to a deadline 5

6 Advice for the exercises Try to solve all problems at least partly: even if it does not work, write a report explaining what you have tried and why The goal in many of the exercises is to learn how to find information, so not everything is explained There are always surprises with new software versions Individual work: You are encouraged to discuss with other students but do not copy or even read the written answers of others students. Do all practical experiments independently and write your own code You are allowed to cut and paste relevant short passages from standards, but mark them clearly as quotations and give the source, e.g. [RFC 1234, section 5.6.7] 6

7 Assessment First examination Exam registration is required and closes one week before the exam Examination scope: lectures, protocol standards, recommended reading material, exercises, good general knowledge of the topic area Exercises are mandatory: Must get 50% of the points on each exercise to pass the course Marking: exam max. 30 points exercises max 6 x 10 = 60 points grading based on total points = exam + (exercises / 10) (total max 30+6=36 points) Course feedback is mandatory in all T-110/T-109 courses 7

8 Tentative course outline 1. Network security threats and goals 2. Security protocols, Kerberos 3. TLS / SSL internals 4. IPsec and its limitations 5. WLAN security: EAP, WPA2 6. Cellular network security 7. Denial of service (Aapo Kalliola) 8. NFC application security (Sandeep Tamrakar) 9. Routing security (Aapo Kalliola) 10. Identity and discovery 11. Firewalls 12. Anonymity Security protocols Networks and systems Some changes to this plan are likely. 8

9 Recommended reading William Stallings, Network security essentials: applications and standards, 5th ed., Pearson Prentice Hall, 2013 (4 th or 3rd ed. is also ok) RFCs and standards, links from Wikipedia Old but has some interesting background information: Kaufman, Perlman, and Speciner, Network security: PRIVATE communication in a PUBLIC world, Prentice-Hall,

10 Course feedback and development Major revision of the course last year, only minor adjustments this year Students asked for more point from the exercises; however, we did not change this because the exercise already make a big difference to the grades and to passing the course Will replace the IDS exercise with protocol design Will reduced the amount of work required by the last exercise Other notes: The handouts contain some slides that have been covered in other courses. These are intended as helpful reading material and no or little time is spent on them in the lectures. 10