Course Details

1. Outline the underlying principles of system and network security.
2. Recognize the concepts and issues involved in networks security applications.
3. Examine the cryptographic algorithms and protocols underlying network security applications.
4. Explain the operation of various security models and their application scenarios within an organization.
5. Identify system-level security issues, and illustrate the principles of intrusion detection and firewalls, and describe their characteristics.

Introduction to Security: Security properties. Security Attacks. Security Services. Security Mechanisms. Security policies and models (Bella-badula, Clinical information model, ORCON, Chinese wall model, RBAC).

Cryptography: Symmetric Encryption and Message Confidentiality (Symmetric encryption principles and algorithms, Cipher block modes of operation, Location of encryption devices, Key distribution). Public-Key Cryptography and Message Authentication (Approaches to message authentication, Secure hash functions and HMAC, Public-key cryptography principles and algorithms, Digital signatures, Key management).

Networks Security Applications: Authentication Applications (Kerberos, X.509 directory authentication service, Public Key Infrastructure). Electronic Mail Security (PGP, S/MIME). IP Security (IP Security architecture, Authentication header, Encapsulating security payload, Combining security associations, Key management). Web Security (Secure Socket Layer (SSL) and Transport Layer Security (TLS), Secure Electronic Transaction (SET)). Network Management Security (SNMP Community Facility, SNMPv3).

System Security: Intruders (Intrusion Detection, Password Management). Malicious software (Viruses and Related Threats, Virus Countermeasures, Distributed Denial of Service Attacks). Firewalls (Firewall design Principles, Trusted systems). Operating Systems Security (UNIX Security, Windows Security).

• M. Bishop, Introduction to Computer and Network Security, Addison-Wesley, 1st Ed., 2004.
• W. Stallings, Network Security Essentials: Applications and Standards, Prentice Hall, 3rd Ed., 2007

• C. Kaufman, R. Perlman, M. Speciner, Network security: Private communication in a public world, Prentice Hall, 2nd Ed., 2002.
• C.P. Pfleeger and S.L. Pfleeger, Security in Computing, Prentice Hall, 4th Ed., 2007
• W. Stallings and L. Brown, Computer Security: Principles and Practice, Prentice Hall, 1st Ed., 2008

Students are taught the course through lectures by means of computer presentations.

Lectures are supplemented with unsupervised computer laboratory/homework where students apply their gained knowledge and identify the principles taught in the lecture sessions.

Lecture notes and presentations are available through the web for students to use in combination with the textbooks.