Differences between revisions 36 and 75 (spanning 39 versions)
Revision 36 as of 2011-01-09 16:38:11
Size: 1932
Editor: 71-88-174-166
Comment:
Revision 75 as of 2020-01-08 20:05:37
Size: 4469
Editor: scot
Comment:
Deletions are marked like this. Additions are marked like this.
Line 4: Line 4:
= CPTR 427 Network Security Class Wiki = = CPTR 427 Network Security =
Line 6: Line 6:
This page contains resources for Network Security CPTR 427. For assignments, syllabus and schedule, see the [[https://www.southern.edu/moodle2|Eclass website]].
For information on '''what you should already know''', take a look at [[NetworkSecurity/Prerequisites]].
|| <<TableOfContents>> || {{http://imgs.xkcd.com/comics/cryptography.png||width=300}} ||
Line 9: Line 8:
== Topics and resources == == Course Description ==
Line 11: Line 10:
   * [[NetworkSecurity/Lab]]
   * [[NetworkSecurity/Tools]]
   * [[NetworkSecurity/Hacking]]
   * [[NetworkSecurity/Encryption]]
   * [[NetworkSecurity/FireWall]]
   * [[http://facultyfp.salisbury.edu/despickler/personal/CryptTools.asp|Cryptotools]]
   * [[http://www.backtrack-linux.org/|Backtrack Penetration Testing]]
   * In the past we have used [[NetworkSecurity/WebScarab|Web scarab]]
   * [[http://www.securitywizardry.com/radar.htm|A nice dashboard]]
   * [[http://osvdb.org/|Open Source Vulnerability Database]]
This course provides an overview to key issues and solutions for network security and privacy issues. It provides an introduction to cryptography and its application to network and operating systems security; security threats; applications of cryptography; secret key and public key cryptographic algorithms; hash functions; authentication; security for electronic mail; intrusion detection; malicious software and firewalls. This course provides the necessary information to prepare for the CompTIA Security+™ exam SY0-501.
Line 22: Line 12:
== Purpose, Goals & Objectives ==
Line 23: Line 14:
== Books Used in this Class == The purpose of this course is to introduce students to the real world of network security. Because this is an important, fast growing and changing field, the course goal covers training students to research security related information and implement the solutions found to protect vital assets. To accomplish these goals the student will research a chosen area and setup or write the necessary software on his/her own system. They will then prepare a lecture on the value, implementation and effectiveness of the chosen topic.
Lecture topics may include:
Line 25: Line 17:
'''Required Books'''  * What is Security?
 * Cryptography
 * Symmetric and asymmetric key cryptography
 * Hashes & Message Digests
 * Public Key Algorithms & Infrastructure
 * Number Theory Authentication
 * IPSec
 * SSH/SSL
 * Mail/GNU Privacy Guard
 * Hardening Issues
 * Windows
 * Firewalls
 * Web Issues
 * Intrusion Detection and Prevention
 * Wireless
 * Security Tools
Line 27: Line 34:
   * [[http://www.snort.org/assets/125/snort_manual-2_8_5_1.pdf | Snort Manual]] (Free)
   * The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography ISBN: 0385495323
      * Each student must read this New York Times Best Seller.
      * Cryptography will be studied in conjunction with the assigned chapters.
   * Network Security Essentials 4th Ed. ISBN: 0-13-610805-9 NetworkSecurityEssentials4
      * The theory of cryptography (Symmetric, Public-key, Key-management, Hash and MAC) are covered from this book
      * Applications of theory are partially covered from this book (Kerberos, X.509, IPSec)
      * Dr. A will do all the lecturing on these topics.
   * Labs will be given from handouts. Topics will be take from [[NetworkSecurity/Lab]]
Upon successful completion of this course, students will be able to:
Line 37: Line 36:
'''Recommended Book(s)'''  * Understand the basic security concepts applicable to system administration
 * Develop skill to be able to find useful security information
 * Develop skill to be able to understand the legal and ethical responsibilities as a network security administrator
 * Present anoral lecture and poster presentation on their own project.
 * Develop skill to be able to evaluate the effectiveness of security information
 * Develop skill to be able to understand the basics of security research
Line 39: Line 43:
   * Snort IDS and IPS Toolkit ISBN-10: 1-59749-099-7 = Resources =

This page contains resources for Network Security CPTR 427. For assignments etc. see the [[https://eclass.e.southern.edu|Eclass website]]. For information on '''what you should already know''', take a look at [[NetworkSecurity/Prerequisites]].

== Topics, Resources and Ideas for the future ==
/* * /NetworkSecurityEssentials4 notes from the book used in 2013. */
 * [[/Lab]]
   * [[/Nebula|Nebuala, a nice beginner hacking tutorial]]
   * [[https://www.offensive-security.com/metasploit-unleashed/|Metasploit course - free]]
 * [[/Tools]]
 * [[http://academic.comptiastore.com/|CompTIA Academic Marketplace]]
 * [[/Programs]]
 * [[/Spam]]
 * /FireWall
 * [[/Topics]]
 * /SageIdeas
 * [[http://facultyfp.salisbury.edu/despickler/personal/CryptTools.asp|Cryptotools]] from AMS/MAA conference 2011 by Dr. Don Spickler.
 * [[http://www.backtrack-linux.org/|Backtrack Penetration Testing]]
 * Two proxy tools that allow editing and observing http(s) are [[NetworkSecurity/WebScarab|Web scarab]] and [[http://www.parosproxy.org/|Paros Proxy]] - there is also some nice proxies specifically for firefox.
 * [[http://www.securitywizardry.com/radar.htm|A nice dashboard]]
 * [[http://osvdb.org/|Open Source Vulnerability Database]]
 * [[http://web.nvd.nist.gov/view/vuln/search?execution=e2s1|National Vulnerability Database]]
 * [[http://exploit-db.com/]] Once upon a time there was a site called Milw0rm.com and it was great! But the maintainer passed away and eventually it was taken over by http://exploit-db.com/.
 * Back in the stone age (relatively speaking of course) Dr. A took a course called [[Csce877]].

== Materials Used in this Class ==
'''Recommended AdditionalReading'''

 * [[http://www.snort.org/assets/125/snort_manual-2_8_5_1.pdf|Snort Manual]] (Free)
 * [[http://ofps.oreilly.com/titles/9781449320317/ch_Security.html|MVC 4 Security, Authentication and Authorization]]
 * [[http://www.tomsitpro.com/articles/information-security-certifications,2-205.html|Security Certifications]]

== DES Hints ==

 * http://www.cs.bham.ac.uk/research/projects/lemsys/DES/DESPage.jsp
Line 42: Line 80:

  
* Cptr427Winter2010   
 * /Cptr427Winter2010

CPTR 427 Network Security

http://imgs.xkcd.com/comics/cryptography.png

Course Description

This course provides an overview to key issues and solutions for network security and privacy issues. It provides an introduction to cryptography and its application to network and operating systems security; security threats; applications of cryptography; secret key and public key cryptographic algorithms; hash functions; authentication; security for electronic mail; intrusion detection; malicious software and firewalls. This course provides the necessary information to prepare for the CompTIA Security+™ exam SY0-501.

Purpose, Goals & Objectives

The purpose of this course is to introduce students to the real world of network security. Because this is an important, fast growing and changing field, the course goal covers training students to research security related information and implement the solutions found to protect vital assets. To accomplish these goals the student will research a chosen area and setup or write the necessary software on his/her own system. They will then prepare a lecture on the value, implementation and effectiveness of the chosen topic. Lecture topics may include:

  • What is Security?
  • Cryptography
  • Symmetric and asymmetric key cryptography
  • Hashes & Message Digests

  • Public Key Algorithms & Infrastructure

  • Number Theory Authentication
  • IPSec
  • SSH/SSL
  • Mail/GNU Privacy Guard
  • Hardening Issues
  • Windows
  • Firewalls
  • Web Issues
  • Intrusion Detection and Prevention
  • Wireless
  • Security Tools

Upon successful completion of this course, students will be able to:

  • Understand the basic security concepts applicable to system administration
  • Develop skill to be able to find useful security information
  • Develop skill to be able to understand the legal and ethical responsibilities as a network security administrator
  • Present anoral lecture and poster presentation on their own project.
  • Develop skill to be able to evaluate the effectiveness of security information
  • Develop skill to be able to understand the basics of security research

Resources

This page contains resources for Network Security CPTR 427. For assignments etc. see the Eclass website. For information on what you should already know, take a look at NetworkSecurity/Prerequisites.

Topics, Resources and Ideas for the future

Materials Used in this Class

Recommended AdditionalReading

DES Hints

Past Year Class Pages

NetworkSecurity (last edited 2024-01-07 18:12:17 by scot)