CSE 651: Network Security

Instructor:  Prof. Anish Arora

Autumn 2011

MWF 1:30-2:18pm, Bolz Hall 316

Office hours:  MW 2:30-3:30pm in DL 587

---

Description

An introduction to network security; security threats, services, protocols, verification and design, architectures, technologies, testing, advances; elements of cryptography; securing network systems and applications.

Level and Credits

• UG  3

Prerequisites

• CSE 677 or permission of instructor

General Information, Exclusions, etc.

• none

Objectives

• Mastery of some protocols for security services 
• Familiarity with some fundamentals of cryptography
• Familiarity with  network security threats and countermeasures
• Familiarity with network security designs using available secure solutions (such as PGP, SSL, IPSec, and firewalls)
• Familiarity with advanced security issues and  technologies (such as DDoS attack detection and containment,  anonymous communications, and security properties testing, verification and design)
• Exposure to original research in network security

Required Text

• William Stallings, Cryptography and Network Security: Principles and Practice, Fourth Edition, Prentice Hall, 2005. ISBN: 0131873164

Reference Texts

• Bruce Schneier, Applied Cryptography,  (2^nd Edition), Wiley 1996 ISBN 0-471-11709-9
• Paul Campbell, Ben Calvert, Steven Boswell, Security + Guide to Network Security fundamentals, Thomson, ISBN 0-619-12017-7
• Charlie Kaufman, Radia Perlman and Mike Speciner, Network Security – Private Communication in a Public World, Prentice Hall, 1995. ISBN 0-13-061466-1

Papers from the literature will be assigned.

Topics

Number of Weeks	Topics
1.5 1	Overview Security principles and security threats  Security services: privacy, confidentiality, authentication, integrity, availability, non-repudiation, access control, etc Security threats: traffic analysis, IP spoofing, denial of service, routing attacks, information leakage, remote arbitrary code execution, viruses, etc. Social, ethical, policy and legal issues What we will teach and will not teach Implementation issues
1.5	Elements of cryptography Classic ciphers, modern ciphers and stream ciphers and one-way functions Secret key (symmetric): DES/AES and public key (asymmetric): RSA
1	Security with Constrained Resources Wireless Sensor Networks
2.5	Securing Network Systems and Applications Email security: Pretty Good Privacy (PGP) Web security: Secure Sockets Layer (SSL) IP security and VPN: IPSec  [Security in routing: OSPF and BGP]
2.5	Advanced Security Issues and Technologies Firewalls: intrusion detection Large Scale Attacks on the Internet and their defense DDoS attack and its defense: types of  DoS and DDoS attacks, trace-back and attack containment Active worm defense Anonymous communication Wireless security

Miscellaneous

Midterm exam will be in class and is tentatively scheduled for Friday, October 28^th. 

Schedule notes:

• November 11^th and 25^th : No class due to holidays.
• During the class on Nov 2^nd and 4^th there will be a training session for programming motes.
• Prof. Arora is traveling on October 10^th, 12^th and November 23^rd-. Guest lecturers will teach the classes on these days.

Class projects will be announced around October 31^st. Projects will be due by December 3^rd at 11:59pm.

For grade distribution, see Lecture 0.

Office Hours

MW 2:30pm-3:30pm in DL 587

Grader

Mr. Dong Li; Email: li.1011@osu.edu ; Dreese Labs 274; Phone 614 456 6899; Office Hours: Tuesday 12:00-1:00PM, Friday: 11:00AM -Noon

Lecture Notes

0

Appendix on implementation issues

1

Appendix on AES
2

3
4

5

6

7

8

9

Homework Assignments

These are to be submitted by the beginning of class on the due date.

H0

H1

H2

H3

Lab Exercises

These are to be submitted electronically before the beginning of class on the due date.

L0

L1

L2

L3

Projects (link provided in class)