Netzwerksicherheit [NetSec]

Transcription

1 Netzwerksicherheit [NetSec] Dr.-Ing. Falko Dressler Computer Networks and Communication Systems Department of Computer Sciences University of Erlangen-Nürnberg [NetSec], WS 2006/

2 Course Overview Network Security Threats and security goals, basic mechanisms Cryptography Basics, symmetric cryptography, asymmetric cryptography Cryptographic Techniques Modification check values, random number generation, cryptographic protocols Protocols for Network Security Access control, integrating security services into communication architectures, security protocols at the link layer, IPSec architecture, security protocols at the transport layer Applications Firewalls, security aspects of mobile communications (WLAN, GSM/UMTS) Attack Detection Attack detection and prevention [NetSec], WS 2006/

3 Exercises Organization Consolidation of course topics, extended studies Working groups of 2-3 students Mix of theoretic and practical exercises Overview Lab training Cryptographic algorithms Certificates, PKI Security analysis Network monitoring and analysis VPN, Firewalls (Linux, Cisco) WLAN security (how to access secured WLANs) Attack detection [NetSec], WS 2006/

4 Course Overview Material Günter Schäfer, Netzsicherheit - Algorithmische Grundlagen und ProtokolleMobile Communications, dpunkt Verlag, (an English version is available) William Stallings, Cryptography and Network Security: Principles and Practice, Prentice Hall, 3rd ed, News, updates, handouts, Persons Dr.-Ing. Falko Dressler (lecture and exercises) Jochen Kaiser (exercises) [NetSec], WS 2006/

5 Course Organization Lecture Monday, 14:15-15:45, H5 (except , , ) additional dates Tuesday, , 12:15-13:45, H6 Tuesday, , 12:15-13:45, H6 Exercises (3-4 groups) Tuesday, 14:15-15:45, CIP-Pool Tuesday, 16:15-17:45, CIP-Pool Thursday, 16:15-17:45, CIP-Pool see web page for more up-to-date information [NetSec], WS 2006/

6 Course Organization Examination Computer science: in combination with KS (communication systems) Computational engineering: oral examination Exercises are relevant! Schein Oral examination at the end of the semester benoteter Schein : successful processing of ALL exercises, the grade results form the oral examination unbenoteter Schein : successful processing of ALL exercises, at least 50% must be achieved in the oral examination [NetSec], WS 2006/

7 Curses at Dept. of Computer Science 7 Kommunikationssysteme + Pervasive Computing, Protokolle der Hochgeschwindigkeits- und Mobilkommunikation, Netzwerksicherheit (systemorientiert) Dienstgüte von Kommunikationssystemen, Netzwerksicherheit, Selbstorganisation in Autonomen Sensor- /Aktornetzen, Simulation and Modeling I (methodisch) Simulation and Modeling I+II [NetSec], WS 2006/

8 General Course Bibliography [Amo94] [Cha95] [For94b] [Gar96] [KPS95] [Men97a] [Sch96] [Sta98a] [Sti95a] [Sch03] E. G. Amorosi. Fundamentals of Computer Security Technology. Prentice Hall Brent Chapman and Elizabeth Zwicky. Building Internet Firewalls. O'Reilly, Warwick Ford. Computer Communications Security - Principles, Standard Protocols and Techniques. Prentice Hall Simson Garfinkel and Gene Spafford. Practical Internet & Unix Security. O'Reilly, C. Kaufman, R. Perlman und M. Speciner. Network Security Private Communication in a Public World. Prentice Hall A. J. Menezes, P. C. Van Oorschot, S. A. Vanstone. Handbook of Applied Cryptography. CRC Press Series on Discrete Mathematics and Its Applications. CRC Press, B. Schneier. Applied Cryptography - Second Edition: Protocols, Algorithms and Source Code in C. John Wiley & Sons, W. Stallings. Cryptography and Network Security: Principles and Practice. Prentice Hall, 2nd ed, D. R. Stinson. Cryptography: Theory and Practice (Discrete Mathematics and Its Applications). CRC Press, G. Schäfer. Netzsicherheit Algorithmische Grundlagen und Protokolle. dpunkt.verlag, [NetSec], WS 2006/