Network security and privacy

Transcription

1 Winter semester 2011/2012 Seminar on Network security and privacy (selected topics) Prof. Dr. Dieter Hogrefe Youssef Shehadeh Maimun Rizal

2 Course Overview Prerequisites (Recommended): Mobile communication I Mobile communication II Implements Module: M.inf Seminar Telematik I M.Inf Seminar Telematik II Advanced Topics in Computer Networking I (ITIS) Language English 2

3 Course Objectives Primary objectives: Learn some fundamentals of security and privacy issues in computer and wireless networks. Form the state of art on a certain topic. Provide a paper form report and a professional presentation for a chosen topic. Secondary objectives: Learn how to search for papers: IEEExplore, ACM, Citeseerx, whitepapers. Experience in preparing professional reports and presentations. 3

4 Hints on Reading papers PAPER Start QUICK SCAN Title, Abstract, Subtitles, Figures, Conclusion, READING Is the paper interesting? No Yes Thorough Reading Read carefully paper, discuss, analyze results. Summarize paper contributions, possible enhancements? End 4

5 Report Requirements: In form of IEEE conference template paper [two columns, 5-8 pages]: shing/templates.html Organization: Abstract, Introduction (Related work) Main part of your topic (model, discussion, analysis, simulations, results...) Conclusion PDF + Editable(Latex, word...) format 5

6 Hints on Writing Scientific Papers Abstract: not more than words. Brief Introduction*: Introduce problem (why important, motivate) (Related work). Outline your contribution. Outline paper structure.(this paper is organized as follows...) Body*: Problem, system model/architecture, basics... Discussion, anaylsis. Evaluation, results. Summary and conclusions. Bibliography. *These points might vary with the subject topic. *Source: 6

7 Hints on Writing Scientific Papers Paragraphs should have a logical narrow flow. Avoid very long sentences. Clarify notations at first use. Write for the reader, not yourself. Not only show figures! Comment, Analyze and Abstract! Avoid spelling mistakes!!! Review several times! 7

8 Presentation High-quality presentation Well-structured, correct spelling, professional layout. Duration of each presentation ~30 minutes + ~10 minutes discussion. Slides presentation (e.g. Pdf, ppt, ) Compliance with set deadlines. 8

9 Hints for the Presentation Rule of thumb: A slide containing a normal content takes about 1-2 minutes for 30 minutes approximately slides. Basic guide Welcome your audience. Try to speak without notes, do not read out loud everything from the slides word-by-word. Adjust your presentation speed so that the audience can follow. How to give a good research talk guide: 9

10 Selected Topics 1. Wireless Fingerprinting: identifying devices through physical layer characteristics 2. DOS Attacks against IEEE Privacy Preservation in WSNs 4. Protecting Privacy in Participatory Sensing Systems 5. Security and Privacy in Vehicular Communication Systems 6. Security and Privacy Issues in Wireless Sensor Networks for Healthcare Applications 7. Border Gateway Protocol (BGP) Security 8. Voice over IP Security 9. Man-in-the-Middle Attacks on VoIP 10. Authentication in Voice over Internet Protocol (VoIP) 10

11 References L. C. C. Desmond, C. C. Yuan, T. C. Pheng, and R. S. Lee, ''Identifying unique devices through wireless fingerprinting,'' In Proc. of WiSec, March/April L. Wang, B. Srinivasan and N. Bhattacharjee, ''Security Analysis and Improvements on WLANs,'' JOURNAL OF NETWORKS, VOL. 6, NO. 3, MARCH 2011 N. Li, N. Zhang, S. Das, and B. Thuraisingham, ''Privacy preservation in wireless sensor networks: A state-of-the-art survey,'' Journal on Ad Hoc Networks 7 (2009) K. Huang, S. Kanhere, and W. Hu, ''Preserving privacy in participatory sensing systems,'' Journal on Computer communications 33 (2010), pp P. Papadimitratos, et al., ''Secure Vehicular Communication Systems: Design and Architecture,'' IEEE Communications Magazine, November 2008, pp M. Al Ameen, J. Liu, and K. Kwak, ''Security and Privacy Issues in Wireless Sensor Networks for Healthcare Applications,'' Journal of Medical Systems, 1 9. DOI /s K. Butler, T. Farley, P. Mcdaniel, and J. Rexford, ''A Survey of BGP Security Issues and Solutions,'' IEEE/ACM Trans. Netw., vol. 98, no. 1, pp , Jan A. Keromytis, ''A Comprehensive Survey of Voice over IP Security Research,'' IEEE Commun. Surveys Tutorials, vol. PP, no. 99, pp. 1 24, R. Zhang, X. Wang, R. Farley, X. Jiang,''On the Feasibility of Launching the Man-in-the-Middle Attacks on VoIP from remote Attackers'', ASLACCS09, March 10-12, 2009, Sydney, NSW, Australia. ACM /09/03. F. Wang, Y. Zhang, ''A new provably secure authentication and key agreement mechanism for SIP using certificateless public-key cryptography,'' Computer Communications, Volume 31, Issue 10, 25 June 2008, Pages , ISSN

12 Course Plan 12

13 Grading points Report: 50% Presentation: 40% Active participation in seminar: 10%. Penalties may apply: Incompliance with set deadlines. Incomplete attendance of block seminar. 13

14 14