EEL DATA NETWORKS, SYSTEMS, AND SECURITY Fall 2016

Transcription

1 EEL DATA NETWORKS, SYSTEMS, AND SECURITY Fall 2016 Objectives The objective of this course is to provide a technical and operational introduction to data/computer communication networks. Students will acquire a basic understanding of networking components and how they interact. This material will provide a basis for learning how to install, configure, maintain, upgrade, and troubleshoot networks. The course is comprised of a series of modules and will include assignments/projects, quizzes, and a final exam. The course will start with an overview of database management and operating system technologies (which play a vital role in network operation and security). Key concepts and technologies in data networks will then be introduced, including layered architectures and topologies. Subsequently, the main elements in information technology networking will be detailed, including routers, switches, gateways, servers, workstations, and storage devices. Higher-level protocols and monitoring tools for packet switching networks using these elements will then studied (including data transport and address/naming). The course will then address applied topics in network management and performance optimization, as well as troubleshooting and congestion control. Finally, the study will conclude with a look at network security issues, including encryption, authentication, firewalls and intrusion detection, security management tools, and threat scenarios. Instructor Prof. Nasir Ghani, Electrical Engineering, USF Tampa nghani@usf.edu Prerequisites This course is open to students in all majors/disciplines. Basic familiarity with computers and networking applications is expected. Office Hours Whenever generally available or by appointment Main Course Text A. Tanenbaum, D. Wetherall, Computer Networks: 5 th Edition, Prentice Hall Publishers, New York, NY, 2010 (ISBN: , ). J. Kurose, K. Ross, Computer Networking: A Top-Down Approach (6 th Edition), Pearson Publishers, Boston, MA, 2013 (ISBN: , ) Additional Reference Texts W. Stallings, Operating Systems: Internals and Design Principles (8 th Edition), Prentice Hall Publishers, 2014 (ISBN: , ) A. Silberschatz, P. Galvin, G. Gagne, Operating System Concepts (9 th Edition), Wiley Publishers, New York, NY, 2013 (ISBN: , ) R. Elmasri, S. Navathe, Fundamentals of Database Systems (6 th Edition), Addison-Wesley Publishers, Boston, MA, 2011 (ISBN: , ).

2 Course Outline Databases and Database Management Systems Basic database concepts, including indexing, inference, aggregation, poly-instantiation Structure and operation of relational data and NoSQL models Object-based and object-oriented languages Access matrix and access modes database security models Database security and management vulnerabilities (from passwords, user privileges and escalations, SQL injections, buffer overflows, DoS, unencrypted data, etc) Properties and use of hash functions, encryption principles for database management Access control methods (discretionary, mandatory, and role-based) including DAC, MAC, RBAC, Clark-Wilson Distributed multi-tiered applications for data/information flow management. Inference and aggregation attacks Operating Systems Concepts Program execution via processes and threads (process control blocks, thread control blocks) Memory management schemes (real, virtual). Concepts in file system interfaces (access, sharing, protection, directories, and file system mounting) and implementation (structure, directories, allocation, free space management, performance and recovery) Access control models and mechanisms, including access control lists Security breaches (confidentiality, integrity, or availability) and denial of service. Program and system threats (Trojan horses, backdoors, logic bombs, overflows, viruses, worms) Virtual machines and managers (hypervisors) to support multiple guest operating systems Resource access control for programs/processes/users. Privileged and non-privileged states for kernels and applications. Operating system protection/security measures (encryption, authentication, key distribution) Security design principles and their application (including domain separation, process isolation, resource encapsulation, least privilege) Networking Overview, Media, and Architectures Concepts, technologies, and components in communications and data networks, including hardware and software (protocol) systems. Network types (WAN, LAN, SAN, WLAN, etc) and OSI reference model Internet and network media overview. Network architectures for client needs, role of topologies (bus, ring, star, tree, mesh) IT System Components, Network Devices and Services Key information technology system elements (workstations, servers, and peripherals), network storage device functions Networking devices and roles, including routers, switches, gateways, guards, CDS, VPNs, and firewalls Intrusion detection (IDS) and intrusion prevention systems (IPSs) for network defense Mobile devices and their roles in building network services Network Technology and Protocols Networks infrastructure planning and operation Network protocol and roles (IPv4/v6, DNS, HTTP, SSL, TLS), network addressing (including sub-netting and translation) Packet-switched data networks and role of Internet transport protocols suite (TCP, UDP) Network and packet trace analysis methodologies

3 Network Management Network monitoring and mapping tools, network monitoring to identify performance and connectivity issues Network performance optimization and troubleshooting strategies. System documentation for configuration management Network evolution and change management, including BYOD and MDM Remote and distributed network management concepts, use of distribution servers Congestion control methods (reactive and proactive), resource efficiency and fairness Network routing design (including link-state and distance vector protocols) Overview of Network Security Issues Security vulnerabilities and objectives (authorizations, perimeters, risk assessment, accountability, incident response) Network security systems and building blocks (encryption, authentication, intrusion detection, security management tools, and firewalls, IPSec) Wireless LAN security issues, such as WEP key security, sniffing, denial of service (DoS), bluesnarfing and bluejacking, evil twin, and war driving Grading Schemes Quizzes: 80% Projects: 20% Grading Policy Letter Grade Percentage Range A % B 79-88% C 69-78% D 60-68% F < 60% Quizzes and Final Exam Students will be required to complete a series of quizzes after completing each module. All quizzes will be conducted in an on-line manner and will be of fixed time duration. Only one attempt will be allowed for each. Homework/Projects Some project assignments will also be given and are intended to help students develop their knowledge and practical skills. These projects will be given at least one week in advance of their due date. Late submissions will only be accepted under exceptional circumstances (please do your best to notify the instructor beforehand if you cannot submit on time). Reading The lectures and slides are intended to explain and supplement the textbook. In order to properly learn the material and get the most out of the course, students are required to read the suggested materials regularly and preferably before viewing the lectures. Special Circumstances Students should notify the instructor as early as possible regarding any special conditions or circumstances which may affect their performance (e.g., medical emergencies, family circumstances, etc). In addition, in case of a wider emergency, the university may choose to

4 maintain delivery of instruction and course materials via other methods such as Canvas, Elluminate, Skype, messaging, or an alternate schedule. Therefore students are expected to monitor Canvas for any course-specific communication, as well as the main USF, College, and department websites, s, and MoBull messages for important general information. Academic Integrity and Ethics Students are expected to be fully aware of the University s policies on student conduct and academic integrity (please refer to Undergraduate Catalog for complete details). It is unethical to copy or modify someone else s work and represent it as your own. Plagiarism, cheating, and other forms of academic dishonesty are not allowed and will not be tolerated. This includes copying homework/project/exam information and also providing homework/project/exam information for copying. All open source software used for project development purposes must be appropriately cited/acknowledged. Violation of this policy will result in the assignment of a failing grade.

5 EEL 6935: Data Networks, Security, and Systems Fall 2016 (Fall 1): August 22-October 14 th, 2016 Week # Sunday Monday Tuesday Wednesda y Thursday Friday Saturday August Quiz 1 Quiz 2 Quiz 3 Quiz 4 Quiz 5 Quiz Module 0: Overview Module September 1 2 Quiz 1 3 Module 1 Module Quiz 2 10 Module 2 Module Quiz 3 17 Module 3 Module Quiz 4 24 Module 4 Module Quiz 5 1 Module 5 Module Quiz 6 8 Module 6 Module Quiz 7 14 Module 7