IST 451: Network Security

Transcription

1 IST 451: Network Security COURSE DESCRIPTION This course looks at the fundamentals of Network Security and how it is being positioned in the IT industry. Besides looking at many of the basic principles of network security including encryption, host and network security, Internet security, and familiarity with some of the common network monitoring tools and IDSs (Intrusion Detection Systems). This course will also attempt to expose the students to some of the newer technologies and practices such as wireless, forensics, and how IT managers are dealing with spam and spyware as security issues. Students will gain a basic understanding of many of the threats that are perpetrated again companies and their digital resources, how attacks are planned and carried out, and what methods and tools are available to help security professionals safeguard their systems and data. COURSE OBJECTIVES At the conclusion of this course, students will have a basic understanding of many of the types of security threats posed against digital information, how attacks are planned and carried out, and some of the methods used to safeguard digital assets. Note to Students With Disabilities: The Pennsylvania State University is committed to providing access to a quality education for all students, including those with documented disabilities. If a student has a disability and wants to request an accommodation for a course, it is the responsibility of the student to first obtain a University accommodation letter confirming the disability and suggesting appropriate remedies. This letter can be obtained from the Penn State Office for Disability Services or the campus Disability Contact Liaison. The contact person at Penn State Greater Allegheny is Ms. Victoria Garwood, , vkg2@psu.edu. It is encouraged that students request their accommodation need early in the semester, and

2 once identified, a reasonable accommodation will be implemented in a timely manner. Students may also access the web site for the Office of Disability Services at University Park: Americans with Disabilities Act: The College of Information Sciences and Technology (IST) welcomes persons with disabilities to all of its classes, programs, and events. If you need accommodations, or have questions about access to buildings where IST activities are held, please contact the Dean's Office (814) in advance of your participation or visit. If you need assistance during a class, program, or event, please contact any member of our staff or faculty in charge. Non- Discrimination Policy: The Pennsylvania State University is committed to the policy that all persons shall have equal access to programs, facilities, admission, and employment without regard to personal characteristics not related to ability, performance, or qualifications as determined by University policy or by state or federal authorities. It is the policy of the University to maintain an academic and work environment free of discrimination, including harassment. The Pennsylvania State University prohibits discrimination and harassment against any person because of age, ancestry, color, disability or handicap, national origin, race, religious creed, sex, sexual orientation, or veteran status. Discrimination or harassment against faculty, staff, or students will not be tolerated at The Pennsylvania State University. Direct all inquiries regarding the nondiscrimination policy to the Affirmative Action Director, The Pennsylvania State University, 201 Willard Building, University Park, PA , Tel /V, /TTY. Academic Integrity: All students are expected to act with civility, personal integrity; respect other students' dignity, rights and property; and help create and maintain an environment in which all can succeed through the fruits of their own efforts. An environment of academic integrity is requisite to respect for self and others and a civil community. Academic integrity includes a commitment to not engage in or tolerate acts of falsification, misrepresentation or deception. Such acts of dishonesty include cheating or copying, plagiarizing, submitting another persons' work as one's own, using Internet sources without citation (including works in the public domain), fabricating field data or citations, "ghosting" (taking or having another student take an exam), stealing examinations, tampering with the academic work of another student, facilitating other students' acts of academic dishonesty, etc. Students charged with a breach of academic integrity will receive due process and, if the charge is found valid, academic sanctions may range, depending on the severity of the offense, from F for the assignment to F for the course.

3 The University's statements on academic integrity, from which the above statement is drawn, are available at: html If you are unsure as to what constitutes plagiarism please review this document: CLASS INFORMATION Section 021 Class Time T 6:00-8:45pm Class Room Frable 221 INSTRUCTOR INFORMATION ON Name/Title Office Phone Office Hours Address Website Galen A. Grimes, Associate Professor of IST Frable 213E (see website) gagrimes@psu.edu

4 COURSE MATERIALS/REQUIRED REQUIRED TEXT Hacking Exposed: Network Security Secrets & Solutions, 6th Ed. Joel Scambray, Stuart McClure, George Kurtz Osborne/McGraw- Hill ISBN: TENTATIVE CLASS SCHEDULE Week Topics Readings Assignments 1 Introduction: What is Network & Data Security? McClure, et al: Introduction; Case Study: Ch 1, "Footprinting", pp.7-42 How do hackers plan an attack? 2 Encryption Technology McClure, et al: , , 475 1) Encrypting Files/Folders with Windows ) Sending encrypted with PGP (Pretty Good Privacy). 3 Network Administration Overview and ACLs 4 ACLs, Logon Procedures, Authentication, and Passwords Wikipedia: Access control list Wikipedia: Access control list Wikipedia: Challenge- response authentication ACLs in Windows 2000 Security Understanding and using Password Crackers 5 Securing Host Computers: Windows Handout from instructor Hardening a Windows 2000

5 2000 & Linux Server 6 Malicious Code: Viruses, Worms, And Trojans McClure, et al: pp Using the Back Orifice 2K Trojan, TDS- 3, Norton Anti- Virus 7 Cyber Forensics Wikipedia: Computer forensics TBA 8 Mid- Term Exam None None 9 Intrusion Detection Methods Scanning & Sniffing 10 Network Security, Monitoring, and Vulnerability Testing Tools 11 Understanding Hacker/Cracker Attacks McClure, et al: Sniffers, pp , , , , , , None McClure, et al: Denial of Service (DoS) Attacks Ch. 10, pp ; Denial of Service Attacks Against GRC.COM (Download and Read) MS NetMon, WinSniff & Ethereal, Port Scanning Tools Nessus, What's Up Gold, Analyzer, SolarWinds, LanGuard Tribal Flood Network and other types of Packet Attacks 12 Actively Detecting Vulnerabilities Wikipedia: Intrusion detection system Snort 13 Intrusion Intervention: Firewalls McClure, et al: Firewalls in index Wikipedia: Firewall (computing) Installing a firewall/proxy 14 Wireless Networks and Wireless Security Wikipedia: Wireless network, Wireless security Speaker: Clif Eagle, PSUGA Network TBA

6 Services 15 Planning and Risk Management Wikipedia: Information security/risk management. Semester project GRADING A 100.0% % A- 92.9% % B+ 89.9% % B 87.9% % B % C+ 79.9% % C 77.9% % D 69.9% % F 59.9% - 0.0% Late Assignments. Assignments dues dates are specified for each assignment. Unless otherwise indicated all assignments will be uploaded to their respective Dropboxes in Angel. Five (5) points will be deducted for each day late. Angel documents the time and date each assignment is uploaded into a Dropbox. CONTACTING INSTRUCTOR VIA Unless I tell you that I'm going to be out of contact for some time, you can be sure that any you send me will be answered within 24 hours (this assumes you provide full address and other pertinent information). Generally, I respond to even faster than other means of communication. However, if you haven't received a response within 24 hours, you should assume that I didn't get your and resend it. Don't wait a long time and assume that I'm

7 ignoring your . I don't ignore because it is too important for this form of instruction. I find it to be the major vehicle for establishing effective communications that an in- class course offers by the presence of the instructor. As far as answering your questions in the , I take the following approaches: 1. If you ask a simple question that asks for additional information, then you will most likely receive a simple answer to the question. 2. If you ask a question that is related to an assignment objective that I want you to investigate yourself (i.e., I'm interested in what you did or are doing rather than what I say or know) I will refer you to other sites, online lectures or textbook. This should provide the information you need to find the solution for yourself rather than get something by rote from me. Many times there are no pat or "one- approach" answers. 3. Sometimes you will ask a question that I believe you should know from your own background. I will then ask you a question in return that I think will let you draw your own conclusions about issue. This will not be a one- shot situation because it is likely that you may get part of the answer but still have additional questions. When you pose these, I'll respond with one of these three approaches.