BME VIK - Information and Network Security

A tantárgy neve magyarul / Name of the subject in Hungarian: Information and Network Security

3. Course coordinator and department Dr. Fehér Gábor,

Web page of the course http://www.tmit.bme.hu/vitmav52

4. Instructors

Name: Profession: Institute:
Dr. Gábor Fehér, PhD Associate professor BME-TMIT
László Zömbik Research fellow BME-TMIT

5. Required knowledge none

6. Pre-requisites

Kötelező:

(Training.code=("5NAA7")
VAGY
Training.code=("5NAA8")
VAGY
Training.code=("5NAM7")
VAGY
Training.code=("5NAM8") )

ÉS

NEM ( TárgyEredmény( "BMEVIHIAV14" , "jegy" , _ ) >= 2
VAGY
TárgyEredmény("BMEVIHIAV14", "FELVETEL", AktualisFelev()) > 0)

A fenti forma a Neptun sajátja, ezen technikai okokból nem változtattunk.

A kötelező előtanulmányi rend az adott szak honlapján és képzési programjában található.

Ajánlott:
none

7. Objectives, learning outcomes and obtained knowledge The objective of the course is to provide theoretical and practical knowledge from today's information and network security topics. The course introduces the theory and practice of those equipment, methods and algorithms that support secure information sharing over computer networks.

8. Synopsis

Introduction

• Objectives of the information and network security. Threats and attacks. History of cryptography and cryptanalysis. Monoalphabetic and polyalphabetic ciphers. Statistical tests in cryptanalysis: Index of coincidence method. Practice and examples.

Cryptography

• Symmetric key encryption. Well known block ciphers: Data Encryption Standard (DES), 3DES, Advanced Encryption Standard (AES). Product cipher, Feistel cipher architecture, Substitution-permutation network. Meet in the middle attack. Block chaining. Modes of operation.

• Stream ciphers. One Time Pad, the perfect cipher. Binary additive stream ciphers. Synchronous stream ciphers, asynchronous stream ciphers. Converting ciphers. Hardware realized ciphers. Linear Feedback Shift Register based ciphers. Software stream ciphers: RC4. Comparison of symmetric key ciphers.

• Asymmetric key encryption, public key encryption. RSA algorithm and key generation. Enhancement on the RSA algorithm. Blinding. Digital Signature Algorithm (DSA). Signing and verification, Digital signature.

• Hash functions. Cryptographic hashing. Size of the hash output. Iterative hash functions. Block cipher based hash functions. Well known hash functions: Message Digest 5 (MD5), Secure Hash Algorithm (SHA1). Keyed hash functions, HMAC.

Keymanagement

• Keymanagement protocols. Basics: key agreement, -transport, -authentication, confirmation. Keymanagement protocol characteristics. Perfect Forward Secrecy. Key transport protocols: Point-to-point key update, Authenticated Key Exchange Protocol 2, Shamir’s no key protocol, Wide Mouth Frog, Needham-Schroeder, Otway-Rees protocols. Using public key cryptography in key management. Diffie-Hellman key exchange (DH), multi user DH. Station-to-station protocol. Secret sharing.

Secure network communication

• Attacks on network security. Layer 2 and Layer 3 network security. Attacks on routing. TCP session hijacking. Secure communication protocols: IPSec (AH, ESP), Transport Layer Security: TLS/SSL. Virtual Private Networks (VPN)

Firewalls, Intrusion Detection Systems

• Network Address Translation (NAT). Firewall functions. Packet filters and Proxy firewalls. Examples for packet filter firewall configurations. Dynamic packet filtering. Firewall architectures. Demilitarized Zone (DMZ). Firewall’s future. Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS). Rule based and anomaly based detection. Network IDS and Host IDS. Honeypots.

• Vulnerability analysis

Security of Wireless Networks

• WiFi networks. WiFi protection: Wired Equivalent Privacy (WEP), WiFi Protected Access (WPA) and IEEE 802.11i protocols. WPA Temporal Key Integrity Protocol (TKIP) and Counter Mode CBC-MAC Protocol. IEEE 802.1X. Extensible Authentication Protocol (EAP).

9. Method of instruction 4 lectures and practice per week. Practice during the theoretical class.

10. Assessment

• In the class period there are two in-class tests (ZH) around the 7th and 13th weeks.

• Both in-class tests should be scored above 40%. The final grade score is based on the average of the two test scores.

11. Recaps In the delayed completion period there is a possibility to rewrite the in-class tests (ZH) once.

12. Consultations Consultation with the lecturers of the subject is possible at pre-arranged time.

13. References, textbooks and resources

• Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone, “Handbook of Applied Cryptography”, CRC Press, ISBN: 0-8493-8523-7

• Bruce Schneier, Applied Cryptography, Second Edition: Protocols, Algorthms, and Source Code in C, John Wiley & Sons, Inc., ISBN: 0471128457

14. Required learning hours and assignment

Kontakt óra	56
Preparation for lessons	28
Preparation for tests	36
Homework	0
Learning of prepared matters	0
Preparation for exam	0
Total	120

15. Syllabus prepared by

Name:	Profession:	Institute:
Dr. Gábor Fehér, PhD	Associate professor	BME-TMIT