322 376: Information and Communication Technology Security (Fall 2016)


Course Description:
Introduction to computer security and information and communication technology, encryption techniques, introduction to number theory, public key algorithm, key management, hash function, digital signature and authentication protocol, electronic mail security, Internet Protocol (IP) security (IPsec), web security, virus, worm, firewall, information technology security management, computer security law.

Prerequisite: Basic Knowledge of Computer Network; Operating System; Computer Architecture; Database

Instructor: Chakchai So-In, Ph.D., chakso AT kku.ac.th
Office: SC 6706
Office Hours: Wednesday 03.00pm to 05.00pm (after class) (or email me for appointment)
Class homepage: http://web.kku.ac.th/chakso/322376_Fall16/
CNAP CCNA Security material: Cisco Network Academy CCNA Security
Teaching Assistant:
  • Kanokmon Rujirakul ace_kamikaze AT hotmail.com , Monday 9.00am to 10.00am @ANT Lab level 2
  • Phet Aimtongkham phet AT phet.in.th, Sunday 05.00pm to 06.00pm @ANT Lab level 2
  • Comdet Phaudphut listzone AT hotmail.com, Sunday 05.00pm to 06.00pm @ANT Lab level 2
  • Jiruttigarn Gunteemoon jiruttigarntas AT gmail.com, Monday 04.00pm to 05.00pm @ANT Lab level 2
  • Titaporn sermsirikangana Papraebonggae AT gmail.com, Monday 04.00pm to 05.00pm @ANT Lab level 2
  • Janjira Pusungnoen Janjira AT gmail.com, Monday 04.00pm to 05.00pm @ANT Lab level 2

    • Location:
    Section I+II: - the class meets on Wednesday at room SC8305 from 01.00pm to 03.00pm for lecture.
    - Labs: on Wednesday at room 6204C from 10.00am to 12.00pm (Sec I)
    - Labs: on Wednesday at room 6204C from 05.00pm to 07.00pm (Sec II)
    Section III+IV:- the class meets on Tuesday at room SC8405 from 01.00pm to 03.00pm for lecture.
    - Labs: on Tuesday at room 6204C from 03.00pm to 05.00pm (Sec IV)
    - Labs: on Tuesday at room 6204C from 05.00pm to 07.00pm (Sec III)
    Facebook Group: Facebook Group
    Class Email: cs322376 AT gmail.com
    Textbook
    The main textbooks for the course are
    1.Computer and Network Security (Thai Edition) by Chakchai So-In, 2011-2016.
    2. คู่มือเรียนและใช้งาน Network Security Lab ฉบับใช้งานจริง by Chakchai So-In et al., 2016.

    Supplementary
    1. คู่มือเรียนและใช้งาน Computer Network Lab ฉบับใช้งานจริง by Chakchai So-In et al., 2016.
    2. Principles of Information Security by Michael E. Whitman and Herbert J. Mattord, 2011.
    3. CCNA Security Course Booklet Version 1.1 by Cisco Systems, 2012.
    4. Cryptography and Network Security: Principles and Practice by William Stallings, 2010
    5. Network Security: Private Communication in a Public World by Charlie Kaufman, Radia Perlman, and Mike Specimner, 2002
    6. Law (ICT) Thailand


    Interesting Computer and Network Security Material
    1. Master in Security 3rd edition (Thai) by Jatuchai Pangjun, 2016
    2. บริหารจัดการ Networking ด้วย Windows 7 by พิศาล พิทยาธุรวิวัฒน์, 2012
    3. คัมภีร์ Ubuntu Linux Server เล่ม 1 by บัณฑิต จามรภูติ, 2012
    4. คัมภีร์ Ubuntu Linux Server เล่ม 2 by บัณฑิต จามรภูติ, 2012
    5. คัมภีร์ Ubuntu Linux Server เล่ม 3 by บัณฑิต จามรภูติ, 2012
    6. ติดตั้งระบบเครือข่าย Linux Server ภาคปฏิบัติ by พิศาล พิทยาธุรวิวัฒน์, 2012
    7. Network and Computer Security Specialist #1, #2, #3 (Thai) by Minister of ICT, Thailand
    8.     Hands-on Ethical Hacking and Network Defense by Michael T. Simpson, Kent Backman, and James E. Corley, 2016
    9. CEH Certified Ethical Hacker All-in-One Exam Guide by Matt Walker, 2011
    10. CEH Certified Ethical Hacker Study Guide by Kimberly Graves, 2010
    11. Applied Cryptography: Protocols, Algorithms, and Source Code in C by Bruce Scheier, 1996
    12. Network Security Essentials: Applications and Standards by William Stalling, 2010
    13. Hacking Exposed: Network Security Secrets and Solutions by Stuart McClure, Joel Scambray, and George Kurtz, 2009
    14. Network Security Architectures by Sean Convery, 2010
    15. CISSP Certified Information Systems Security Professional STUDY GUIDE by SYBEX, 2010

    Other good books are
    Slides from Prof. Raj Jain, Network Security Slides
    Most importantly, please READ all Computer and Network Security Wiki related topics.
    Network Programming (Bee)
    UNIX Tutorial for Beginners Tutorial@virginia.edu

    Security Tool/Testbed

    Example Project I (Class in 2015)

    Example Project I (Class in 2014)

    Example Project I (Class in 2013)

    Example Project I (Class in 2012)

    Example Project I (Class in 2011)
    News
    Lecture Schedule: Tentative Subject to Change)
    ClassDayDateTopic
    1Tuesday09/08/2016Course Overview
    2Tuesday16/08/2016Need for Security
    3Tuesday23/08/2016Risk Analysis
    4Tuesday30/08/2016Basic Encryption Techniques
    5Tuesday06/09/2016Application Security
    6Tuesday13/09/2016(Cont.)
    7Tuesday20/09/2016Malicious Software
    8Tuesday27/09/2016Security Topic Selection Proposal + Review for Midterm + Dhamma #1 + Dhamma #2 + Dhamma #3 + Encoragement1 + Encoragement2 + Encoragement3
    9Tuesday04/10/2016Mid-Term Exam (week 03/10-07/10)
    10Tuesday11/10/2016IDS/IPS + VPN + IPSec
    11Tuesday18/10/2016Firewall + Authentication/Authorization/Accounting
    12Tuesday25/10/2016Software/Hardware Security + Block/Stream Ciphers
    13Tuesday01/11/2016Public Key Infrastructure
    14Tuesday08/11/2016(Cont.) + Hashing Techniques
    15Tuesday15/11/2016Ethic + Computer Crime + IT Law
    16Tuesday22/11/2016Review for Finalterm + Final Security Tool/App Presentation PPT + Demo + .Doc + Poster + Video (youtube) + Code/Configuration/Testbed
    17Tuesday01/12/2016Final Exam (week 01/12-08/12)

    Note: For Section I; date+1 say Tuesday 01/09 = Wednesday 03/09
    Homework/Lab Assignments (Fall 2016 schedule) (Subject to Change)
    Four or ten homeworks will be assigned throughout the course. All assignment MUST be turned in as a HARDCOPY (during class or in my mail box). All submission MUST be turned in 7 mins before class. For all reasons, late penalty will be applied. Late homework will be assessed a 30% penalty. No homework will be accepted more than one day late. For EMERGENCY cases, you allow to email me to cs322376@gmail.com including title prefix = "322376_Fall2016_XX:HWY" such that XX is your section number and Y is your homework number.

    HomeworkDescriptionOut DateDue Date
    #1Risk Analysis + Basic Encryption30/08/201613/09/2016
    #2Application Security + Malicious Software + IDS/IPS13/09/201627/09/2016
    #3Symetric Encryption01/11/201615/11/2016
    #4Asymetric Encryption08/11/201622/11/2016

    Eight or thirteen lab homeworks (Group 2 students) will be assigned throughout the course. All assignment MUST be turned in as a HARDCOPY/SOFTCOPY (during class or in my mail box). All submission MUST be turned in 7 mins before class ends. For all reasons, late penalty will be applied. Late lab homework will be assessed a 30% penalty. For EMERGENCY cases, you allow to email me to cs322376@gmail.com including title prefix = "322376_Fall2016_XX:LabY" such that XX is your section number and Y is your lab homework number.

    Note:For homework and lab assignment; you MUST include the cover letter with students' signature OTHERWISE they WILL NOT be graded.
    Academic Integrity
    Students at Khon Khan University are engaged in the first step for their professional career with the highest standards. Please follow the academic integrity guideline at Cheating and Plagiarism [@CMU]. All these rules are enforced for the entire course.
    Security Tools/Apps - Group of up to 2 students

    Security Tool
    ONLY hands-on security tools on topic of your choice
    The final outcome MUST be something VISUAL= Computer/Network/Information/Internet/ Security Tools
    There is about 20 mins demo + Document (setting + demo)
    Tool Ideas: http://sectools.org/?page=1

    Main Project (Project I)
    Project Ideas:
  • Ideas at Stanford.edu
  • Ideas at Berkeley.edu
  • Ideas at MIT.edu
  • Ideas at DotCrime
  • Ideas at Sunysb.edu
  • Ideas at Berkeley.edu
  • Ideas at Udel.edu
  • Ideas at Fsu.edu
  • Ideas at Upenn.edu


    • In this semester, we focus on Mobile and Wireless Network Security including sensor network security; however, we do not limit on these.
    Cisco Netrider Contest (Networking Competition)
    Network Security Contest
    Click Here

    Lab HomeworkDescriptionOut DateDue Date
    #1Install Virtual Machine + Windows OS + Basic Security (Chapter 1)09/08/201616/08/2016
    #2User Account Managment + AntiVirus (Chapter 2)16/08/201623/08/2016
    #3Network Service Security + Wireshark (Chapter 3)23/08/201630/08/2016
    #4Basic Encryption/Decryption (Chapter 12)30/08/201606/09/2016
    #5Shared Files + Netcut + Introduction to Personal Firewall (Chapter 4)06/09/201613/09/2016
    #6Network Managenment Tools (Chapter 5)13/09/201620/09/2016
    #7Malwares and Attacks (Chapter 9)20/09/201627/09/2016
    #8Midterm Lab Exam27/09/201604/10/2016
    #9IDS (Chapter 7))11/10/201618/10/2016
    #10IPSec + VPN + Email Security(Chapter 6)18/10/201625/10/2016
    #11Firewall + Proxy + NAT (Chapter 8)25/10/201601/11/2016
    #12Redius + Syslog Server + Backup (Chapter 10)01/11/201608/11/2016
    #13Set up Script + Stenography (Chapter 11)08/11/201615/11/2016
    #14Encryption/Decryption + Hashing (Chapter 13)15/11/201622/11/2016
    #15Final Lab Exam22/11/201629/11/2016

    Project Milestone

    Description

    Completion Date

    #1Security Topic Selection Proposal + 15 mins Presentation (what is it)20/09/2016
    #2Security Topic Tool/App Submission 20 mins Presentation + .Doc + Poster + PPT + Video (youtube) + Code + Demo22/11/2016

    Note: These are group projects BUT grading individually *write who do what in what%?*
    Grading: (tentative)
    Mid-Term Exam20%
    Final Exam25%
    Homework + Lab + Quiz + Class participation25%
    Midterm + Final Lab Exams15%
    Security Tools/App (Report)15% (grading individually)

    Note that students are allowed to bring only "ONE" piece of A4 paper in each exam with additional non-memorized calculator
    The final exam material will be after the mid-term; however, all related contents will be also covered.
    The exam includes 1. True/False (+1, -1, and 0), 2. Numerical and Analysis, and 3. Fill in the blank.
    The final grade will be curved based on the overall performance of the whole class (probablistic clear cut-off point).
    Note: Extra Credits +2.5 to 5% 1st round competition; +5 to 10% Final round competition; Published Paper/NSC/Network Security Contest/CISSP Certification/CCNA or CCIE Security Certification/Imagine Cup/Samart etc. **>1% for taking a network security contest exam

    Other related computer and network security research links
    1. CCSS Center for Computer Systems Security, University of Southern California, http://ccss.usc.edu/
    2. UW CSE Systems, Networking, and Security Research, University of Washington, http://www.cs.washington.edu/research/systems.intro.html
    3. Cyber Security, Virginia Tech, http://www.cyber.vt.edu/research
    4. The Computer Security Group, UCSB, http://seclab.cs.ucsb.edu/
    5. Security Research Lab, UC Berkeley, http://security.cs.berkeley.edu/
    6. IBM Security and Privacy, IBM, http://researcher.ibm.com/view_project.php?id=151
    7. CyLab, CMU, http://www.cylab.cmu.edu/
    8. Computer Security Division, NIST, http://csrc.nist.gov/
    9. Networking and Security Research Center, PSU, http://nsrc.cse.psu.edu/
    10. Security Group @CA, University of Cambridge, http://www.cl.cam.ac.uk/research/security/
    11. Stanford Security Laboratory, Stanford University, http://seclab.stanford.edu/
    12. Network Operations and Internet Security Lab, GATECH (Prof. Nick Feamster), http://www.gtnoise.net/
    13. Illinois Security Lab, UIUC (Dr. Carl A. Gunter), http://seclab.illinois.edu/
    14. Systems and Internet Infrastructure Security (SIIS), PSU, http://siis.cse.psu.edu/
    15. Network Security Lab, Columbia University, http://nsl.cs.columbia.edu/
    16. CENTER FOR INFORMATION AND COMPUTATION SECURITY (CICS), UCLA, http://www.cs.ucla.edu/security/
    17. Center for Wireless Information Network Studies, WPI (Prof. Kaveh Pahlavan), http://www.cwins.wpi.edu/
    18. Maryland Cybersecurity Center, UMD, http://www.cyber.umd.edu/faculty/index.html
    19. Center for Research on Computation and Society (CRCS), Harvard, http://crcs.seas.harvard.edu/
    20. Systems and networking group, UCSD, http://sysnet.sysnet.ucsd.edu/sysnet/
    21. Information Security Research Group, UCL, http://sec.cs.ucl.ac.uk/
    22. Center for Information Assurance and Security, UTexas, http://www.cias.utexas.edu/index.htm
    23. Johns Hopkins University Information Security Institute (JHUISI), JHU, http://web.jhu.edu/jhuisi/
    24. University of Oregon Network Security Research Lab, University of Oregon, http://netsec.cs.uoregon.edu/
    Back to Chakchai So-In's Home Page