322 376: Information and Communication Technology Security (Fall 2017)


Course Description:
Introduction to computer security and information and communication technology, encryption techniques, introduction to number theory, public key algorithm, key management, hash function, digital signature and authentication protocol, electronic mail security, Internet Protocol (IP) security (IPsec), web security, virus, worm, firewall, information technology security management, computer security law.

Prerequisite: Basic Knowledge of Computer Network; Operating System; Computer Architecture; Database

Instructor: Chakchai So-In, Ph.D., chakso AT kku.ac.th
Office: SC 6706
Office Hours: Monday 03.00pm to 04.00pm/ Tuesday 09.00am to 10.00am (or email me for appointment)
Class homepage: http://csperson.kku.ac.th/chakchai/322376_Fall17/
CNAP CCNA Security material: Cisco Network Academy CCNA Security
Netacad: Cisco Netacad
Teaching Assistant:
  • Phet Aimtongkham phet AT phet.in.th, Sunday 05.00pm to 06.00pm @ANT Lab level 2
  • Comdet Phaudphut listzone AT hotmail.com, Sunday 05.00pm to 06.00pm @ANT Lab level 2

    • Location:
    Section I+II: - the class meets on Wednesday at room SC8305 from 01.00pm to 03.00pm for lecture.
    - Labs: on Wednesday at room 6204C from 03.00pm to 05.00pm (Sec I)
    - Labs: on Wednesday at room 6204C from 05.00pm to 07.00pm (Sec II)
    Section III+IV:- the class meets on Tuesday at room SC8405 from 01.00pm to 03.00pm for lecture.
    - Labs: on Tuesday at room 6204C from 03.00pm to 05.00pm (Sec III)
    - Labs: on Tuesday at room 6204C from 05.00pm to 07.00pm (Sec IV)
    Facebook Group: Facebook Group
    Class Email: cs322376 AT gmail.com
    Textbook
    The main textbooks for the course are
    1.Computer and Network Security (Thai Edition) by Chakchai So-In, 2011-2017.
    2.¤ÙèÁ×ÍàÃÕ¹áÅÐãªé§Ò¹ Network Security Lab ©ºÑºãªé§Ò¹¨ÃÔ§ by Chakchai So-In et al., 2017.

    Supplementary
    1. ¤ÙèÁ×ÍàÃÕ¹áÅÐãªé§Ò¹ Computer Network Lab ©ºÑºãªé§Ò¹¨ÃÔ§ by Chakchai So-In et al., 2017.
    2. Principles of Information Security by Michael E. Whitman and Herbert J. Mattord, 2011.
    3. CCNA Security Course Booklet Version 1.1 by Cisco Systems, 2012.
    4. Cryptography and Network Security: Principles and Practice by William Stallings, 2010
    5. Network Security: Private Communication in a Public World by Charlie Kaufman, Radia Perlman, and Mike Specimner, 2002
    6. Law (ICT) Thailand

    Interesting Computer and Network Security Material
    1. Master in Security 3rd edition (Thai) by Jatuchai Pangjun, 2017
    2. ºÃÔËÒèѴ¡Òà Networking ´éÇ Windows 7 by ¾ÔÈÒÅ ¾Ô·ÂÒ¸ØÃÇÔÇѲ¹ì, 2012
    3. ¤ÑÁÀÕÃì Ubuntu Linux Server àÅèÁ 1 by ºÑ³±Ôµ ¨ÒÁÃÀÙµÔ, 2012
    4. ¤ÑÁÀÕÃì Ubuntu Linux Server àÅèÁ 2 by ºÑ³±Ôµ ¨ÒÁÃÀÙµÔ, 2012
    5. ¤ÑÁÀÕÃì Ubuntu Linux Server àÅèÁ 3 by ºÑ³±Ôµ ¨ÒÁÃÀÙµÔ, 2012
    6. µÔ´µÑé§Ãкºà¤Ã×Í¢èÒ Linux Server ÀÒ¤»¯ÔºÑµÔ by ¾ÔÈÒÅ ¾Ô·ÂÒ¸ØÃÇÔÇѲ¹ì, 2012
    7. Network and Computer Security Specialist #1, #2, #3 (Thai) by Minister of ICT, Thailand
    8.     Hands-on Ethical Hacking and Network Defense by Michael T. Simpson, Kent Backman, and James E. Corley, 2017
    9. CEH Certified Ethical Hacker All-in-One Exam Guide by Matt Walker, 2011
    10. CEH Certified Ethical Hacker Study Guide by Kimberly Graves, 2010
    11. Applied Cryptography: Protocols, Algorithms, and Source Code in C by Bruce Scheier, 1996
    12. Network Security Essentials: Applications and Standards by William Stalling, 2010
    13. Hacking Exposed: Network Security Secrets and Solutions by Stuart McClure, Joel Scambray, and George Kurtz, 2009
    14. Network Security Architectures by Sean Convery, 2010
    15. CISSP Certified Information Systems Security Professional STUDY GUIDE by SYBEX, 2010

    Other good books are
    Slides from Prof. Raj Jain, Network Security Slides
    Most importantly, please READ all Computer and Network Security Wiki related topics.
    Network Programming (Bee)
    UNIX Tutorial for Beginners Tutorial@virginia.edu
    Example Toos/Testbed (Networking/Security/Mobile and Wireless Technology)
    Click Here to see a list of testbed/tools
    Project (Testbed) (Class in 2017)
    Project (Class in 2015)
    Project (Class in 2014)
    Project (Class in 2013)
    Project (Class in 2012)
    Project (Class in 2011)
    News
    Lecture Schedule: (Tentative Subject to Change)
    ClassDayDateTopic
    1Monday31/07/2017Course Overview
    2Monday07/08/2017Need for Security
    3Monday14/08/2017Risk Analysis
    4Monday21/08/2017Basic Encryption Techniques
    5Monday28/08/2017Application Security
    6Monday04/09/2017(Cont.)
    7Monday11/09/2017Malicious Software
    8Monday18/09/2017Security Topic Selection Proposal (PPT) + Review for Midterm + Dhamma #1 + Dhamma #2 + Dhamma #3 + Encoragement1 + Encoragement2 + Encoragement3
    9Monday25/09/2017Mid-Term Exam (week 25/09-29/09) = Sunday 24/09 at 01.00pm - 04.00pm
    10Monday02/10/2017IDS/IPS + VPN + IPSec
    11Monday09/10/2017Firewall + Authentication/Authorization/Accounting
    12Monday16/10/2017Software/Hardware Security + Block/Stream Ciphers
    Monday23/10/2017No class
    13Monday30/10/2017Public Key Infrastructure
    14Monday06/11/2017(Cont.) + Hashing Techniques
    15Monday13/11/2017Ethic + Computer Crime + IT Law
    16Monday20/11/2017Review for Finalterm + Final Security Tool/App Presentation PPT + Demo + .Doc + Poster + Video (youtube) + Code/Configuration/Testbed
    17Monday27/11/2017Final Exam (week 27/11-18/12) = Friday 08/12 at 01.00pm - 04.00pm
    Note: For Section I+II; date+1 say Monday 01/09 = Tuesday 02/09
    Homework/LabHW Assignments (Fall 2017 schedule): (Subject to Change)
    Ten or eleven homeworks will be assigned (as CCNA security Chapter Online Exam) throughout the course (a whole week). Click here https://www.netacad.com.
    Ten or eleven Lab Homeworks will be assigned (at the end of lab chapter) throughout the course (a whole week). Click here https://serazu.com/product/view.html?id=704.
    Note: Some of the questions will be used as QUIZ during the lecture.

    Submission:
    All assignment should be turned via Google Drive = 322376_Fall17. Late lab homework will be assessed a 30% penalty.
    Each pair-homework should include title prefix = "GroupID_SubGroupID_ID_HWID" such that ID is your Group/Groupd_SubGroup/HW number.
    Each pair-lab should include title prefix = "GroupID_SubGroupID_ID_LabID" such that ID is your Group/Groupd_SubGroup/Lab number.
    Each pair-lab homework should include title prefix = "GroupID_SubGroupID_ID_LabHWID" such that ID is your Group/Groupd_SubGroup/Lab number.
    Note: For homework and lab assignment; you MUST include the cover letter with students' signature OTHERWISE they WILL NOT be graded.
    Lab Schedule: (Tentative Subject to Change)
    LabDescriptionOut DateDue Date
    #1No Class (check equipment)31/07/201707/08/2017
    #2Lab1: Install Virtual Machine + Windows OS + Basic Security (Chapter 1) + User Account Managment + AntiVirus (Chapter 2)07/08/201714/08/2017
    #3Lab2: Shared Files + Netcut + Introduction to Personal Firewall (Chapter 4)14/08/201721/08/2017
    #4Lab3: Basic Encryption/Decryption (Chapter 12)21/08/201728/08/2017
    #5Lab4: Network Service Security (telnet/ftp/www) + Wireshark (Chapter 3)28/08/201704/09/2017
    #6Lab5: Network Managenment Tools (Chapter 5)04/09/201711/09/2017
    #7Lab6: Malwares and Attacks (Chapter 9)11/09/201718/09/2017
    #8Midterm Lab Exam (allow 1 Textbook)18/09/201725/10/2017
    #9Midterm Lecture Exam (allow 1 A4)25/09/201702/10/2017
    #10Lab7: IDS (Chapter 7)02/10/201709/10/2017
    #11Lab8: IPSec + VPN + Email Security (Chapter 6)09/10/201716/10/2017
    #12Lab9: Firewall + Proxy + NAT (Chapter 8)16/10/201723/10/2017
    No Class23/10/201730/10/2017
    #13Lab10: Radius + Syslog Server + Backup (Chapter 10)30/10/201706/11/2017
    #14Lab11: Set up Script + Stenography (Chapter 11)06/11/201713/11/2017
    #15Lab12: Encryption/Decryption + Hashing (Chapter 13)13/11/201720/11/2017
    #16Final Lab Exam (allow 1 Textbook)20/11/201727/11/2017
    #17Final Lecture Exam (allow 1 A4)27/11/201718/12/2017
    Academic Integrity
    Students at Khon Khan University are engaged in the first step for their professional career with the highest standards. Please follow the academic integrity guideline at Cheating and Plagiarism [@CMU]. All these rules are enforced for the entire course.
    Security Tools/Apps - Group of 4 up to 6 students
    Security Tool
    ONLY hands-on security tools on topic of your choice
    The final outcome MUST be something VISUAL= Computer/Network/Information/Internet/ Security Tools
    There is about 20 mins demo + Document (setting + demo)
    Tool Ideas: http://sectools.org/?page=1

    Main Project (Project I)
    Project Ideas:
  • Ideas at Stanford.edu
  • Ideas at Berkeley.edu
  • Ideas at MIT.edu
  • Ideas at DotCrime
  • Ideas at Sunysb.edu
  • Ideas at Berkeley.edu
  • Ideas at Udel.edu
  • Ideas at Fsu.edu
  • Ideas at Upenn.edu

    • In this semester, we focus on Mobile and Wireless Network Security including sensor network security; however, we do not limit on these.
    Cisco Netrider Contest (Networking Competition)
    Network Security Contest
    Click Here

    Project Milestone

    Description

    Completion Date

    #1Security Topic Selection Proposal + 10 mins Presentation (topic/list of students + 2 related work + what is it? + example = 5-7 pages)18/09/2017
    #2Security Topic Tool/App Submission + 20 mins Presentation + .Doc + Poster + PPT + Video (youtube) + Code + Demo20/11/2017

    Note: These are group projects BUT grading individually *write who do what in what%?*
    Grading: (tentative)
    Mid-Term Exam20%
    Final Exam25%
    Homework + Lab + LabHW + Quiz + Class participation25% - 30%
    Midterm + Final Lab Exams10% - 15%
    Security Tools/App15% - 20% (grading individually)

    Note that students are allowed to bring only "ONE" piece of A4 paper in each exam with additional non-memorized calculator
    The final exam material will be after the mid-term; however, all related contents will be also covered.
    The exam includes 1. True/False (+1, -1, and 0), 2. Numerical and Analysis, and 3. Fill in the blank.
    The final grade will be curved based on the overall performance of the whole class (probablistic clear cut-off point).
    Note: Extra Credits +2.5 to 5% 1st round competition; +5 to 10% Final round competition; Published Paper/NSC/Network Security Contest/CISSP Certification/CCNA or CCIE Security Certification/Imagine Cup/Samart etc. **>1% for taking a network security contest exam
    Other related computer and network security research links
    1. CCSS Center for Computer Systems Security, University of Southern California, http://ccss.usc.edu/
    2. UW CSE Systems, Networking, and Security Research, University of Washington, http://www.cs.washington.edu/research/systems.intro.html
    3. Cyber Security, Virginia Tech, http://www.cyber.vt.edu/research
    4. The Computer Security Group, UCSB, http://seclab.cs.ucsb.edu/
    5. Security Research Lab, UC Berkeley, http://security.cs.berkeley.edu/
    6. IBM Security and Privacy, IBM, http://researcher.ibm.com/view_project.php?id=151
    7. CyLab, CMU, http://www.cylab.cmu.edu/
    8. Computer Security Division, NIST, http://csrc.nist.gov/
    9. Networking and Security Research Center, PSU, http://nsrc.cse.psu.edu/
    10. Security Group @CA, University of Cambridge, http://www.cl.cam.ac.uk/research/security/
    11. Stanford Security Laboratory, Stanford University, http://seclab.stanford.edu/
    12. Network Operations and Internet Security Lab, GATECH (Prof. Nick Feamster), http://www.gtnoise.net/
    13. Illinois Security Lab, UIUC (Dr. Carl A. Gunter), http://seclab.illinois.edu/
    14. Systems and Internet Infrastructure Security (SIIS), PSU, http://siis.cse.psu.edu/
    15. Network Security Lab, Columbia University, http://nsl.cs.columbia.edu/
    16. CENTER FOR INFORMATION AND COMPUTATION SECURITY (CICS), UCLA, http://www.cs.ucla.edu/security/
    17. Center for Wireless Information Network Studies, WPI (Prof. Kaveh Pahlavan), http://www.cwins.wpi.edu/
    18. Maryland Cybersecurity Center, UMD, http://www.cyber.umd.edu/faculty/index.html
    19. Center for Research on Computation and Society (CRCS), Harvard, http://crcs.seas.harvard.edu/
    20. Systems and networking group, UCSD, http://sysnet.sysnet.ucsd.edu/sysnet/
    21. Information Security Research Group, UCL, http://sec.cs.ucl.ac.uk/
    22. Center for Information Assurance and Security, UTexas, http://www.cias.utexas.edu/index.htm
    23. Johns Hopkins University Information Security Institute (JHUISI), JHU, http://web.jhu.edu/jhuisi/
    24. University of Oregon Network Security Research Lab, University of Oregon, http://netsec.cs.uoregon.edu/
    Back to Chakchai So-In's Home Page