Teaching code

4S008904

Credits

6

Coordinatore

Massimo Merro

Language

Italian

Scientific Disciplinary Sector (SSD)

INF/01 - INFORMATICS

Moodle Seminars

The teaching is organized as follows:

Learning objectives

The course aims to present the main methodologies and technologies to ensure the security of computer networks and, more generally, distributed information systems. At the end of the course, the student must demonstrate to be able to know the main theoretical and applicative notions for the design, the practical implementation and the formal analysis of tools and protocols for the security of distributed networks and distributed information systems. This knowledge will allow the student to compare different techniques of network protection and choose between them the most appropriate according to the context of use and to make the most appropriate design choices when defining a new computer network. The student will then be able to continue his/her studies in the field of network security and distributed information system in autonomy, studying autonomously and presenting in clear way new vulnerabilities in computer networks and the related solutions adopted to mitigate their effects

Prerequisites and basic notions

Computer networks

Program

Frontal Teaching:

1) Introduction
- Cybersecurity, Information Security, and Network Security
- The OSI Security Architecture
- Cryptography

- Network Security

- Trust and Trustworthiness

- Standards


2) Symmetric encryption
- Symmetric Encryption Principles 

- Symmetric Block Encryption Algorithms
- Random and Pseudorandom Numbers
- Stream Ciphers and RC4
- Cipher Block Modes of Operation 


3) Public-Key Cryptography and Message Authentication
- Approaches to Message Authentication
- Secure Hash Functions 
- Message Authentication Codes
- Public-Key Cryptography Principles
- Public-Key Cryptography Algorithms
- Digital Signatures

4) Cryptographic Key Management and distribution
- Symmetric Key Distribution Using Symmetric Encryption
- Symmetric Key Distribution Using Asymmetric Encryption
- Distribution of Public Keys

- X.509 Certificates

- Public-Key Infrastructure

5) User Authentication

- Remote User-Authentication Principles
- Remote User-Authentication Using Symmetric Encryption
- Kerberos
- Remote User-Authentication Using Asymmetric Encryption
- Federated Identity Management

6) Transport-Level Security
- Web Security Considerations
- Transport Layer Security

- HTTPS

- Secure Shell (SSH)


7) Wireless Network Security
- Wireless Security
- Mobile Device Security
- Wireless Lan Overview
- IEEE 802.11i Wireless Lan Security


8) Electronic Mail Security
- Internet Mail Architecture
- Email Formats
- Email Threats and Comprehensive Email Security
- S/MIME
- DNSSEC
- DNS-Based Authentication of Named Entities
- Sender Policy Framework
- Domainkeys Identified Mail
- Domain-Based Message Authentication, Reporting, and Conformance

9) IP Security
- IP Security Overview
- IP Security Policy

- Encapsulating Security Payload

- Combining Security Associations

- Internet Key Exchange


10) Network Endpoint Security
- Firewalls
- Intrusion Detection Systems
- Malicious Software
- Distributed Denial of Service Attacks.

Bibliography

Didactic methods

Oral exam including discussion of a small network security project

Learning assessment procedures

Examination consists of:
- an oral examination on the topics dealt with during frontal lessons;
- a project on subject related to the lab.

Evaluation criteria

The evaluation will aim at determining the degree of knowledge and the ability to propose solutions in the context of network security

Criteria for the composition of the final grade

The final vote comes from the average of the evaluations obtained in the oral test and in the discussion of the project.

Exam language

Italiano