Network Systems Security

CPSC 526 - Network Systems Security

Attacks on networked systems, tools and techniques for detection and protection against attacks including firewalls and intrusion detection and protection systems, authentication and identification in distributed systems, cryptographic protocols for IP networks, security protocols for emerging networks and technologies, privacy enhancing communication. Legal and ethical issues will be introduced.

The lectures for this course run concurrently with CPSC626. Graduate students in CPSC626 are expected to attend lectures, but are evaluated in a completely different way from students registered in CPSC526.

Course Policies

For the complete list of course policies, grading scheme, and tentative list of topics, please refer to the official course outline: http://www.cpsc.ucalgary.ca/custom/undergrad/outlines2015/f15/cpsc526and626_fall2015.pdf

Textbook

Network Security: Private Communication in a Public World, 2nd Edition by Charlie Kaufman, Radia Perlman, and Mike Speciner

A few supplemental textbooks (not required at all, just further reading or background for those interested)

Applied Cryptography: Protocols, Algorithms, and Source Code in C by Bruce Schneier
The Handbook of Applied Cryptography by Menezes, van Oorschot and Vanstone
Unix Network Programing by W. Richard Stevens et al. http://books.google.ca/books/about/UNIX_Network_Programming.html?id=ptSC4LpwGA0C&redir_esc=y
Interconnections: Bridges, Routers, Switches, and Internetworking Protocols, 2nd Edition http://www.informit.com/store/interconnections-bridges-routers-switches-and-internetworking-9780201634488

Grades

Assignments: 1000 points total (100%)
Two Homework assignments (300 points each) = 600 points
- HW1 (assigned 11 Sept; due 1 Oct; graded 10 Oct)
- HW2 (assigned 10 Nov; due 25 Nov; graded 5 Dec)
Two labs (250 points)
- EDURange Recon I + questionnaire (100pts)
- VPN Lab + SSH Key (150 pts)
150 "roving" points
- QoD (10 pts)
- PGP Key Party (40 pts)
- Essay (100 pts)
  - Surreptitiously Weakening Cryptographic Systems http://eprint.iacr.org/2015/097.pdf
  - A Research Agenda Acknowledging the Persistence of Passwords http://research.microsoft.com/apps/pubs/?id=154077
  - Lessons Learned in Implementing and Deploying Crypto Software http://www.usenix.org/events/sec02/full_papers/gutmann/gutmann.pdf
  - Some thoughts on security after ten years of qmail 1.0 http://cr.yp.to/qmail/qmailsec-20071101.pdf
  - Legal Issues Surrounding Monitoring During Network Research (Invited Paper) http://conferences.sigcomm.org/imc/2007/papers/imc152.pdf
  - Why Offensive Security Needs Engineering Textbooks: Or, How to Avoid a Replay of "Crypto Wars" in Security Research https://www.usenix.org/system/files/login/articles/02_bratus.pdf
  - Lawful Hacking: Using Existing Vulnerabilities for Wiretapping on the Internet http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2312107
  - Curbing the Market for Cyber Weapons http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2364658
  - If You're Typing The Letters A-E-S Into Your Code, You're Doing It Wrong http://pages.cpsc.ucalgary.ca/~locasto/teaching/2015/CPSC526/Winter/articles/Matasano.html

CPSC 626

Project: 1000 points total (100%)
http://pages.cpsc.ucalgary.ca/~locasto/teaching/2015/CPSC526/Fall/626/grad-projectF15.txt

Communication

We will not use D2L. Instead, we will use Piazza for class communication.

This term we will be using Piazza for class discussion. The system is highly catered to getting you help fast and efficiently from classmates, the TA, and myself. Rather than emailing questions to the teaching staff, I encourage you to post your questions on Piazza. If you have any problems or feedback for the developers, email team@piazza.com.

Find our class page at: https://piazza.com/ucalgary.ca/fall2015/cpsc526/home