MSc: Advanced Security - Revision history

R.sirgalina at 08:56, 29 August 2022

2022-08-29T08:56:06Z

R.sirgalina: /* Prerequisites */

2022-07-13T06:38:28Z

Prerequisites

← Older revision		Revision as of 06:38, 13 July 2022
Line 24:		Line 24:
	* Security of Systems and Networks		* Security of Systems and Networks
	* Essential skills		* Essential skills
−

	== Course Objectives Based on Bloom’s Taxonomy ==		== Course Objectives Based on Bloom’s Taxonomy ==

R.sirgalina: /* What is the purpose of this course? */

2022-07-13T06:38:19Z

What is the purpose of this course?

← Older revision		Revision as of 06:38, 13 July 2022
Line 18:		Line 18:

	In this course, server-based and application-based web attacks are taught. We begin by exploring advanced techniques and attacks to which all modern-day complex applications may be vulnerable to. We will learn about new web frameworks and web back-ends, then explore encryption as it relates to web applications, digging deep into practical cryptography used by the web, including techniques to identify the type of encryption in use within the application and methods for exploiting or abusing it. In this course, we will also focus on wireless security such as Bluetooth and WiFi and will dive deeper into the security mechanisms used in the modern-day technologies. Furthermore, we will look into assembly language, assemblers and debuggers that will help us to assess and protect networks and applications. Other important topics in advanced security include Web Application Firewall (WAF) and web vulnerability scanners. Software security is another exciting topic that will be covered in detail in AS. It is worth mentioning that AS is a defensive course where the emphasis will be put on the defensive mechanisms.		In this course, server-based and application-based web attacks are taught. We begin by exploring advanced techniques and attacks to which all modern-day complex applications may be vulnerable to. We will learn about new web frameworks and web back-ends, then explore encryption as it relates to web applications, digging deep into practical cryptography used by the web, including techniques to identify the type of encryption in use within the application and methods for exploiting or abusing it. In this course, we will also focus on wireless security such as Bluetooth and WiFi and will dive deeper into the security mechanisms used in the modern-day technologies. Furthermore, we will look into assembly language, assemblers and debuggers that will help us to assess and protect networks and applications. Other important topics in advanced security include Web Application Firewall (WAF) and web vulnerability scanners. Software security is another exciting topic that will be covered in detail in AS. It is worth mentioning that AS is a defensive course where the emphasis will be put on the defensive mechanisms.
−

	== Prerequisites ==		== Prerequisites ==

M.petrishchev at 08:04, 26 April 2022

2022-04-26T08:04:58Z

← Older revision		Revision as of 08:04, 26 April 2022
Line 27:		Line 27:


−	=== Course Objectives Based on Bloom’s Taxonomy ===	+	== Course Objectives Based on Bloom’s Taxonomy ==

−	=== - What should a student remember at the end of the course? ===	+	=== What should a student remember at the end of the course? ===

	By the end of the course, the students should be able to recognize and define		By the end of the course, the students should be able to recognize and define
Line 42:		Line 42:
	* Assembly language programming, assemblers, and low-level program analysis		* Assembly language programming, assemblers, and low-level program analysis

−	=== - What should a student be able to understand at the end of the course? ===	+	=== What should a student be able to understand at the end of the course? ===

	By the end of the course, the students should be able to describe and explain (with examples)		By the end of the course, the students should be able to describe and explain (with examples)
Line 53:		Line 53:
	* Software security		* Software security

−	=== - What should a student be able to apply at the end of the course? ===	+	=== What should a student be able to apply at the end of the course? ===

	By the end of the course, the students should be able to apply		By the end of the course, the students should be able to apply

M.petrishchev: M.petrishchev moved page MSc:Advanced Security to MSc: Advanced Security

2022-04-15T08:38:29Z

M.petrishchev moved page MSc:Advanced Security to MSc: Advanced Security

← Older revision	Revision as of 08:38, 15 April 2022
(No difference)

M.petrishchev at 06:45, 14 April 2022

2022-04-14T06:45:24Z

← Older revision		Revision as of 06:45, 14 April 2022
Line 18:		Line 18:

	In this course, server-based and application-based web attacks are taught. We begin by exploring advanced techniques and attacks to which all modern-day complex applications may be vulnerable to. We will learn about new web frameworks and web back-ends, then explore encryption as it relates to web applications, digging deep into practical cryptography used by the web, including techniques to identify the type of encryption in use within the application and methods for exploiting or abusing it. In this course, we will also focus on wireless security such as Bluetooth and WiFi and will dive deeper into the security mechanisms used in the modern-day technologies. Furthermore, we will look into assembly language, assemblers and debuggers that will help us to assess and protect networks and applications. Other important topics in advanced security include Web Application Firewall (WAF) and web vulnerability scanners. Software security is another exciting topic that will be covered in detail in AS. It is worth mentioning that AS is a defensive course where the emphasis will be put on the defensive mechanisms.		In this course, server-based and application-based web attacks are taught. We begin by exploring advanced techniques and attacks to which all modern-day complex applications may be vulnerable to. We will learn about new web frameworks and web back-ends, then explore encryption as it relates to web applications, digging deep into practical cryptography used by the web, including techniques to identify the type of encryption in use within the application and methods for exploiting or abusing it. In this course, we will also focus on wireless security such as Bluetooth and WiFi and will dive deeper into the security mechanisms used in the modern-day technologies. Furthermore, we will look into assembly language, assemblers and debuggers that will help us to assess and protect networks and applications. Other important topics in advanced security include Web Application Firewall (WAF) and web vulnerability scanners. Software security is another exciting topic that will be covered in detail in AS. It is worth mentioning that AS is a defensive course where the emphasis will be put on the defensive mechanisms.
		+
		+
		+	== Prerequisites ==
		+
		+	* The course has been designed to be self-included as much as possible. The successful completion will depend on prerequisite courses such as
		+	* Security of Systems and Networks
		+	* Essential skills
		+

	=== Course Objectives Based on Bloom’s Taxonomy ===		=== Course Objectives Based on Bloom’s Taxonomy ===

M.petrishchev: M.petrishchev moved page MSc:AdvancedSecurity.S22 to MSc:Advanced Security

2022-04-10T12:35:19Z

M.petrishchev moved page MSc:AdvancedSecurity.S22 to MSc:Advanced Security

← Older revision	Revision as of 12:35, 10 April 2022
(No difference)

I.konyukhov: I.konyukhov moved page MSc:AdvancedSecurity to MSc:AdvancedSecurity.S22

2021-11-14T17:21:46Z

I.konyukhov moved page MSc:AdvancedSecurity to MSc:AdvancedSecurity.S22

← Older revision	Revision as of 17:21, 14 November 2021
(No difference)

10.90.136.11 at 14:56, 13 August 2021

2021-08-13T14:56:09Z

← Older revision		Revision as of 14:56, 13 August 2021
Line 10:		Line 10:
	* Wireless network security		* Wireless network security
	* Software security		* Software security
		⚫	* Web application security
		+	* OWASP
		+	* Firewall (web application)
		+	* Assemblers and debuggers for low-level security

	=== What is the purpose of this course? ===		=== What is the purpose of this course? ===

−	In this course, server based and application based web attacks are ~~thought in a simulated/test environment~~. We begin by exploring advanced techniques and attacks to which all modern-day complex applications may be vulnerable. ~~We’ll~~ learn about new web frameworks and web ~~backends~~, then explore encryption as it relates to web applications, digging deep into practical cryptography used by the web, including techniques to identify the type of encryption in use within the application and methods for exploiting or abusing it.	+	In this course, server-based and application-based web attacks are taught. We begin by exploring advanced techniques and attacks to which all modern-day complex applications may be vulnerable to. We will learn about new web frameworks and web back-ends, then explore encryption as it relates to web applications, digging deep into practical cryptography used by the web, including techniques to identify the type of encryption in use within the application and methods for exploiting or abusing it. In this course, we will also focus on wireless security such as Bluetooth and WiFi and will dive deeper into the security mechanisms used in the modern-day technologies. Furthermore, we will look into assembly language, assemblers and debuggers that will help us to assess and protect networks and applications. Other important topics in advanced security include Web Application Firewall (WAF) and web vulnerability scanners. Software security is another exciting topic that will be covered in detail in AS. It is worth mentioning that AS is a defensive course where the emphasis will be put on the defensive mechanisms.

	=== Course Objectives Based on Bloom’s Taxonomy ===		=== Course Objectives Based on Bloom’s Taxonomy ===
Line 27:		Line 31:
	* Software security		* Software security
	* Network security		* Network security
		+	* Web application security
		+	* Assembly language programming, assemblers, and low-level program analysis

	=== - What should a student be able to understand at the end of the course? ===		=== - What should a student be able to understand at the end of the course? ===
Line 33:		Line 39:

	* Web vulnerabilities		* Web vulnerabilities
−	* WPA and WEP definition and differences 8	+	* WPA and WEP definition and differences
		+	* Web application firewall
	* Use of OWASP		* Use of OWASP
		+	* Understanding of RF and Bluetooth security
	* Software security		* Software security

Line 99:		Line 107:

	* Michael Sikorksi and Andrew Honig, ''<span>Practical Malware Analysis by, 1nd Edition, Kindle Edition</span>''		* Michael Sikorksi and Andrew Honig, ''<span>Practical Malware Analysis by, 1nd Edition, Kindle Edition</span>''
		+	* Online resources provided either in slides or on moodle

	== Course Sections ==		== Course Sections ==
Line 111:		Line 120:
	\|-		\|-
	\|align="center"\| 1		\|align="center"\| 1
−	\| Bluetooth security	+	\| Bluetooth and hardware security
−	\|align="center"\| 12	+	\|align="center"\| 8
	\|-		\|-
	\|align="center"\| 2		\|align="center"\| 2
−	\| Wifi security	+	\| Wireless and Wifi security
	\|align="center"\| 12		\|align="center"\| 12
	\|-		\|-
	\|align="center"\| 3		\|align="center"\| 3
−	\| Web security	+	\| Web application, vulnerability, firewalls, and software security
−	\|align="center"\| 12	+	\|align="center"\| 16
	\|-		\|-
	\|align="center"\| 4		\|align="center"\| 4
	\| Network security		\| Network security
−	\|align="center"\| 12	+	\|align="center"\| 8
	\|}		\|}

Line 179:		Line 188:
	=== Section title: ===		=== Section title: ===

−	Wifi security	+	Wireless and Wifi security

	=== Topics covered in this section: ===		=== Topics covered in this section: ===
Line 186:		Line 195:
	* DoS		* DoS
	* WEP / WPA / RSN		* WEP / WPA / RSN
		+	* RADIUS, EduRoam, and other current security standards in WiFi

	=== What forms of evaluation were used to test students’ performance in this section? ===		=== What forms of evaluation were used to test students’ performance in this section? ===
Line 210:		Line 220:
	# TKIP?		# TKIP?
	# AES-CCMP?		# AES-CCMP?
		+	# RADIUS and other authentication issues in WiFi

	=== Typical questions for seminar classes (labs) within this section ===		=== Typical questions for seminar classes (labs) within this section ===
Line 227:		Line 238:
	=== Section title: ===		=== Section title: ===

		+	Web (application) security, Web vulnerability scanners, and Web Application Firewall (WAF)
⚫	Web security

	=== Topics covered in this section: ===		=== Topics covered in this section: ===

−	* Security related web technologies.	+	* Security related to web technologies.
	* Same Origin Policy.		* Same Origin Policy.
	* Web Attacker Model		* Web Attacker Model
		+	* Web vulnerability scanners
		+	* Web Application Firewall

	=== What forms of evaluation were used to test students’ performance in this section? ===		=== What forms of evaluation were used to test students’ performance in this section? ===
Line 261:		Line 274:

	# Vulnerability analysis and exploitation for a given web application.		# Vulnerability analysis and exploitation for a given web application.
		+	# What are the important aspects of web vulnerability scanners?
−	# Write and deploy a WAF rules to mitigate a ~~spicific~~ web attack.	+	# Write and deploy a WAF rules to mitigate a specific web attack.

	=== Test questions for final assessment in this section ===		=== Test questions for final assessment in this section ===
Line 300:		Line 314:
	=== Typical questions for ongoing performance evaluation within this section ===		=== Typical questions for ongoing performance evaluation within this section ===

		+	# How VPN improves network security and in which scenarios??
−	# What is VPN?
		+	# What are the pros and cons of IPsec? And are there any alternatives to IPSes?
−	# IPsec?
		+	# How Nmap is used in penetration testing and what are the ethical concerns?
−	# Nmap?

	=== Typical questions for seminar classes (labs) within this section ===		=== Typical questions for seminar classes (labs) within this section ===

10.90.136.11: Created page with "= Advanced security = * '''Course name:''' Advanced Security * '''Course number:''' == Course characteristics == === Key concepts of the class ===..."

2021-07-30T11:06:26Z

Created page with "= Advanced security = * '''Course name:''' Advanced Security * '''Course number:''' == Course characteristics == === Key concepts of the class ===..."

New page

= Advanced security =

* '''Course name:''' Advanced Security
* '''Course number:'''

== Course characteristics ==

=== Key concepts of the class ===

* Wireless network security
* Software security

=== What is the purpose of this course? ===

In this course, server based and application based web attacks are thought in a simulated/test environment. We begin by exploring advanced techniques and attacks to which all modern-day complex applications may be vulnerable. We’ll learn about new web frameworks and web backends, then explore encryption as it relates to web applications, digging deep into practical cryptography used by the web, including techniques to identify the type of encryption in use within the application and methods for exploiting or abusing it.

=== Course Objectives Based on Bloom’s Taxonomy ===

=== - What should a student remember at the end of the course? ===

By the end of the course, the students should be able to recognize and define

* RF and Bluetooth security
* Database security/Wifi security
* Web vulnerabilities
* API security
* Software security
* Network security

=== - What should a student be able to understand at the end of the course? ===

By the end of the course, the students should be able to describe and explain (with examples)

* Web vulnerabilities
* WPA and WEP definition and differences 8
* Use of OWASP
* Software security

=== - What should a student be able to apply at the end of the course? ===

By the end of the course, the students should be able to apply

* Track application security against known standard OWASP and SANS categories
* To perform Bluetooth sniffer test.
* WPA implementation
* Testing security features within applications

=== Course evaluation ===

{|
|+ Course grade breakdown
!
!
!align="center"| '''Proposed points'''
|-
| Labs/seminar classes
| 20
|align="center"| 50
|-
| Interim performance assessment
| 30
|align="center"| 0
|-
| Exams
| 50
|align="center"| 50
|}

If necessary, please indicate freely your course’s features in terms of students’ performance assessment: None

=== Grades range ===

{|
|+ Course grading range
!
!
!align="center"| '''Proposed range'''
|-
| A. Excellent
| 90-100
|align="center"|
|-
| B. Good
| 75-89
|align="center"|
|-
| C. Satisfactory
| 60-74
|align="center"|
|-
| D. Poor
| 0-59
|align="center"|
|}

If necessary, please indicate freely your course’s grading features: The semester starts with the default range as proposed in the Table [[#tab:MLCourseGradingRange|[tab:MLCourseGradingRange]]], but it may change slightly (usually reduced) depending on how the semester progresses.

=== Resources and reference material ===

* Michael Sikorksi and Andrew Honig, ''Practical Malware Analysis by, 1nd Edition, Kindle Edition''

== Course Sections ==

The main sections of the course and approximate hour distribution between them is as follows:

{|
|+ Course Sections
!align="center"| '''Section'''
! '''Section Title'''
!align="center"| '''Teaching Hours'''
|-
|align="center"| 1
| Bluetooth security
|align="center"| 12
|-
|align="center"| 2
| Wifi security
|align="center"| 12
|-
|align="center"| 3
| Web security
|align="center"| 12
|-
|align="center"| 4
| Network security
|align="center"| 12
|}

=== Section 1 ===

=== Section title: ===

Bluetooth security

=== Topics covered in this section: ===

* Bluetooth standard
* Bluetooth applications
* Bluetooth security

=== What forms of evaluation were used to test students’ performance in this section? ===

<div class="tabular">

|a|c| & '''Yes/No''' 
Development of individual parts of software product code & 1 
Homework and group projects & 1 
Midterm evaluation & 1 
Testing (written or computer based) & 1 
Reports & 0 
Essays & 0 
Oral polls & 0 
Discussions & 1 

</div>
=== Typical questions for ongoing performance evaluation within this section ===

# Explain an ad hoc networking
# Explain frequency hoping
# Establishing Piconets example
# What is sniff mode?

=== Typical questions for seminar classes (labs) within this section ===

# What are possible security flaws for common applications of the bluetooth technology?
# What approaches are used to increase radio channel security and throughput?
# How radio waves are propagated through environment?

=== Test questions for final assessment in this section ===

# How radio waves are propagated through environment?
# What is park mode?
# How Service Discovery Protocol works?

=== Section 2 ===

=== Section title: ===

Wifi security

=== Topics covered in this section: ===

* Eavesdropping
* DoS
* WEP / WPA / RSN

=== What forms of evaluation were used to test students’ performance in this section? ===

<div class="tabular">

|a|c| & '''Yes/No''' 
Development of individual parts of software product code & 1 
Homework and group projects & 1 
Midterm evaluation & 1 
Testing (written or computer based) & 1 
Reports & 0 
Essays & 0 
Oral polls & 0 
Discussions & 1 

</div>
=== Typical questions for ongoing performance evaluation within this section ===

# Define WEP issues!
# Describe active attack.
# TKIP?
# AES-CCMP?

=== Typical questions for seminar classes (labs) within this section ===

# Handoff-iapp (802.11f)
# Pre-auth (802.11i)
# EduRoam

=== Test questions for final assessment in this section ===

# EduRoam?
# Explain TLS handshake.
# Differences between WEP and WPA?

=== Section 3 ===

=== Section title: ===

Web security

=== Topics covered in this section: ===

* Security related web technologies.
* Same Origin Policy.
* Web Attacker Model

=== What forms of evaluation were used to test students’ performance in this section? ===

<div class="tabular">

|a|c| & '''Yes/No''' 
Development of individual parts of software product code & 1 
Homework and group projects & 1 
Midterm evaluation & 1 
Testing (written or computer based) & 1 
Reports & 0 
Essays & 0 
Oral polls & 0 
Discussions & 1 

</div>
=== Typical questions for ongoing performance evaluation within this section ===

# What is Same Origin Policy?
# To which attack does SOP mitigate?
# How the Document object model could be used for an attacker to manipulate the web browser data?

=== Typical questions for seminar classes (labs) within this section ===

# Vulnerability analysis and exploitation for a given web application.
# Write and deploy a WAF rules to mitigate a spicific web attack.

=== Test questions for final assessment in this section ===

# Vulnerability analysis and exploitation for a given web application, explain.
# How the Document object model could be used for an attacker to manipulate the web browser data?

=== Section 4 ===

=== Section title: ===

Network security

=== Topics covered in this section: ===

* Network security policies and practices
* Nmap
* VPN
* IPsec

=== What forms of evaluation were used to test students’ performance in this section? ===

<div class="tabular">

|a|c| & '''Yes/No''' 
Development of individual parts of software product code & 1 
Homework and group projects & 1 
Midterm evaluation & 1 
Testing (written or computer based) & 1 
Reports & 0 
Essays & 0 
Oral polls & 0 
Discussions & 1 

</div>
=== Typical questions for ongoing performance evaluation within this section ===

# What is VPN?
# IPsec?
# Nmap?

=== Typical questions for seminar classes (labs) within this section ===

# Exploit the difference between VPN and sock5.
# Exploit IPsec effects on the performance of a networking device.
# Why does nmap produce false-positive when scanning a windows host?
# Can you improve nmap scanning technique? Elaborate!

=== Test questions for final assessment in this section ===

# What are the difference between VPN and sock5
# Does IPsec effects the performance of a networking device?
# What does nmap produce when scanning a windows host?
# Can you improve the scanning technique?