JBake

Weekly Note 14 - Week 50

Wed, 4 Dec 2019 00:00:00 +0100

Lecture - Monday, December 9th.

16-19 in U170

The lecture is MONDAY - not tuesday

This is the last week of classes, and in this lecture we will wrap up everything.

We will start with covering WiFi security, which we will extend a bit beyond the book, which does not cover WPA2 in depth. We will also study the KRACK vulnerabilities which targets WIFI.

Then, we will take a look at a few tools and methods for penetration testing/ethical hacking and security monitoring. This will include tools for

Staying anonymous/hidden (Proxies, MAC address changer)
Password cracking
DoS options
Exploiting using Metaspoit
Security testing with Owasp Zap

Please consider if something could be improved in the course. This year, there is no official evaluation, but I’m always open to ideas and opinions, that can improve the experience. You are encouraged to email sugguestions to me.

If there is time left, we will do a bit more pen-testing (either the last assignment), or for those that have handed it in, a different application.

If you have a preferred timeslot or day for the exam, you can signup for this at the class. If you do not sign up, I will assign one of the days. The official list will come from the secretary through blackboard.

Tutorial session

Friday December 13th. 12-14 in U24 or 14-16 in U146

Preparation:

Watch the video from the KRACK attack website.

Prepare a list of 10-15 keywords for the exam question: Mobility, Wireless networks and Wireless security.

Select one of the topics from this list, and prepare to give a 10 min. presentation to the class on the topic:

Functionality and interfaces for the application layer of the TCP/IP model and the functionality of DNS
Functionality and interfaces for the transport layer of the TCP/IP model and the difference between UDP and TCP
Functionality and interfaces for the network layer of the TCP/IP model with focus on the data plane.
Functionality and interfaces for the network layer of the TCP/IP model with focus on the control plane.
Functionality and interfaces for the link layer of the TCP/IP model, including error detection and correction
Symmetric and public key crypography, Key distribution and User authentication
Security: Transport- and Network-layer security
Security: Firewalls, intrusion detection
Mobility, Wireless networks and Wireless security
Penetration Testing: Planning and Methods

In class:

Use the first part of class to work on this exercise and discuss the content of your keyword lists, and consider possible alternatives.

P24 - Streaming encryption, and IV

from Chapter 8 in the textbook.

Use the second part of the class to give and see a few presentations that you have prepared at home.

This is You that should make the presentations, the TA will not step in and do them for You!

Material (Slides, etc.)

Available later

Weekly Note 13 - Week 49

Fri, 29 Nov 2019 00:00:00 +0100

Lecture - Tuesday, December 3th.

16-19 in U55

The topic of this lecture is penetration testing. We will discuss how a penetration test is planned and executed. Some of the tools used will be discussed and demoed (and some will have to wait to next week).

The last assignment will also be introduced.

Tutorial session

Thursday December 6th. 12-14 in U24 or 14-16 in U146

Preparation:

Prepare a list of 10-15 keywords for the exam question: Penetration Testing: Planning and Methods.

Select one of the topics from this list that you have not chosen previously, and prepare to give a 10 min. presentation to the class on the topic:

Functionality and interfaces for the application layer of the TCP/IP model and the functionality of DNS
Functionality and interfaces for the transport layer of the TCP/IP model and the difference between UDP and TCP
Functionality and interfaces for the network layer of the TCP/IP model with focus on the data plane.
Functionality and interfaces for the network layer of the TCP/IP model with focus on the control plane.
Functionality and interfaces for the link layer of the TCP/IP model, including error detection and correction
Symmetric and public key crypography, Key distribution and User authentication
Security: Transport- and Network-layer security
Security: Firewalls, intrusion detection

In class:

Start discussing your keyword lists, and discuss ways to present it as an the exam topic.

Spend the remaining of the first part of the class to give and see a few presentations that you have prepared at home. This is You that should make the presentations, the TA will not step in and do them for You!

In the second half, use the time to complete the last assignment.

Material (Slides, etc.)

Slides for lecture 12

Weekly Note 12 - Week 48

Fri, 22 Nov 2019 00:00:00 +0100

Lecture - Tuesday, November 26th.

16-19 in U55

First, we will cover different types of firewalls and intrusion detection systems, this also includes mitigation/defence against DDoS.

Then we will cover the Owasp top 10 report, of the most serious problems in web-applications.

Finally, we will discus how the exam is handled, and how to prepare for this type of exam.

Tutorial session

Thursday November 28th. 8-10 in U24 or 10-12 in U146

Preparation:

Prepare a list of 10-15 keywords for the exam question: Security: Firewalls, intrusion detection.

Select one (or more) of the topics from this list, and prepare to give a 10 min. presentation to the class on the topic:

Functionality and interfaces for the application layer of the TCP/IP model and the functionality of DNS
Functionality and interfaces for the transport layer of the TCP/IP model and the difference between UDP and TCP
Functionality and interfaces for the network layer of the TCP/IP model with focus on the data plane.
Functionality and interfaces for the network layer of the TCP/IP model with focus on the control plane.
Functionality and interfaces for the link layer of the TCP/IP model, including error detection and correction
Symmetric and public key crypography, Key distribution and User authentication
Security: Transport- and Network-layer security

In class:

Use the first part of class to work on this exercise and discuss the content of your keyword lists, and consider possible alternatives.

P25 - Configuring ACL for a Firewall

from Chapter 8 in the textbook.

Use the second part of the class to give and see a few presentations that you have prepared at home.

This is You that should make the presentations, the TA will not step in and do them for You!

Material (Slides, etc.)

Weekly Note 11 - Week 47

Thu, 14 Nov 2019 00:00:00 +0100

Lecture - Tuesday, November 19th.

16-19 in U55

We will continue our study of security, turning our attention to security in the transport layer and in the network layer.

The main topics will be SSL/TLS and IPsec used for VPN connections.

We will also see an example on how to install am SSL/TLS certificate on a webserver, so it will use HTTPS.

Tutorial session

Thursday November 21th. 8-10 in U146 or 10-12 in U24

Preparation:

You should prepare these exercises for discussion from chapter 8 of the book:

P17 - PGP
P19 - Wireshark and SSL
P22 - IPsec

Prepare a list of 10-15 keywords for exam question number 7: Security: Transport- and Network-layer security.

In class:

Use the first part of class to work on this exercise

P9 - Diffie Helmann (if not finished before the break)
P18 - Authentication and confidentiality
P21 - Attacking link-state algorithm

from Chapter 8 in the textbook.

Use the second part of the class to discuss the content of your keyword lists, and consider possible alternatives, and all of the exercises prepared at home and in class.

Material (Slides, etc.)

Available later

Weekly Note 10 - Week 46

Sat, 9 Nov 2019 00:00:00 +0100

There will be no classes in week 46. I’m sorry for the inconvenience this may cause.

Currently the last week of classes will be week 50/last lecture will be December 11th.

See you in week 47 where we will take a look at SSL/TLS and IPsec!

Credit to https://xkcd.com

Weekly Note 9 - Week 45

Thu, 31 Oct 2019 00:00:00 +0100

Week 46 is without classes - enjoy your break

This gives extra time to work on assignment 8. See you in week 47

Both lecture and tutorial classes are cancelled in week 46 - even if the schedule at mitsdu says they are there. See the Course plan for more details on the rest of the lectures.

Lecture - Tuesday, November 5th.

16-19 in U23

We will begin our study of security, by defining some of the targets we wish to accomplice: Confidentiality, integrity, authentication etc. We will also survey the different types of problems we can encounter in computer security today.

Then we will study basic principles of chryptography, and how we can establish message integrity and use digital signatures.

With the machinery learned, we will study PGP for mail security, which provides a nice example on usage.

Tutorial session

Thursday November 7th. 10-12 in U24 or 14-16 in U146

Preparation:

You should prepare these exercises for discussion from chapter 8 of the book:

P2 - Known plaintext attack. Note 109 should be 10 to the power 9, i.e. 1000000000
P4 - Block cipher
P13 - Protecting Torrent Distribution Protocol
P16 - End-point authentication
P3 - Chosen plaintext attack
P1 - Caecar cipher (consider coding a small program, that can show the output of shifting 1-26 places).

Prepare a list of 10-15 keywords for exam question number 6: Symmetric and public key crypography, Key distribution and User authentication .

In class:

Use the first part of class to work on this exercise

P9 - Diffie Helmann

Discuss also how d) can be avoided.

from Chapter 8 in the textbook.

Use the second part of the class to discuss the content of your keyword lists, and consider possible alternatives, and all of the exercises prepared at home and in class.

Material (Slides, etc.)

Weekly Note 8 - Week 44

Sat, 26 Oct 2019 00:00:00 +0200

Lecture - Tuesday, October 30th.

16-19 in U55

After we finished the trip down the network stack last week we will take a look at mobility, wireless links and networks in this week.

We will start with looking at how a broadcast channel can be shared and multiple access coordinated.

We will then look at mobility, wireless links and their characterics, before going into details with IEEE 802.11 ("Wi-Fi") protocol.

Tutorial session

Thursday October 31st. 10-12 in U24 or 14-16 in U146

Preparation:

You should prepare these exercises for discussion from chapter 7 of the book:

P1 - CDMA
P3 - Wifi access to subnet
P5 - Wifi access
P6 - CSMA/CA

In class:

Use the first part of class to work on these exercises

P4 - CDMA coding
P7 - Wifi effectivity
P8 - Wifi effectivity
P2 - CDMA

from Chapter 7 in the textbook.

Use the second part of the class to discuss all of the exercises P1-P8.

Material (Slides, etc.)

Slides for lecture 8

Weekly Note 7 - Week 43

Thu, 10 Oct 2019 00:00:00 +0200

Week 42 is without classes - enjoy your break

And remember assignment 6 :)

Lecture - Tuesday, October 22nd.

16-19 in U55

We will then cover most of chapter 6 on the link layer, skipping 6.3.

The focus will be on Error detection and correction, link-layer adressing and ARP, and VLANs.

At the end of this, we have hopefully completed our journey down the protocol stack - and will do a "Putting-it-all-togeatger" trip requesting a web-page. :)

6.3 covers "Multiple access links and protocols", that is a nice basis for wifi. We will cover that in the following lecture.

Tutorial session

October 24th. 8-10 in U32 or October 10th. 14-16 in U24

Preparation:

You should prepare these exercises for discussion from chapter 6 of the book:

P5 - CRC
P28 - VLAN
P15 - Adressing, Subnets, ARP
P31 - Full protocol stack overview
P14 - ARP
P2 - Error detection and correction

Try also to make a list of 10-15 keywords for a 10 minute presentation with the topic: "Functionality and interfaces for the link layer of the TCP/IP model, including error detection and correction.".

In class:

Spend the first half discussing the exercises prepared at home.

The second part of the session, start by discussing the keyword list, then you will examine Ethernet and ARP using Wireshark. Instructions can be found in the Instructions menu → Wireshark Ethernet and ARP.

Material (Slides, etc.)

Slides for lecture 7

Weekly Note 6 - Week 41

Fri, 4 Oct 2019 00:00:00 +0200

Lecture - Tuesday, October 8th.

16-19 in U45

We will continue and conclude our treatment of the network layer. This week focusing on the control plane.

The primary focus will be types of routing algorithms, and routing in the internet: OSPF and BGP, but we will also cover ICMP, and look a bit on SDN.

The goal is to cover the entire chapter 5.

Tutorial session

October 10th. 10-12 in U32 or October 11th. 12-14 in U24

Preparation:

You should prepare these exercises for discussion from chapter 5 of the book:

P13 - BGP and AS-Path
P14 - Routing protocols
P20 - BGP and routing traffic
P9 - Poisoned reverse and count-to-infinity problem
P16 - BGP and ISP peering
P5 - Distance Vector Algorithm

Try also to make a list of 10-15 keywords for a 10 minute presentation with the topic: "Functionality and interfaces for the network layer of the TCP/IP model with focus on the control plane.".

In class:

Spend the first half discussing the exercises prepared at home.

The second part of the session, start by discussing the keyword list, then you will examine DHCP using Wireshark, Instructions can be found in the Instructions menu → Wireshark DHCP.

Material (Slides, etc.)

Slides for lecture 6

Weekly Note 5 - Week 40

Sat, 28 Sep 2019 00:00:00 +0200

Lecture - Tuesday, October 1st.

16-19 in U45

We will start our treatment of the network layer.

We will cover the data plane part of it. This includes an introduction to the network layer, studying whats inside a router, how it does the internal switching of datagrams, the IP protocol (IPv4 and IPv6), DHCP, addressing and Network Address Translation.

The goal is to cover the entire chapter 4 (it is half of the network layer, chapter 5 is also on the network layer)

I will also share and discus items from the mid-term evaluation.

Tutorial session

October 3rd. 14-16 in U24 or October 4th. 12-14 in U24

Preparation:

Try to answer these exercises from chapter 4 of the book:

P1 - forwarding table
P7 - Longest prefix matching and number of addresses
P8 - CIDR notation
P16 - NAT translation table
P10 - NAT and P2P
P14 - MTU and fragmentation
P2 - Switch fabric

Try also to make a list of 10-15 keywords for a 10 minute presentation with the topic: "Functionality and interfaces for the network layer of the TCP/IP model with focus on the data plane.".

In class:

Spend the first half discussing the exercises prepared at home.

The second part of the session, start by discussing the keyword list, then you will examine Network Address Translation (NAT) using Wireshark, Instructions can be found in the Instructions menu → Wireshark NAT.

Material (Slides, etc.)

Slides for lecture 5

Weekly Note 4 - Week 39

Fri, 20 Sep 2019 00:00:00 +0200

Lecture - Tuesday, September 24th.

16-19 in U23

This week, we will cover TCP in details.

We will also study the principles of conguestion control, and how TCP handles conguestion control.

In the end of the session, we will do the mid-term evaluation, evaluating how the course goes, and if anything can be improved.

Tutorial session

September 26th. 8-10 in U155 or 14-16 in U24

Preparation:

Try to answer these exercises from chapter 3 of the book:

P28 - Flow control
P36 - Duplicate acks
P37 - Comparing GBN, SR, TCP
P43 - Flow+Conguestion control
P26 - Large files and sequence numbers
P55 - End-point auth

Try also to make a list of 10-15 keywords for a 10 minute presentation with the topic: "Functionality and interfaces for the transport layer of the TCP/IP model and the difference between UDP and TCP".

In class:

Spend the first half discussing the exercises prepared at home.

The second part of the session, you will examine tcp, and some of the features in this protocol using Wireshark. Instructions can be found in the Instructions menu → Wireshark TCP

Material (Slides, etc.)

Slides for lecture 4

Weekly Note 3 - Week 38

Sat, 14 Sep 2019 00:00:00 +0200

Lecture - Tuesday, September 17th.

16-19 in U55 (Big auditorium time!)

We will start discussing CDN and streaming video, which we did not cover in lecture 2.

Then we will start the coverage of the transport layer, covering UDP, elaborating a bit on the services provided by the transport layer, multiplexing/demultiplexing and the principles of reliable data transfer.

This will include the two pipelining protocols Go-Back-N and Selective-Repeat for making RDT efficient.

Tutorial session

September 19th. 12-14 in U156

September 20th. 10-12 in U154

Preparation:

Try to answer these exercises from chapter 3 of the book:

P3 Checksums
P5 Checksum i UDP
P15 Window size cross country and utilization
P19 Go back N
P23 Go back N (performance if buffering)

And consider:

What are factors that can determine the window size in a pipelining protocol?
Describe good and bad properties of Go-Back-N and Selective Repeat respectively

In class:

Spend the first half discussing the exercises prepared at home, and the Socket exercises from last week (if you did not do it last week).

The second part of the session, you will work with DNS using Wireshark. Instructions can be found in the Instructions menu → Wireshark DNS

Material (Slides, etc.)

Slides for lecture 3

Weekly Note 2 - Week 37

Wed, 4 Sep 2019 00:00:00 +0200

Lecture - Tuesday, September 10th.

16-19 in U23

We will start treating the application layer of the network stack and principles of network applications.

The protocols we will study are HTTP (and HTTP/2), FTP, SMTP, and DNS.

We will also see how sockets can be used for network communication, and discuss Content Distribution Networks.

Tutorial session

September 13th. 10-12 in U154 or 12-14 in U154

Preparation:

If you did not finish installing wireshark on your computer, you should do this. Then you should try to solve these exercises:

In Java, using the Socket class create a port scanner, that on localhost scans the ports from 1-1024 and prints the open ports.
In Java, using the ServerSocket class, write a port scanner, that on localhost scans the ports from 1-1024 and prints the open ports.
Describe the difference between the two implementations you have just made, from a network point of view.
Using the TimeServer demoed in class (Code here: https://github.com/JacobAae/dm557-2017-socket-examples), write a client using DatagramSocket that can connect and print the time returned.

These resources can be useful:

Try also to make a list of 10-15 keywords for a 10 minute presentation with the topic: "Functionality and interfaces for the application layer of the TCP/IP model and the functionality of DNS".

In class:

Spend the first half on solving and discussing these exercises from chapter 2 of the book and your solution to the socket programming exercises:

P2
P6 (RFC 2616)
P10
P21
P25
P30

Discus the keyword list you prepared at home. There is not a single right answer, as you could plan many great presentations with different "red-threads".

The second part of the session, you will work on analyzing HTTP requests and responses using Wireshark. Instructions can be found in the Instructions menu → Wireshark HTTP

Material (Slides, etc.)

Slides for lecture 2

Weekly Note 1 - Week 36

Sat, 27 Jul 2019 00:00:00 +0200

Lecture - Tuesday, September 3rd.

16-19 in U23

We will start with an introduction to the course, and Jacob will give a short whoami intro, and present why this course is highly relevant in the IT landscape. Then we will discus the format of the lectures and tutorials, and expectations.

We will briefly study the history of computer networks, before we try to get an overview of the basic (and brief) structure of the internet, and consider some of the services that the internet provides to us, and setting up the first basic terminology for networks.

Tutorial session

September 5th. 8-10-12 in U154 OR 10-12-10 in U154

Preparation:

Try to answer these exercises from chapter 1 of the book:

In Class

You will spend half the session discussing the exercises prepared at home, and then try to solve this problem:

Suppose you would like to urgently deliver 300 terabytes of data from Boston to Los Angeles. You have available a 1 Gbps dedicated link for data transfer. Would you prefer to transmit the data via this link or instead use FedEx overnight delivery? Explain your answer.

The second half, you will install Wireshark, used for packet sniffing, and take a sneak peak. Instructions can be found in the Instructions menu → Wireshark Intro

JBake

Weekly Note 14 - Week 50

Lecture - Monday, December 9th.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 13 - Week 49

Lecture - Tuesday, December 3th.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 12 - Week 48

Lecture - Tuesday, November 26th.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 11 - Week 47

Lecture - Tuesday, November 19th.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 10 - Week 46

Weekly Note 9 - Week 45

Week 46 is without classes - enjoy your break

Lecture - Tuesday, November 5th.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 8 - Week 44

Lecture - Tuesday, October 30th.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 7 - Week 43

Week 42 is without classes - enjoy your break

Lecture - Tuesday, October 22nd.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 6 - Week 41

Lecture - Tuesday, October 8th.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 5 - Week 40

Lecture - Tuesday, October 1st.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 4 - Week 39

Lecture - Tuesday, September 24th.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 3 - Week 38

Lecture - Tuesday, September 17th.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 2 - Week 37

Lecture - Tuesday, September 10th.

Tutorial session

Recommended Reading

Material (Slides, etc.)

Weekly Note 1 - Week 36

Lecture - Tuesday, September 3rd.

Tutorial session

Recommended Reading

Material (Slides, etc.)