Internet security has become part of everyday life where security problems impact practical aspects of our lives. Even though there is a considerable corpus of knowledge about tools and techniques to protect networks, information about what are the actual vulnerabilities and how they are exploited is not generally available. This situation hampers the effectiveness of security research and practice. Understanding the details of network attacks is a prerequisite for the design and implementation of secure systems.
This course presents the principal protocols and applications that are used in the Internet today, discussing in detail the related vulnerabilities and how they are exploited. For each vulnerability, possible protection and detection techniques are examined. The course includes a number of practical lab assignments where participants are required to apply their knowledge as well as a discussion of the current research in the field. Students will learn how the security of networks can be violated and how such attacks can be detected and prevented.
The course aims to make the students "security aware" and gain a basic understanding about security issues. For students who are interested in advanced security topics and practical assignments, we offer the Advanced Internet Security class in the winter term.
This lecture is held as a cooperation between the Secure Systems Lab at the Automation Systems Group (183/1) and the Information and Software Engineering Group (188/1)
We will announce a challenge every couple of weeks that will be open for 13 days for you to solve.
These challenges shall give you some basic hands-on experience in penetration testing and security analysis of software and applications.
We have planned 6 challenges that deal with the lecture's topics and are directly related to the concepts discussed in the lecture part of the course.
The challenges are not necessarily difficult, but may require you to do some research on the Internet and read some documentation. Of course, you also need some patience.
By the way, we are aware that the InetSec environment is not highly secure. It's a time issue ;-) So we trust you that
you will not try to break or hack the system. That is not a challenge. Remember that you are the good guy/gal.
We will not tolerate any attacks against our infrastructure.
At the end of the semester. Registration via TISS.
75 minutes time, no course material allowed.
The grade you get is best described with the following "python" code:
examPT = your_latest_exam_score_percent*100 challPT = min(num_of_challenges_you_solved*20, 110) gradePT = (challPT+examPT)/2 if examPT <= 50 or challPT <= 50 or gradePT <= 50: return "5" elif gradePT <= 63: return "4" elif gradePT <= 75: return "3" elif gradePT <= 88: return "2" else: return "1"
If you have questions regarding the lab challenges, please use the TISS Forum to exchange yourself with other students.
Our tutor is reading it on a daily basis and usually quick to answer with help. Please refrain from posting (partial) solutions, as you will spoil the fun for others.
If you think, you need help beyond that, send a mail to firstname.lastname@example.org