This lecture is held as a cooperation between the Secure Systems Lab at the Automation Systems Group (183/1) and the Information and Software Engineering Group (188/1)
Internet security has become part of everyday life where security problems impact practical aspects of our lives. Even though there is a considerable corpus of knowledge about tools and techniques to protect networks, information about what are the actual vulnerabilities and how they are exploited is not generally available. This situation hampers the effectiveness of security research and practice. Understanding the details of network attacks is a prerequisite for the design and implementation of secure systems.
This course presents the principal protocols and applications that are used in the Internet today, discussing in detail the related vulnerabilities and how they are exploited. For each vulnerability, possible protection and detection techniques are examined. The course includes a number of practical lab assignments where participants are required to apply their knowledge as well as a discussion of the current research in the field. Students will learn how the security of networks can be violated and how such attacks can be detected and prevented.
The course aims to make the students "security aware" and gain a basic understanding about security issues. For students who are interested in advanced security topics and practical assignments, we offer the /course/inetsec2 class in the winter semester.
Weekly, Thursday 12:00-13:45 sharp
Preliminary meeting (Vorbesprechung): Wednesday, March 2nd 2016, 14:00, different room: FH HS 1
Regular, weekly lecture: Thursdays, starting March 10th 2016, FH HS 6
Students will "need" to solve a set of practical challenges (assignments) in the lab part of the course. The practical part of the course aims to prepare the students for more
advanced topics and programming done in the /course/inetsec2 course.
"Stuff" to hack, crack, explore and learn
Lab start: 2017-03-23
During the InetSec course, we will announce a "challenge" here every couple of weeks that you can solve. These challenges aim to allow you to gain some basic practical experience in the penetration testing and the security analysis of software and applications.
We have planned 6 challenges that deal with topics such as common security tools, web vulnerabilities, code cracking and stack-based buffer overflows. The challenges are directly related to the concepts discussed in the lecture part of the course.
In order to successfully pass the InetSec course, you have to have at least 50% on the challenges and 50% on the written exam. Challenges are worth 20% each, and if you manage to solve all 6 Challenges you get an additional 10% on the last one (amounting to a total of 110%). Challenges and Exam Results are weighted 1/2 + 1/2 for the final grade.
The challenges in the course are not necessarily difficult (for people who can program and who have basic Web, networking and software knowledge), but may require you to do some research on the Internet and read some documentation. Of course, you also need some patience.
By the way, we are aware that the InetSec environment is not highly secure. It's a time issue ;-) So we trust you that you will not try to break or hack the system. That is not a challenge. Remember that you are the good guy/gal. If we notice that you are trying to crack us, there will be consequences.
Good luck and happy debugging
About 20 questions, 75 minutes time, no course material allowed.