ISA 666: Internet Security Protocol

---

Instructor

Mohamed Sharif, PhD.
E-mail: msherif@gmu.edu
Home: 703.437.1556

Mobile: 301.674.0973

---

Teaching Assistant:

---

Course Description:

The objective of this course to is provide comprehensive introduction to the security problems in the Internet, and the principles, techniques and their applications in building Internet security protocols. In addition, we will examine existing Internet security techniques and protocols and discuss about open problems in Internet security.  Topics include secret key and public key cryptography, Hash algorithms, basic number theory, authentication, steganography/information hiding, IPSEC/VPN, IPSEC key exchange, SSL/TLS, firewall, intrusion tracing and response, worms and virus.

---

Course Prerequisites

· INFS 612 or equivalent

· INFS 601 or equivalent

---

Course Material

• Course Text (required) 1 : Network Security, Private Communication in a Public World 2nd Edition by C. Kaufman, R. Perlman and M. Speciner.
• Course Text (optional) 2 : Corporate Computer and Network Security by R. Panko
• Alternative Reference 1: Network Security Essentials 2nd Edition by W. Stallings.
• Alternative Reference 2: Cryptography and Network Security 2nd Edition by W. Stallings
• Alternative Reference 3: Applied Cryptography 2nd Edition by B. Schneier
• Alternative Reference 4: Handbook of Applied Cryptography by A. Menezes, P. van Oorschot and S. Vanstone.
• Alternative Reference 5: Designing Network Security by M. Kaeo – Cisco Press
• Alternative Reference 6: Internet & TCP/IP Network Security by U. Pabrai and V. Gurani.
• Alternative Reference 7: Fundamentals of Computer Security Technology by E. Amoroso
• Alternative Reference 8: Building Internet Firewalls by D. Chapman and E. Zwicky
• Alternative Reference 9: Firewalls and Internet Security by W. Cheswick and S. Bellovin
• Alternative Reference 10: The CERT Guide to System and Network Security Practices by J. Allen
• Alternative Reference 11: WWW.Security by R. MacGregor, A. Aresi and A. Siegert
• Alternative Reference 12: Inside Internet Security by J. Crume
• Alternative Reference 13: Secure Commerce on the Internet by V. Ahuja
• Some helpful Links: Material available at the Companion site by Stallings.

---

Grading policy

• Weights:, Project 30%, Two midterm Exams 30%, Final exam 40%.
• No exam make up will be given
• Late Submissions: Discouraged but allowed under exceptional circumstances with prior approval of the instructor.
• Incompletes: No Incompletes will be given. Except extreme case
• Honor Code Violations: All violators will be reported under all circumstances, and results in a course grade of F, in addition to any other penalties imposed by the university and/or the ISE department.
• Two students submitting a common or significantly similar copy of homework is a honor code violation.

---

Course Administration

• Class Meetings: Monday 07:20 – 10:00 PM in Loudoun 1 RM 203
• Instructor Office Hours: Monday 05:30 – 07:00 PM Rm ???? or by appointement
• Examinations: All Examinations are in class, individual (no collaborations), closed book, neighbor and notes.

---

Announcements

---

Additional Handout

· Protocol Model

· FTP

· DNS Overview

· Socket

· ASCII

· Transport Protocol Ports

· Internetworking Product

·

· Voice Network Overview

---

Approximate Course Schedule

Date	Topic	Readings	Giving Out	Due in Class
Week 1 Jan 22	Internet Security Overview	Lecture 1	Project
Week 2 Jan 29	Internet Layer Protocol Review	Lecture 2
Week 3 Feb 05	Attack Types & Methods	Lecture 3
Week 4 Feb 12	Cryptography	Lecture 4
Week 5 Feb 19	Access Control & Authentication	Lecture 5		Abstract/Proposal
Week 6 Feb 26	Certificate Authority & Key Distribution Center	Lecture 6
Week 7 Mar 05	MidTerm
Week 8 Mar 12	Spring Break (No Class)
Week 9 Mar 19	Application Layer Security	Lecture 7		Progress Report
Week 10 Mar 26	Application Layer Security & Transport layer Security	Lecture 7 & 8
Week 11 Apr 02	Transport layer Security & Network Layer Security	Lecture 8 & 9
Week 12 Apr 09	Firewalls & Intrusion Detection	Lecture 10
Week 13 Apr 16	Rootkits Overview Project	Lecture 11
Week 14 Apr 23	Trust Computing Based	Lecture 12		Project
Week 15 Apr 30	Presentation Final
Week 16 Apr 7	Final