CS 192 and CS 286 Network Security taught Spring 2008
As the semester progresses you can use the NetSecResources page to add your own links, comments, useful resources you find, articles, etc that you would like to share with the rest of the class. I will also add information to the page during the term.
News
May 15, 2008
All grades are complete. You can check your personal grade report by selecting the link in the below list with your name. It should bring up a page listing all the grades and submissions I have for you for the entire semester. It does NOT have your final course grade. That was submitted to Banner this evening and should be available through your GWU banner account soon. It does have comments about both your in-class paper presentation and final project as well as a few comments in special circumstances about other assignments. If you have any questions about what I wrote, or think there is any error, please let me know as soon as possible. List of FinalGradeSummary pages:
Have a great summer. I think you all did some really good work on the projects and I hope you thought the class was worthwhile.
May |
Final Project presentations will be May 8th from 7:40 - 9:40 pm. Make sure to upload your presentation materials and/or bring them on a laptop for class. You should upload your final reports, code and a copy of your presentation to the CourseProject page. |
April 2 |
Office hours cancelled today. I will be able to talk with you all tomorrow (thursday) |
March 12 |
Signup page for status reports is now available at CourseProject/StatusSchedule. |
Feb 28 |
First Midterm exam was emailed out to the class list at 10pm today (thursday) It is due by midnight on Wednesday March 5th. If you did not receive it make sure to email me immediately. |
Feb 20 |
Office hours today will be virtual as the weather is getting worse and it looks like the worst time will be during the evening rush hour. So I'll be online and you can reach me with email, IM chat through AIM (jrs3apple) or I can give you a call. |
Feb 6 |
The PaperPresentations page is now online so you can signup for which paper you would like to present. It also has details about exactly what you need to prepare. Also the midterm dates have been determined and are listed below in the exercises section. |
Jan 24 |
The GW email system is having some problems. One result is that our cs-netsec@hermes email list is taking 12+ hours to distribute an email. This problem started yesterday, so if you sent an email and have not seen a response this delay is the reason. I'll update this page when I hear that the problem is fixed, but until then this webpage will have the most recent information. |
Jan 18 |
The audio recording of the first lecture worked! |
Jan 17 |
First class is going to happen despite the snow and slush. It actually is mostly rain and slush here downtown, but I know it's much worse outside the city. I'll put the lecture slides and readings on this page after class and I'm going to make an attempt to record the lecture on audio for those who can't make it in. |
I've converted it to an official podcast format and added all of the lecture slides to make it an enhanced podcast that you can use to match up the slides with the lecture. You will probably want to view a full-resolution set of the slides as well as the podcast embedded ones are fairly small. Give it a try by downloading the file
Lectures
Date |
Topic |
Slides/Notes |
Podcast |
Readings to be done Before Class |
Jan. 17 |
Introduction and Security Vulnerabilities |
FIS Chapter 1, 5. Examples of CVE records for Wireshark that I showed in class are attachment:Ethereal_CVEList2007.pdf and attachment:Ethereal_CVE_2006-5740.pdf and the SANS top menaces for 2008 list can be downloaded attachment:SANS_TopTenCyberSecurityMenaces2008.pdf. |
||
Jan. 24 |
IP Protocol and Routing Security |
Lecture 2 Podcast Note this podcast does not have the synchronized slides embedded in it. |
FIS Chapter 2. Reflections on Trusting Trust by Ken Thompson (ACM Copy HTML copy). Should you run an Open WiFi Node by Bruce Schneier, Ethics of stealing a Wifi connection by Eric Bangeman of Ars Technica and discussion on other blogs that are linked from Bruce's post. |
|
Jan. 31 |
DNS and BGP Security |
|
Read RFC 3833 on DNS Threats and FIS Chapter 6 |
|
Feb. 7 |
Network Scanning and Fingerprinting |
Lecture 4 Podcast. This week it does have the slides and seems to have come out pretty well. |
Read (actually skim as it is really long) OS Detection with Nmap and the p0f readme file |
|
Feb 14 |
Web Security |
Online references |
||
Feb 21 |
Firewalls |
FIS chapter 9 and 10 |
||
Feb 28 |
Authentication |
FIS Chapter 7 and PUIS Chapters 4, 14, 19 |
||
Mar 6 |
Worms and IDS |
FIS and Papers |
||
Mar 13 |
DDoS and Anonymity |
FIS and The Zombie Roundup: Understanding, Detecting, and Disrupting Botnets Analyzing Distributed Denial of Service Tools: the Shaft Case by Sven Dietrich, Neil Long and David Dittrich. |
||
Mar 27 |
Anonymity and Wireless Link Security |
FIS and Papers |
||
April 3 |
Link level protection IPSec |
FIS |
||
April 10 |
Midterm Exam In Class |
None |
None |
N/A |
April 17 |
IPSec IKE and 802.11i Authentication |
FIS |
||
April 24 |
Internet Scale Monitoring and Attacks |
No Podcast as recording failed. |
FIS |
Current Exercises
Type |
Assign Date |
Due Date |
Information |
Homework 1 |
Jan 17 |
Jan. 23 Jan. 24 |
HomeworkOne. Note submissions must be using the class website. See assignment and HomeworkSubmission for instructions. |
Homework 2 |
Jan 24 |
Feb 1 Feb 3 midnight |
HomeworkTwo. You will submit on the class website. |
Project |
Jan 24 |
Feb, Mar, Apr, May |
CourseProject has the main information about the project |
Paper Presentations |
Jan 24 |
Starting Feb 14 |
Add papers that look interesting to the InterestingPapers page. Sign up for your presentation date and choice of paper at PaperPresentations. |
Homework 3 |
Feb 7 |
Feb 14 |
|
Project Design |
Jan 24 |
Feb 14 6pm |
Initial project design uploaded to CourseProject page |
Homework 4 |
Feb 14 |
Feb 21 |
|
Homework 5 - Not Graded |
Feb 21 |
Feb 28 |
HomeworkFive (PDF). Note this is homework is not graded and you are allowed to discuss it with other students in the class (although you will get the most out of it if you try to do the problems yourself first). |
First Midterm |
Feb 28 |
Mar 5 |
This will be a take home midterm handed out after class on the 28th and due (electronically) by a time on March 5th. |
Project Status |
Jan 24 |
Mar 10 - 14 |
Status review conference with Professor. Will be scheduled on the CourseProject/StatusSchedule page. |
Homework 6 |
Mar 27 |
April 10 |
|
Second Midterm |
Apr 10 |
Apr 10 |
This will be an IN-Class midterm during class on April 10rd. It will cover all material so far in the class. A summary of the chapters, papers and topics covered so far is available as Midterm Topics (PDF). |
Project Final Presentations |
Jan 24 |
May 8th evening |
Project presentations and demos to the class and submission of final report. |
All homework submissions, unless otherwise specified, should be made by creating new wiki pages or links to documents from your personal homework submission page. This page must be linked from the official HomeworkSubmission page that I created. You can see an example page at HomeworkSubmission/JonathanStanton.
Informational Resources
Two useful programs for generating PDF's from word and other docs are DoPDF and CutePDF.
Class Logistics
The GeneralCourseDescription describes the course and gives details from the syllabus.
Graded and submitted homework along with the average grades for each assignment can be found at HomeworkSubmitted.
Teams
The student teams for the projects will be listed on the ClassTeams page.
Office Hours
Jonathan Stanton |
jstanton at gwu.edu |
Wednesday 5-7pm and Thursday 10am - noon AC 720E |
202-994-9741 |
Wiki Membership
You should create a wiki account by selecting Login link in the upper right corner and entering your full first and last name in wiki format. This means the name should have no spaces or strange characters and each word must be capitalized. For example my name is JonathanStanton . If your name usually has a hyphen in it such as combined last name, please remove the hyphen and include all of the components of your name as capitalized words. It will make all of the automated parts of the web site work easily for you.
Then make sure you are in the ClassGroup list of current class members. That allows you to edit the course pages. Note, I have to add you by hand to the ClassGroup page, so you will not immeidately appear. I try to check the new users and add them twice a day at the beginning of the semester, so you want to create your account a few days before you need to submit your homework. If you cannot access the group page or are not on the list and it has been more then 24 hours, let Dr. Stanton know.
Email List
You can subscribe to the class e-mail list by sending a message to listserv@hermes.gwu.edu The email should contain only the following body
subscribe cs-netsec "Your Name Here"
If you want to change any listserv settings (such as digesting messages or getting a copy of your messages you send) you should can find instructions in the listserv users guide
How to use this site
A Wiki is a collaborative site, anyone can contribute and share:
Edit any page by pressing Edit at the top or the bottom of the page
Create a link to another page with joined capitalized words (like WikiSandBox) or with ["quoted words in brackets"]
- Search for page titles or text within pages using the search box at the top of any page
See HelpForBeginners to get you going, HelpContents for all help pages.