190 likes | 226 Views
CSCD 434 Network Security Spring 2019. Lecture 1 Course Overview. Contact Information. Instructor Carol Taylor 309 CEB Phone: 509-359-2817 E-mail: ctaylor@ewu.edu Office hours: M, W, F 11 am – 12 pm Course Time Mon, Wed 9:00 – 9:50 am
E N D
CSCD 434 Network Security Spring 2019 Lecture 1 Course Overview
Contact Information • Instructor Carol Taylor 309 CEB Phone: 509-359-2817 E-mail: ctaylor@ewu.edu Office hours: M, W, F 11 am – 12 pm • Course Time Mon, Wed 9:00 – 9:50 am Room: CEB 105 Lecture and CEB 342 Lab
Course Information • Course number: CSCD 434 Network Security • Course Web Page http://penguin.ewu.edu/cscd434
Overview • Today’s Topics • What is network security and how does it fit within EWU curriculum? • Network Security fits within the broader topic of general security • Some expectations • Learning Objectives for this course • Pre-test of Network Security
Network Security Defined • Network Security • How would you define it? • Protection of networks and their services from unauthorized modification, destruction, or disclosure • Study of both attack and defense techniques that affect the network
Our Curriculum • CSCD 330 – Network programming • Basic networking course with an emphasis on programming • CSCD 433/533 – Advanced Networking • More depth, cover network principles, design • Cover other protocols, real-time, QOS • Some programming
Our Curriculum • CSCD 434 Network Security • Computer networks focus of both threats and defense. • Begin with coverage of Attacks and Attackers • What they typically do to gain access to computers on a network • Examine different phases of an attack • Learn tools and techniques attackers use • Try some out in the lab • Try to answer, Why do they attack?
Our Curriculum • CSCD434 continued … • Talk about Defense Mechanisms against attackers • Detection/Prevention – Network security policies • Authentication, users and machines • Firewalls and Intrusion Detection • Use of Cryptography as network defense • What is its real value? • Where it works and where it doesn’t work
General Computer Security • Where does network security fit within a security curriculum? • Introductory Security class, CSCD303 • Basics of computer security, code and hardware vulnerabilities, OS protection mechanisms, cryptography based protection, authentication
General Computer Security • CSCD496 - Computer or Digital Forensics • Capture data related to proof of electronic crimes • Recoverability of data from both host and network • CSCD437 - Secure Coding taught by Tom Capul • Learn how to avoid software vulnerabilities • Attacks that can take advantage of code vulnerabilities and how to create more secure programs http://penguin.ewu.edu/cscd437/
Network and General Security Overlap of Topics Cryptography Secure Coding General Security Network Security Forensics
Pre-requisite Knowledge • Pre-requisites • Network course • Should know basic TCP/IP networks • Knowledge of programming such as C, C++, C# or Java, Python or Pearl • Will review some networking concepts • Point you to some supplemental material on TCP/IP Networks to fill in the gaps
Student Learning Objectives • By end of this course you should • Understand threats to computer systems through the network • Understand and be able to set up defense mechanisms used to counteract threats • Understand role of cryptography in network defense • Know how to continue learning about network security beyond this class • Certifications, Journals, Web Sites
Expectations for You • Come to Class • Listen, learn and ask lots of questions • Download lecture notes • Do reading if assigned • There will be reading outside the book • Want a lot of in-class participation • Do the Labs
Expectations for You • Produce a project • Programming or experiment • Short write up of results • Presentation of your results Or • Create a research paper • Survey paper • And do a presentation of a topic
Project or Program • This will be a substantial part of your grade • And, you can create a group, 2-3 people • Groups need to outline who is doing which job • Work should reflect greater effort from a group
Conclusion • Interesting class, • increase everyone’s knowledge of network security • Security is Challenging Topic • Broad and changes constantly • Nothing really difficult, but is a large topic • Naturally Interdisciplinary • Extends beyond technical • Social and people-related issues • Policy and laws • We will cover some of this
The End • This week no Lab • Next Time • General Security Overview