4482 Intro - York UniversityEECS 3482 Intro to Com. Sec. EECS 4481 Com. Sec. Lab EECS 4480 Capstone Project Network Security & Forensics Computer Forensics EECS 4482 - Network Security

CSE 4482Network Security

Instructor: N. Vlajic, Fall 2019

4482 Intro

EECS 4482Sec. Management Asses. & Forens.

EECS 4482 - Network Security

• Shouldn’t this course have a different title ?!→ Computer Security Management:

Assessment and Forensics

Computer Security at LAS / York

EECS 3481Cryptography

EECS 3482Intro to

Com. Sec.

EECS 4481Com. Sec.

Lab

EECS 4480Capstone Project

Network Security & Forensics

Computer Forensics

EECS 4482 - Network Security

• Course Info→ Lecture Schedule: Mon, 16:00 – 17:30, BRG 313

Wed, 16:00 – 17:30, HNE 313

→ Office Hours: Thu, 12:00 – 14:00, BRG 313

→ Labs & Assignments: tentative dates posted on thecourse Web-site

→ Textbook: W. StallingsNetwork Security Essentials:Application & StandardsPearson, 2017, 6th edition

→ Recommended Reading:

https://theitgeekchronicles.files.wordpress.com/2012/05/scapyguide1.pdf

https://media.readthedocs.org/pdf/scapy/latest/scapy.pdf

EECS 4482 - Network Security• Topics Covered

→ IPv4 Security Assessment→ IPv6 Security Assessment→ Python & Scapy→ VPNs→ IPsec→ TCP Security Assessment→ SSL/TLS→ HTTPS→ Wireless Network Security→ Firewalls→ Intrusion Detection Systems (IDSs)→ Network Scanning & Analysis Tools→ Cloud Security→ Network Forensics Investigation Methodology & Tools

EECS 4482 - Network Security

• What this course is (and is NOT) about …→ todays computers (servers, desktops, laptops, …) are very

smart & capable→ however, stand-alone computers are not nearly as capable

and useful as when they are connected / networked → through networking computers can: exchange information/data combine their processing & memory capabilities

The whole is greater than the

sum of its parts!

stand-alonecomputers

Computer Security:

Malware (viruses, worms)

CryptographyAccess Control (passwords)

OS security

EECS 4482 - Network Security

• What this course is (and is NOT) about …→ the power of networking will be (is) especially evident in the

context of IoT

smart sensors

security cameras

baby monitors

smart locks

smart lighting

medical implants

self-driving cars

…

EECS 4482 - Network Security

• What this course is (and is NOT) about …→ What is required for 2 computers to be ‘networked’ (i.e.,

to be able to communicate with each other) ?? physical infrastructure (transmission medium, routers, …) protocols = defines rules & conventions for communication

between network devices

Hey, let us network!

Hi, how are you?

Good, and you?

This course is mostly about identifying & fixing security vulnerabilities in communication protocols and network infrastructure.

What you ideally need to know …

• What, really, is a protocol?→ protocol = communication language between peer entities→ packets = sentences

Protocol Syntax & Semantics Protocol Timing

• How many protocols are there?

What you ideally need to know …

• How many protocols are there?

What you ideally need to know …

What you ideally need to know …

What you ideally need to know …