Laboratory Based Courses on Internet Security Prabhaker Mateti Wright State University Dayton, OH 45435 NSF DUE-9951380

Goals Teach security improvement techniques Explain how exploitable errors have been made in the development of software. Raise the level of ethics awareness Bring attention to legal issues

Term or Semester Course Ten or 15 weeks Lectures on topic one per week Lectures on experiment one per week Lab experiments one per week

Short Course 3-days, 18 hrs, 6 lectures Five experiments

Currently Available Material “There is an oceanic amount of material on network security available over the Internet.” -- A Web Page. COAST http://www.cerias.purdue.edu/coast/ Ronald Rivest, theory.lcs.mit.edu/~rivest/crypto-security.html Avi Rubin, www.cs.nyu.edu/~rubin/courses.html …

Text Books on Security Many text books, > 100 Chapman and Zwicky 1995 Cheswick and Bellovin 1994 Cobb 1996 Garfinkel and Spafford 1996 Kaufman et al. 1995 Stein 1997 Stallings 2000

Table of Contents of a Lab Handout Summary Educational Objectives Background Information Pre-Lab and Suggested Preparation Procedures Appendix A: Acronyms Appendix B: Further Reading Links Notes to TAs Procedures Step 1, 2, … Report on the Experiment Demo Achievement Test Concluding Activities Lab Courses on Internet Security/ pMateti@cs.wright.edu

Lab Experiments being Developed Experience Serious Nuisance Trojan Horses, Viruses and Worms Experience Selected PC Viruses Password Cracking Privacy and Authentication of a User Proper Conf of Security for Personal Machines Security Fortification for Personal Machines Lab Courses on Internet Security/ pMateti@cs.wright.edu

Lab Experiments being Developed Hostile Applets in Java and ActiveX Virtual Private Networks Buffer Overflow and Other Bug Exploitation Probing a Host for Weakness Security Software Setting Up a Linux PC as a Packet Filtering Router Commercial Products Lab Courses on Internet Security/ pMateti@cs.wright.edu

CEG 499: Internet Security Computer System Security TCP/IP exploits Firewalls Secure e-Commerce Transactions Ethics and Legal Issues

Setting the Lab up Lab Operating Systems Operating Systems and Internet Security 26 PC s (PIII 450MHz, 128 MB RAM, 13 GB HDD) 8 Fast Ethernet Switches Operating Systems Linux 2.2.10 Windows NT 4 sp 6 Windows 98 SR2

IP Filtering Router Firewall All the lab PCs are on 192.168.*.* Internet connections are through the Firewall IP masquerading

Security Software Sniffers Firewall kits nmap, tcpdump, iptraf, and ntop

CEG 499: Internet Security/ System Security Booting sequence Passwords User privileges File Permissions

Setting the Lab up/Security Software Secure Shell Sniffing Programs Firewall Kits