1. Laboratory Based Courses on Internet Security
Prabhaker Mateti
Wright State University
Dayton, OH 45435
NSF DUE

2. Goals Teach security improvement techniques
Explain how exploitable errors have been made in the development of software.
Raise the level of ethics awareness
Bring attention to legal issues

3. Term or Semester Course
Ten or 15 weeks
Lectures on topic one per week
Lectures on experiment one per week
Lab experiments one per week

4. Short Course
3-days, 18 hrs, 6 lectures
Five experiments

5. Currently Available Material
“There is an oceanic amount of material on network security available over the Internet.” A Web Page.
COAST
Ronald Rivest, theory.lcs.mit.edu/~rivest/crypto-security.html
Avi Rubin, …

6. Text Books on Security Many text books, > 100
Chapman and Zwicky 1995
Cheswick and Bellovin 1994
Cobb 1996
Garfinkel and Spafford 1996
Kaufman et al. 1995
Stein 1997
Stallings 2000

7. Table of Contents of a Lab Handout
Summary
Educational Objectives
Background Information
Pre-Lab and Suggested Preparation
Procedures
Appendix A: Acronyms
Appendix B: Further Reading Links
Notes to TAs
Procedures
Step 1, 2, …
Report on the Experiment
Demo
Achievement Test
Concluding Activities
Lab Courses on Internet Security/

8. Lab Experiments being Developed
Experience Serious Nuisance
Trojan Horses, Viruses and Worms
Experience Selected PC Viruses
Password Cracking
Privacy and Authentication of a User
Proper Conf of Security for Personal Machines
Security Fortification for Personal Machines
Lab Courses on Internet Security/

9. Lab Experiments being Developed
Hostile Applets in Java and ActiveX
Virtual Private Networks
Buffer Overflow and Other Bug Exploitation
Probing a Host for Weakness
Security Software
Setting Up a Linux PC as a Packet Filtering Router
Commercial Products
Lab Courses on Internet Security/

10. CEG 499: Internet Security
Computer System Security
TCP/IP exploits
Firewalls
Secure e-Commerce Transactions
Ethics and Legal Issues

11. Setting the Lab up Lab Operating Systems
Operating Systems and Internet Security
26 PC s (PIII 450MHz, 128 MB RAM, 13 GB HDD)
8 Fast Ethernet Switches
Operating Systems
Linux
Windows NT 4 sp 6
Windows 98 SR2

12. IP Filtering Router Firewall
All the lab PCs are on *.*
Internet connections are through the Firewall
IP masquerading

13. Security Software Sniffers Firewall kits
nmap, tcpdump, iptraf, and ntop

14. CEG 499: Internet Security/ System Security
Booting sequence
Passwords
User privileges
File Permissions

15. Setting the Lab up/Security Software
Secure Shell
Sniffing Programs
Firewall Kits