1. Laboratory Based Courses on Internet Security
Prabhaker Mateti
Wright State University
Dayton, OH 45435
NSF DUE

2. Goals Teach security improvement techniques
Explain how exploitable errors have been made in the development of software.
Raise the level of ethics awareness
Bring attention to legal issues

3. Term or Semester Course
Ten or 15 weeks
Lectures on topic one per week
Lectures on experiment one per week
Lab experiments one per week

4. Short Course
3-days, 18 hrs, 6 lectures
Five experiments

5. Currently Available Material
“There is an oceanic amount of material on network security available over the Internet.” A Web Page.
COAST
Ronald Rivest, theory.lcs.mit.edu/~rivest/crypto-security.html
Avi Rubin, …

6. Text Books on Security Many text books, > 100
Chapman and Zwicky 1995
Cheswick and Bellovin 1994
Cobb 1996
Garfinkel and Spafford 1996
Kaufman et al. 1995
Stein 1997
Stallings 2000

7. Lab Courses on Internet Security/ pMateti@cs.wright.edu
What We Are Developing
About 30 lectures, 75 minutes each
About 15 lab experiments, 2 hours each
A Support web site
Lab Courses on Internet Security/

8. Contents of a Lab Handout
Title
Summary
Educational Objectives
Background Information
Pre-Lab and Suggested Preparation
Procedures
Appendix A: Acronyms
Procedures
Step 1, 2, …
Report on the Experiment
Demo
Achievement Test
Concluding Activities
Notes to TAs
Appendix B: Further Reading Links
Lab Courses on Internet Security/

9. Lab Experiments being Developed
Experience Serious Nuisance
Trojan Horses, Viruses and Worms
Experience Selected PC Viruses
Password Cracking
Privacy and Authentication of a User
Proper Conf of Security for Personal Machines
Security Fortification for Personal Machines
Lab Courses on Internet Security/

10. Lab Experiments being Developed
Virtual Private Networks
Buffer Overflow and Other Bug Exploitation
Probing a Host for Weakness
Security Software Tools
Setting Up a Linux PC as a Packet Filtering Router
Hostile Applets in Java and ActiveX
Commercial Products
Lab Courses on Internet Security/

11. Setting the Lab up Lab Operating Systems
Operating Systems and Internet Security
26 PC s (PIII 450MHz, 128 MB RAM, 13 GB HDD)
8 Fast Ethernet Switches
Operating Systems
Linux
Windows NT 4 sp 6
Windows 98 SR2

12. IP Filtering Router Firewall
All the lab PCs are on *.*
Internet connections are through the Firewall
IP masquerading

13. CEG 499: Internet Security
Computer System Security
TCP/IP exploits
Firewalls
Secure e-Commerce Transactions
Ethics and Legal Issues

14. CEG 499: Internet Security/ System Security
Booting sequence
Passwords
User privileges
File Permissions

15. Setting the Lab up/Security Software
Secure Shell
Sniffing Programs
Firewall Kits

16. Lab Courses on Internet Security/ pMateti@cs.wright.edu
Current Status March 2000
Internet Security Lab
CEG 499 Internet Security (Winter 2000)
Short Course
Labs Developed
Support Web Site
Lab Courses on Internet Security/

17. Lab Courses on Internet Security/ pMateti@cs.wright.edu
Internet Security Lab
429 Russ Engineering Center, WSU
November 1999; In continuous use since
26 PCs in the lab for students' use, and one web server, one router + file server, and one PC for re-configuration experimentation.
Lab Courses on Internet Security/

18. Internet Security Lab contd
All the PCs are on a private LAN
One Fast Ethernet switch for connecting a group of 4 PCs.
Each PC is loaded with
Linux 2.2 kernel (Caldera OpenLinux 2.3)
Windows NT with service pack 6,
Windows 98.
The NT loader boot menu into one these OS.
Lab Courses on Internet Security/

19. CEG 499 Internet Security (Winter 2000)
Computer System Security (2 weeks)
TCP/IP exploits (2)
Firewalls (2)
Secure e-Commerce Trans. (2)
Ethics and Legal Issues (1)
Guest Lecture from Mead, Inc.
Lab Courses on Internet Security/

20. Short Courses Scheduled
NAECON
AFCEA INFOTEC backgrnd/ backgrnd.htm
Lab Courses on Internet Security/

21. Lab Courses on Internet Security/ pMateti@cs.wright.edu
Labs Developed
Will develop 15 lab experiments
Finished 5, need refinements
To Do: 10
Lab Courses on Internet Security/

22. Lab Courses on Internet Security/ pMateti@cs.wright.edu
Support Web Site
Notes to Instructors
Lab Maintenance
Collection of Tools (src)
Lecture Notes, and Slides
Lab Handouts
Lab Courses on Internet Security/

23. Lab Courses on Internet Security/ pMateti@cs.wright.edu
Lab Maintenance
Reload OS images periodically
Forgotten passwords, etc.
Lab Courses on Internet Security/

24. Lab Courses on Internet Security/ pMateti@cs.wright.edu
Links
CEG 499 Home Page
OSIS Lab Home Page
Support Web Site
Lab Courses on Internet Security/