Course Name:Computer Network Security

Course Code:S2293217

Semester: 5

Credit: 2

Program: Computer science

Course Module: Optional

Responsible: Jianrong Wang

E-mail: wjr@tju.edu.cn

Department: Tianjin International Engineering Institute

Time Allocation (1 credit hour = 45 minutes)

Course Description

The course is optional designed for Engineering Mater of Computer Science. In Network Information Age, but along with the advantage, information sharing also brings security problems. Therefore, computer network security has drawn lots of attention. The course will cover both computer system security and network security. Details about basic principles and security technologies of computer network will be introduced, including symmetric and asymmetric key cryptography technologies, data authentication, access control technology and safety detection technology. Besides, the course focuses on current hot topics such as security hole in the operating system, Zombie network, malicious software and digital rights management. Students will master the basic concepts of computer networks, especially Internet security, and understand the technique to design and maintenance a secure network after the course.

Prerequisite

• Basic programming knowledge: the ability to program with a programming language (C++, JavaScript, PHP, etc.)

• Knowledge about Computer Network: be familiar with network hierarchical structure and related protocols.

• Knowledge about Operating System: be familiar with OS structure and related concepts.

Course Objectives

The goal of the course is to inspire students to explore the field of computer network security, and let them be familiar with security attack and defense with computers. After this course, students should be able to:

• Master the basics of computer network security,

• Master the related protocols of computer network security, the ability to encryption and decryption, message authentication, etc,

• Analyze and evaluate the security of a system or software with tools,

• Perform common network security attacks and defences, for example, DNS attack, rootkits and Zombie network, and to

• Design and build secure systems of moderate complexity.

CourseSyllabus

• Introduction to computer security: basic concepts, threat models, security goals.

• Cryptography: encryption and decryption, message authentication, secure channels, cryptographic protocols and their integration into applications.

• Software security: secure software engineering, defensive programming, and buffer overflow.

• Language-based security: safety analysis, safe languages, and sandboxing techniques.

• Operating system security: memory protection, access control, authenticating users, security evaluation, digital rights management.

• Network security: firewalls, intrusion detection systems, DoS attacks and defences.

• Malicious code analysis and defence: worms, spyware, rootkits, botnets, etc., and defences against them.

• Web security: XSS attacks and defences, etc.

Textbooks & References

• Peter W. Singer and Allan Friedman.Cybersecurity and Cyberwar: What Everyone Needs to Know. 2014.

• Lance Spitzner, Honeypots.Tracking Hackers. 2003.

• Bruce Schneier, Secret and Lies.Digital Security in a Networked World. 2000.

• William Stallings and William Stallings.Cryptography and network security. 2006.

Capability Tasks

CT1: To know about the basics of computer network security.

CT2: To understanding principle of cryptography, and to be able to encrypt or decrypt the message and authenticate the message.

CT3: To analyze the security of a system with tools, and to perform common network security attack and defense.

CT4: To design and build a security system according to the actual network.

CS1: To master the basic theories of computer network security, and to know its development status and trends.

CS2: To master the core technologies of computer network security, and to be able to develop a safety system.

Achievements

• To know about the latest attacking mode and defence methods. - Level: N

• To understand the technical detail of algorithm about computer network security, and to be able to analyse and evaluate security of a system or software. - Level: A

• To understand the attack principles, and to be able to propose a security solution and implement it through team work for an actual application scenario. - Level: A

• To master working principle of computer network security, and to be able to analyse the working mode of a specific system. - Level: M

Students: Computer science,Year 3