Network Security Design

Course outline and requirements for Advanced Network Security.

Confidentiality, integrity, availability, authenticity, passive and active attacks, and encryption basics.

Security policies, authentication, cryptography, and protection across application, transport, network, and link layers.

Course scope, security problems, attack types, research readings, and network defense concepts.

Protocol layering, the OSI model, communication rules, and network protocol fundamentals.

Encryption operations, shared and public keys, block and stream ciphers, and cryptographic security.

Block versus stream encryption, Feistel structures, DES, confusion, and diffusion.

Symmetric encryption after DES, including Triple DES and the Advanced Encryption Standard.

Eavesdropping risks, link versus end-to-end encryption, and encryption at different protocol layers.

Public-key distribution, trusted directories, authorities, and public-key certificates.

Message integrity, origin authentication, message authentication codes, and hash functions.

How previously captured messages are reused, and how nonces, timestamps, and sequence numbers establish freshness.

Ethernet addressing, MAC addresses, ARP, and local network communication.

IPSec and the use of network-layer protection to secure communications across applications.

Availability threats and the ways hostile network traffic disrupts services.

Web threats, confidentiality, integrity, authentication, and security mechanisms for web communications.

Application authentication and the Kerberos password authentication service.

Certificates that bind identities and keys, including authorization, delegation, and validity conditions.

Networking foundations and the context for studying network security.

TCP/IP components and protocols, inherent risks, ARP spoofing, traffic sniffing, and TCP denial of service.

Identity verification and identification, biometric methods, applications, and limitations.

Secure communication protocols and the principles underlying protected network channels.

Internet-layer security, secure channels, VPNs, and remote access.

Transport and application security for e-commerce and remote administration, compared with IPSec.

Mobile network architecture and network-access security in second- and third-generation cellular systems.

802.11 wireless networking, security history, and wireless vulnerabilities.

Security concepts and mechanisms for protecting electronic mail.

Firewall types, configuration, policy enforcement, limitations, and placement in the network.

Host and network intrusion detection, vulnerability assessment, honeypots, and security appliances.

Guest lecture covering computer crime, hacker attacks, passwords, and network, web, database, and distributed-system security.

Historical tutorial on resource exhaustion, denial-of-service techniques, attack tools, and defensive approaches.

Process migration, load sharing, communication performance, availability, and use of specialized computing resources.

E-commerce application architecture, transaction flow, web servers, operating systems, hardware, and operational requirements.

Hardware, backup systems, network interfaces, firewalls, networking, and cryptography for e-commerce.

Certificate revocation, revocation lists, webs of trust, depender graphs, and distribution of revocation notices.

Hiding messages within carriers such as images; history, applications, watermarking, and basic methods.

Symmetric and asymmetric encryption, one-way hashes, confidentiality, integrity, and encrypted e-mail. The original filename refers to “Plug and Protect”; the presentation itself covers encryption.

Secrecy, authentication, message integrity, encryption algorithms, keys, and symmetric versus asymmetric cryptography.

Identity technologies, one-time passwords, tokens, PPP, TACACS+, RADIUS, Kerberos, and security across TCP/IP layers.

Historical presentation on negligence, trade secrets, linking, defamation, workplace privacy, and related legal resources.

Multicast distribution, tree-based versus gossip-based approaches, push/pull methods, redundancy, and performance analysis. Despite its original filename, this file is a multicast presentation.

Publisher page for the networking security textbook, with book details and related information.

Archived external encryption reference. The site did not serve the page during verification.

Historical executable download. The file could not be located; its contents could not be verified.

Historical executable download. The file could not be located; its contents could not be verified.

Current online learning and technical-book access page, replacing the unavailable historical Safari/InformIT address.

External PDF formerly linked as cryptography slides. The published address now returns “not found.”