Network Security — Lecture Collection

Course outline and requirements for the historical network-security class. Use it to orient your study of the associated lectures, projects, and reference material.

Course outline and requirements for Advanced Network Security. Provides a guide to course study and supporting material.

Confidentiality, integrity, availability, authenticity, passive and active attacks, and encryption basics. Establishes the core security objectives used throughout the collection.

Security policies, authentication, cryptography, and protection across application, transport, network, and link layers. Connects technology decisions with the information and resources an organization needs to protect.

Course scope, security problems, attack types, research readings, and network defense concepts. Introduces the learning goals and the connection between security foundations and research topics.

Protocol layering, the OSI model, communication rules, and network protocol fundamentals. Explains the communication structures that later security mechanisms must protect.

Encryption operations, shared and public keys, block and stream ciphers, and cryptographic security. Provides a foundation for understanding the encryption and authentication mechanisms used in later lectures.

Block versus stream encryption, Feistel structures, DES, confusion, and diffusion. Shows how practical cipher structures aim to conceal patterns in the original data.

Symmetric encryption after DES, including Triple DES and the Advanced Encryption Standard. Places these algorithms in the historical progression of symmetric encryption.

Eavesdropping risks, link versus end-to-end encryption, and encryption at different protocol layers. Connects network exposure with decisions about where to apply cryptographic protection.

Public-key distribution, trusted directories, authorities, and public-key certificates. Explains why trustworthy distribution is as important as choosing an encryption algorithm.

Message integrity, origin authentication, message authentication codes, and hash functions. Distinguishes protecting message content from verifying its integrity and origin.

How previously captured messages are reused, and how nonces, timestamps, and sequence numbers establish freshness. Explains why encryption alone does not prevent the reuse of an old message.

Ethernet addressing, MAC addresses, ARP, and local network communication. Provides the local-network background needed to understand address resolution and related security issues.

IPSec and the use of network-layer protection to secure communications across applications. Connects protocol-layer choices with protection shared by multiple applications.

Availability threats and the ways hostile network traffic disrupts services. Examines availability as a security objective alongside confidentiality and integrity.

Web threats, confidentiality, integrity, authentication, and security mechanisms for web communications. Relates security requirements to the layers and mechanisms used for web communication.

Application authentication and the Kerberos password authentication service. Uses Kerberos to show how an authentication service can support applications.

Certificates that bind identities and keys, including authorization, delegation, and validity conditions. Connects certificate structure and trust with identity and authorization decisions.

Networking foundations and the context for studying network security. Establishes the network terminology used in the subsequent secure-protocol lectures.

TCP/IP components and protocols, inherent risks, ARP spoofing, traffic sniffing, and TCP denial of service. Connects common network functions with weaknesses that security mechanisms must address.

Identity verification and identification, biometric methods, applications, and limitations. Explains how biological characteristics support verification and identification, while highlighting limitations.

Secure communication protocols and the principles underlying protected network channels. Introduces trusted parties, key distribution, and entity authentication, including Kerberos.

Internet-layer security, secure channels, VPNs, and remote access. Explains the value and tradeoffs of securing communication at the Internet layer.

Transport and application security for e-commerce and remote administration, compared with IPSec. Compares these mechanisms with network-layer protection and their differing application roles.

Mobile network architecture and network-access security in second- and third-generation cellular systems. Provides a historical study of security in earlier mobile-network generations.

802.11 wireless networking, security history, and wireless vulnerabilities. Connects wireless operation with the risks created by radio access and older security mechanisms.

Security concepts and mechanisms for protecting electronic mail. Examines the need for confidentiality, integrity, and trustworthy communication in electronic mail.

Firewall types, configuration, policy enforcement, limitations, and placement in the network. Explains what firewalls can enforce and what remains outside their protection.

Host and network intrusion detection, vulnerability assessment, honeypots, and security appliances. Distinguishes observing suspicious activity from preventing attacks and assessing weaknesses.

Guest lecture covering computer crime, hacker attacks, passwords, and network, web, database, and distributed-system security.

Historical tutorial on resource exhaustion, denial-of-service techniques, attack tools, and defensive approaches.

Process migration, load sharing, communication performance, availability, and use of specialized computing resources.

E-commerce application architecture, transaction flow, web servers, operating systems, hardware, and operational requirements.

Hardware, backup systems, network interfaces, firewalls, networking, and cryptography for e-commerce.

Certificate revocation, revocation lists, webs of trust, depender graphs, and distribution of revocation notices.

Hiding messages within carriers such as images; history, applications, watermarking, and basic methods.

Symmetric and asymmetric encryption, one-way hashes, confidentiality, integrity, and encrypted e-mail. The original filename refers to “Plug and Protect”; the presentation itself covers encryption.

Secrecy, authentication, message integrity, encryption algorithms, keys, and symmetric versus asymmetric cryptography.

Identity technologies, one-time passwords, tokens, PPP, TACACS+, RADIUS, Kerberos, and security across TCP/IP layers.

Historical presentation on negligence, trade secrets, linking, defamation, workplace privacy, and related legal resources.

Multicast distribution, tree-based versus gossip-based approaches, push/pull methods, redundancy, and performance analysis. Despite its original filename, this file is a multicast presentation.

Historical training workshop for federal IT security personnel on developing useful metrics and implementing a metrics program. Covers performance goals, development steps, roles, and reporting examples from the original GISRA period.

Publisher page for the advanced network-security design textbook. Provides book information and related resources at the current destination of the original link.