Class Information

Calendar

Projects

Additional Reading

Other Resources

Acknowledgments

Class Information

Instructor: Arjan Durresi (durresi@csc.lsu.edu). TA The goal of the course is to familiarize graduate students with state-of-the-art and open problems in computer and network security. The course will involve weekly research papers readings, and a semester-long project. Homework Reading will be assigned for each lecture. Before lecture, every student must submit a one page report of one of the assigned papers (report should contain a one paragraph summary of the paper, description of three strong points of the paper and three weak points of the paper). The reports are due one hour before the class starts (DUE TIME: 11:30 AM), by email, include 7502 and the homework number in the subject. Homework can be submitted by email to me at durresi@byte.csc.lsu.edu, include 7502 - HW# in the subject. If more than one paper was assigned, you have to submit a report only on one of the papers. IMPORTANT: Submit your homework in PDF format or txt. Efficient Reading of Papers in Science and Technology Project Every student must complete a project on one of the topics discussed in the class. Students are required to work in teams of 2 on the project. In addition to the presentation given in the class every team will meet with me to discuss the accomplished results and asses the contribution of each team member. Every project must have a practical component that will require you to do an implementation and demonstration. Class Schedule and Office Hours TTh 12:10-1:30pm, Arjan Durresi: Tu 3-4 and Th 3-4 Coates Hall 291 Class Roster Group_A Group_B

Calendar

Week Tuesday Thursday August 23 - 27 Course overview, topics and possible projects CRA Conference on "Grand Research Challenges in Information Security & Assurance slides Introduction to attacks on protocol. Using Encryption for authentication in large networks R. Needham and M, Schroeder. Reflections on Trusting Trust K. Thompson. Aug.30 - Sep. 3 Security mechanisms in high-level network protocols V. Voydock and S. Kent. Optional: Why Cryptography is harder than it looks Bruce Schneier. Why Criptography fails Ross Anderson. Attacks on TCP A: Analysis of a Denial of Service Attack on TCP , Christoph L. Schuba, Ivan V. Krsul, Markus G. Kuhn, Eugene H. Spafford, Aurobindo Sundaram, Diego Zamboni. IEEE Symposium on Security and Privacy,1997 B: Low-Rate TCP-Targeted Denial of Service Attacks (The Shrew vs. the Mice and Elephants), Aleksandar Kuzmanovic and Edward W. Knightly, SIGCOMM 2003. A + B Optional: Security Problems in the TCP/IP Protocol Suite, S.M. Bellovin. Computer Communication Review, Vol. 19, No. 2, pp. 32-48, April 1989. TCP Congestion Control with a Misbehaving Receiver. Stefan Savage, Neal Cardwell, David Wetherall, and Tom Anderson Sep. 6 - Sep. 10 DDoS A: A Framework for Classifying Denial of Service Attacks, by Alefiya Hussain, John Heidemann, and Christos Papadopoulos, SIGCOMM 2003 B: The DoS project's trinoo distributed denial of service attack tool, by David Dittrich A + B Optional: Analyzing Distributed Denial Of Service Tools: The Shaft Case, Proceedings of the 14th Systems Administration Conference (LISA 2000) . IP Traceback A: Practical Network Support for IP Traceback. Stefan Savage, David Wetherall, Anna Karlin and Tom Anderson. SIGCOMM 2000. B: Advanced and Authenticated Marking Schemes for IP Traceback. Dawn X. Song, Adrian Perrig. Proceedings IEEE Infocomm 2001 Optional: Hash-Based IP Traceback Alex C. Snoeren, Craig Partridge, Luis A. Sanchez, Christine E. Jones, Fabrice Tchakountio, Stephen T. Kent, W. Timothy Strayer. SIGCOMM 2001. Authenticated Autonomous System Traceback Vamsi Paruchuri, Arjan Durresi, Rajgopal Kannan and S. Sitharama Iyengar, AINA 2004 Sep. 13 - Sep. 17 Proactive countermeasures against DDoS #1 A1: On the Effectiveness of Route-Based Packet Filtering for Distributed DoS Attack Prevention in Power-Law Internets. Kihong Park, Heejo Lee. SIGCOMM 2001 B1: Implementing Pushback: Router-Based Defense Against DDoS Attacks. John Ioannidis, Steven M. Bellovin. NDSS 2002. Optional: Controlling High Bandwidth Aggregates in the Network Ratul Mahajan, Steven M. Bellovin, Sally Floyd,John Ioannidis, Vern Paxson, and Scott Shenker No class today. LSU is closed because of Hurricane Ivan Sept. 20 - Sept. 25 Intrusion detection A2:An Intrusion-detection Model. De. E. Denning. IEEE Trans. on Software Engg., SE-13, pp.222-232, February 1987. B2:Detecting Intruders in Computer Systems T. F. Lunt Conference on Auditing and Computer Technology, 1993. Optional: Intrusion and intrusion detection John McHugh, IJIS (2001) 1: 14-35 Intrusion detection. A4: Temporal sequence learning and data reduction for anomaly detection. T. Lane and C. E. Brodley ACM Transactions on Computer Security, vol 2, num 3, pp 295-331, August 1999. B3: Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection Thomas H. Ptacek, Timothy N. Newsham. Optional: Computer Security Threat Monitoring and Surveillance. Anderson, 1980. Sep. 27 - Oct. 1 Network Intrusion Detection A6: Bro: A System for Detecting Network Intruders in Real-Time Vern Paxson B4: Network Intrusion Detection: Evasion, Traffic Normalization, and End-to-End Protocol Semantics Mark Handley and Vern Paxson. Trusted Computing Design and Implementation of a TCG-Based Integrity Measurement Architecture Reiner Sailer, Xiaolan Zhang, Trent Jaeger, Leendert Van Doorn A Trusted Open Platform Paul England, Butler Lampson, John Manferdelli, Marcus Peinado, Bryan Willman. Oct. 4 - Oct. 8 Worms - survey and propagation. A8: Modeling the Spread of Active Worms. Zesheng Chen, Lixin Gao, Kevin Kwiat, INFOCOM 2003. B6:How to 0wn the Internet in Your Spare Time. Stuart Staniford, Vern Paxson, Nicholas Weaver, USENIX Security Symposium, 2002. You have to read one of the following two papers. No report needed for them. Recent worms: a survey and trends. Darrell M. Kienzle, Matthew C. Elder. WORM, CCS 2003. A taxonomy of computer worms. Nicholas Weaver, Vern Paxson, Stuart Staniford, Robert Cunningham, WORM, CCS 2003 Fall holiday Oct. 11 - Oct. 15 Security of WEP A3: Intercepting Mobile Communications: The Insecurity of 802.11 Nikita Borisov, Ian Goldberg, David Wagner, INFOCOM 2001. B7: Using the Fluhrer, Mantin, and Shamir Attack to Break WEP , Adam Stubblefield, John Ioannidis, and Aviel D. Rubin, NDSS 2002. Optional: Wireless Network Security 802.11, Bluetooth and Handheld Devices Tom Karygiannis, Les Owens 802.11 Denial of Service. A2:802.11 Denial-of-Service Attacks: Real Vulnerabilities and Practical Solutions John Bellardo and Stefan Savage. USENIX 2003 B8: Denial of Service Resilience in Ad Hoc Networks Imad Aad, Jean-Pierre Hubaux, and Edward W. Knightly Oct. 18 - Oct. 22 Security in Ad-hoc Wireless Networks. A4:Mitigating routing misbehavior in mobile ad hoc networks. Sergio Marti and T. J. Giuli and Kevin Lai and Mary Baker. MOBICOM 2000 B1: Security in Mobile Ad Hoc Networks: Challenges and Solutions Hao Yang, Haiyun Luo, Fan Ye, Songwu Lu, Lixia Zhang. IEEE Wireless Communications, February 2004. Due date for Written Report on Class Project Security in Ad-hoc Wireless Networks. A2:Ariadne: A Secure On-Demand Routing Protocol for Ad Hoc Networks, Yih-Chun Hu, Adrian Perrig, and David B. Johnson. MobiCom 2002. B3:A Secure Routing Protocol for Ad Hoc Networks, K. Sanzgiri, B. Dahill, B. N. Levine, C. Shields, and E. Belding-Royer, ICNP 2002. Oct. 25 - Oct. 30 WLAN Security A7: An Analysis of the RADIUS Authentication Protocol Joshua Hill. B4: Analysis of the 802.11i 4-Way Handshake Changhua He, John C Mitchell. WiSe04 Optional: RFC 2865: Remote Authentication Dial In User Service (RADIUS) Cellular Security. A8: Security Along the Path Through GPRS Towards 3G Mobile Telephone Network Data Services Dung Chang B5: A Man-in-the-Middle Attack on UMTS Ulrike Meyer, Susanne Wetzel, WiSe'04 Optional: Analysis of 3G Mobile Security Nov. 1 - Nov. 5 Sensor Network Security A2: SPINS: Security Protocols for Sensor Networks Adrian Perrig, Robert Szewczyk, Victor Wen, David Culler, J. D. Tygar Wireless Networks 8, 521-534, 2002. B6: Secure Routing in Wireless Sensor Networks: Attacks and Countermeasures Chris Karlof, David Wagner, Ad Hoc Networks 1 (2003) 293-315. Sensor Network Security A4: A key-management scheme for distributed sensor networks. Laurent Eschenauer, Virgil D. Gligor. CCS 2002. B7: Random Key Predistribution Schemes for Sensor Networks Haowen Chan, Adrian Perrig, and Dawn Song. Security & Privacy 2003. November 8 - 12 Sensor Network Security A6: Key Infection: Smart Trust for Smart Dust Ross Anderson, Haowen Chan, Adrian Perrig. IEEE International Conference on Network Protocols 2004 B2: Establishing Pairwise Keys in Distributed Sensor Networks Donggang Liu, Peng Ning and Rongfang Li. ACM Transactions on Information and System Security, 2004 RFIDs and privacy A7:Security and Privacy Aspects of Low-Cost Radio Frequency Identification Systems. Sanjay E. Sarma, Stephen A. Weis, Ronald L. Rivest and Daniel W. Engels. 2003 First International Conference on Security in Pervasive Computing. B3:The Blocker Tag: Selective Blocking of RFID Tags for Consumer Privacy Ari Juels, Ronald L. Rivest, Michael Szydlo. 2003 Nov. 15 - Nov. 19 Privacy - Secure Multi-Party Computation A5: Secure Multi-Party Computational Geometry Mikhail J. Atallah and Wenliang Du, In Proceedings of 7th International Workshop on Algorithms and Data Structures (WADS 2001), August, 8-10, 2001, Providence, Rhode Island, USA. Pages 165-179. A6: Secure Multi-Party Computation Problems and their Applications: A Review and Open Problems Wenliang Du and Mikhail J. Atallah, In New Security Paradigms Workshop 2001. September 11th - 13th, 2001, Cloudcroft, New Mexico, USA. Pages 11-20. Securing BGP All students will read the following paper. B2: Secure Border Gateway Protocol (S-BGP) — Real World Performance and Deployment Issues Stephen Kent, Charles Lynn, Joanne Mikkelson, and Karen Seo B1 will present last class paper. November 22 - 26 Traffic analysis - anonimity. A6: Traffic Analysis: Protocols, Attacks, Design Issues, and Open Problems. Jean-Francois Raymond In the Proceedings of Designing Privacy Enhancing Technologies: Workshop on Design Issues in Anonymity and Unobservability, July 2000, pages 10-29. B3: Traffic Analysis Attacks and Trade-Offs in Anonymity Providing Systems. Adam Back, Ulf MC6ller, and Anton Stiglic. In the Proceedings of Information Hiding Workshop (IH 2001), April 2001, pages 245-257. Thanksgiving holiday

Class Projects Presentation: December 10th, 5:30p.m.

Additional Reading

Inferring Internet Denial-of-Service Activity, David Moore, Geoffrey Voelker, and Stefan Savage. USENIX Security, 2001. Code-Red: a case study on the spread and victims of an Internet worm David Moore, Colleen Shannon, Jeffery Brown. Internet Measurement Workshop (IMW) in 2002. How to 0wn the Internet in Your Spare Time. Stuart Staniford, Vern Paxson, Nicholas Weaver, USENIX Security Symposium, 2002. Inside the Slammer Worm. David Moore, Vern Paxson, Stefan Savage, Colleen Shannon, Stuart Staniford and Nicholas Weaver, IEEE Security and Privacy 2003. Hash-Based IP Traceback Alex C. Snoeren, Craig Partridge, Luis A. Sanchez, Christine E. Jones, Fabrice Tchakountio, Stephen T. Kent, W. Timothy Strayer, SOGCOMM 2001. Sensor security Traceback

Other Resources

CAIDA NETWORM EMULAB

Acknowledgments

The lecture notes have incorporated course materials developed by: Dr. Cristina Nita-Rotaru (Purdue), Dr. Adrian Perrig (CMU), Dr. Wenke Lee (GaTech), Dr. S. Felix Wu (UC Davis), Dr. Fengmin Gong (IntruVert), Dr. Henning Schulzrinne (Columbia), and Dr. Matt Bishop (UC Davis).

Louisiana State University Department of Computer Sciences