Tele-Teaching Lecture for Beijing University of Technology
Winter Semester 2009/10

Introducation

"Internet Security - Weaknesses and Targets" gives a detailed introduction on problems concerning Internet and Intranet security. After starting with some remarks on risk analysis and computer crimes, security weaknesses and targets are discussed in detail. Besides, more introductions are provided on: human factor and technical failures, attacks on accounts and passwords, attacks on Internet protocol, misuse of design and programming errors, weaknesses in common operating systems, targets in the WWW, and viruses. The lecture concludes with the discussion on possibilities to detect attacks and intrusions and ethical issuses are introduced as well.

Organisation

Every week a 90 minutes lecture (in english) is streamed over the internet. There will be two practical hands-on exercises including reconnaisance, analysis, and practical attack of a prepared victim network. In the middle of the semester, there will be a written intermediate exam. At the end of the course there is an oral exam to evaluate each student.

Lecturer

Tutors

• Lijuan Duan (BJUT)
• Feng Cheng (HPI)
• Sebastian Roschke (HPI)

Date: Friday, 8:30 - 10:00 (Beijing Time)

Place:

• tele-TASK, HPI, Potsdam, Germany
• vod-BJUT, BJUT, Beijing, China

Plan (last update: 01.01.2010):

• 11.09.2009  Internet Security: An Overview [LINK]
• 18.09.2009  First Understanding  of Internet and WWW [LINK]
• 25.09.2009  Risk Analysis [LINK]
• 02.10.2009  Happy 60th Birthday to China!!!
• 09.10.2009 
• Cyber Crime: Criminals and Motives [LINK]
• Hackers and Viruse [LINK]
• 12.10.2009  First Task Distribution (Per Email)
• 16.10.2009 
  • Human Factor and Technical Failures  [LINK]
  • (Online) Reconnaissance  [LINK]
• 23.10.2009 
  • OS Fingerprinting [LINK]
  • Attacks on Accounts and Passwords [LINK]
• 30.10.2009  Weaknesses of Internet Protocols (1) [LINK]
• 06.11.2009  Weaknesses of Internet Protocols (2) [LINK]
• 13.11.2009  Design and Programming Errors [LINK]
• 20.11.2009  Weaknesses in Unix/Linux [LINK]
• 27.11.2009  Weaknesses in Windows and Mac OS X [LINK]
• 04.12.2009 
• Weaknesses in the World Wide Web (1) [LINK]
• Weaknesses in the World Wide Web (2) [LINK]
• 11.12.2009  Wireless Security [LINK]
• 11.12.2009  Second Task Distribution  (Onsite!!!)
• 18.12.2009  Detection of Attacks and Intrusions [LINK]
• 25.12.2009  Legal and Ethical Issues in Internet Security [LINK]
• 01.01.2010  Happy New Year !!!
• 08.01.2010  Discussion Seminar: Two Tasks

Onsite Q&A and Oral Examination

Literature:

• Meinel/Sack: WWW-Kommunikation, Internetworking, Web-Technologien, Springer, Heidelberg, 2004. (in German)
• Meinel/Sack: WWW-Internet、Web技术及应用, Hope Press, Beijing, 2008 (in Chinese)
• Stuttard/Pinto: The Web Application Hacker's Handbook - Discovering and exploiting security holes
• Koziol/Litchfield/Aitel/Anley/Eren/Mehta/Hassel: The Shellcoder's Handbook - Discovering and exploiting security holes
• The Internet

Online Lectures (update on every Friday)

• Tele-Teaching Lecture Series powered by tele-TASK: Internet Securiy-Weaknesses and Targets
• BJUT-Vod: Internet Securiy-Weaknesses and Targets