Tele-Teaching Lecture for Beijing University of Technology
Winter Semester 2011/12

Introducation

"Internet Security - Weaknesses and Targets" gives a detailed introduction on problems concerning Internet and Intranet security. After starting with some remarks on risk analysis and computer crimes, security weaknesses and targets are discussed in detail. Besides, more introductions are provided on: human factor and technical failures, attacks on accounts and passwords, attacks on Internet protocol, misuse of design and programming errors, weaknesses in common operating systems, targets in the WWW, and viruses. The lecture concludes with the discussion on possibilities to detect attacks and intrusions and ethical issuses are introduced as well.

Organisation

Every week a 90 minutes lecture (in english) is streamed over the internet. There will be two practical hands-on exercises including reconnaisance, analysis, and practical attack of a prepared victim network. In the middle of the semester, there will be a written intermediate exam. At the end of the course there is an oral exam to evaluate each student.

Lecturer

Tutors

• Dr. Lijuan Duan (BJUT)
• Dr. Feng Cheng (HPI)

Date: Saturday, 8:30 - 12:30 (Beijing Time)

Place: 

• tele-TASK, HPI, Potsdam, Germany
• vod-BJUT, BJUT, Beijing, China

Plan (last update: 04.12.2011):

• 16.10.2011  
  • Internet Security: An Overview
  • First Understanding of Internet and WWW 
• 23.10.2011 
  • Risk Analysis
  • Cyber Crime: Criminals and Motives
  • Hackers and Viruses
• 30.10.2011 
  • Human Factor and Technical Failures
  • (Online) Reconnaissance 
  • OS Fingerprinting 
  • Attacks on Accounts and Passwords
• 06.11.2011 
  • Weaknesses of Internet Protocols (1) 
  • Weaknesses of Internet Protocols (2) 
• 13.11.2011 
  • Design and Programming Errors
  • Weaknesses in Unix/Linux 
• 20.11.2011  
• Weaknesses in Windows and Mac OS X
• Weaknesses in the World Wide Web (1)
•  27.11.2011
• Weaknesses in the World Wide Web (2)
• Wireless Security
• 04.12.2011 
• Detection of Attacks and Intrusions 
• Legal and Ethical Issues in Internet Security

Onsite Q&A and Oral Examination

Literature:

• Meinel/Sack: WWW-Kommunikation, Internetworking, Web-Technologien, Springer, Heidelberg, 2004. (in German)
• Meinel/Sack: WWW-Internet、Web技术及应用, Hope Press, Beijing, 2008 (in Chinese)
• Stuttard/Pinto: The Web Application Hacker's Handbook - Discovering and exploiting security holes
• Koziol/Litchfield/Aitel/Anley/Eren/Mehta/Hassel: The Shellcoder's Handbook - Discovering and exploiting security holes
• The Internet

Online Lectures (update on every Friday)

• Tele-Teaching Lecture Series powered by tele-TASK: Internet Securiy-Weaknesses and Targets
• BJUT-Vod: Internet Security-Weaknesses and Targets

History

• WS2010/2011
• WS2009/2010
• WS2008/2009, WS2007/2008, WS2006/2007, WS2005/2006, WS2004/2005, WS2003/2004, WS2002/2003