ITSec Weekly Plans

Updated

IT-Security (Information Technology and Security)
4. Semester: Datamatician Course (Computer Science)

This is a preliminary schedule: be prepared for changes !
CHECK ALWAYS THE RESPECTIVE WEEK

Week	Subjects	Litterature Recommendations/Links	Exercises/Solutions/Examples
34	Getting ready Zealand, Roskilde	Doonesbury 1-2 Superman, Hitman... Kurose&Ross: Computer Networks (CNN) Stallings: Network Security Essentials (NSE) Easttom: Computer Security Fundamentals (CSF) Extensive background readings	Buying Books  NOW Winterbathing in the fjord Link to Exercises Kurose&Ross (CN) Link to Stallings exercises Download All Slides Kurose&Ross Introduction to Wireshark (video) IT-Security super job opportunities (video)
35 (MICL) Class	Course content Security overview Symmetric keys Algorithms Cipher block modes ECB vs CBC Install necessary SW CrypTool 2.1 Wireshark	Literature/recommendations/Link CN: Ch. 8.1-8.2.1,(8.2.2) (CSF: Ch. 1 & 3) NSE: Ch. 1-1.5, 2-2.2, 2.5 Useful security links https://asecuritysite.com https://asecuritysite.com/subjects/chapter58 DigitalAttackMap https://www.owasp.org http://www.shadowserver.org Slides/Videos ITSec Slides No. 1 (PDF) ITSec Slides No. 2 (PDF) ITSec Slides No. 3 (PDF) CN Chapter 8 Slides Security Introduction Slides Security Overview Slides ------------------------------------------------------ Conventional Encryption Slides Bots Hack yourself TV Docs Hacking Hitler by tracking Enigma Machine -How does it work?	Homework1: Security Attacks Lab Cryptool 1 Lab DES file Packet Sniffer Wireshark Homework1: Security Attacks Answers from students
36 (MICL) Class	Public key encryption RSA & Diffie-Helmann Hashing SHA 512 MAC/HMAC X509 Authentification Procedures & ceritficates Create Certificates	Literature/recommendations/Link CN: Ch. 8.2.2 NSE: Ch. 3.4, 3.5 CN: Ch. 8.3-8.4 NSE: Ch. 3-3.1, 3.2(extensive) NSE: Ch. 3.3 (p. 91-95) https://en.wikipedia.org/wiki/Wireshark Length extension attacks (Wikipedia) HMAC (Wikipedia) X509 (Wikipedia)) First Sha1 collision detected 2017 Slides/videos ITSec Public Encryption ITSec Hashing -------------------------- Public-key Lecture from Stalling Lecture Slides on PKI from Austin	Lab Cryptool 2 CertificateX509 No.1 CertificateX509 No.2 Scripts for X.509 certificates NOTTO BE USED Homework 4: Tracking Lab Cryptool 3 Ceritficates
37 (MICL) Class More in next section	SSL/TLS principles SSL programming	Literature/recommendations/Link NSE: Ch. 4.5 Wikipedia entry on X509 Wikipedia Revocation List CN: Ch. 8.6 http://en.wikipedia.org/wiki/SSL SSL Useful Links What is HTTPS? How to secure socket connections with TLS/SSL (XAML) Slides/videos on TLS/SSL ITSec Authentication (PDF) ITSec SSL (PDF) Socket Introduction by BatJava (Video) -------------------------------------------------------------- Lecture Slides on TLS Lecture Slides on SSL	Packet Sniffer Wireshark Introduction to Wireshark (video) Wireshark Tutorial (YouTube) SSL AssignmentC# TCPEchoServerClientC# SSLSolutionC# SSLSolutionClientServerValidationC SSL AssignmentJava SSLProject TCPEchoServerClientJava SSL SolutionJava NOT USED OpenSSL Lab Open SSL
38 (MOFA) Moodle	Kerberos Ticket Granting ServiceTickets content Follow up on exercises.	Literature/recommendations/Links NSE: NSE: Ch. 4.1, 4.3 Kerberos version 5 (in Windows Server) Dialougue on Authentication system like Kerberos from MIT! Slides/videos Kerberos Slides How Kerberos Works (Youtube) Kerberos Authentication Process (Youtube)	Homework 2 Kerberos Exercises from week 37 to be continued and finalized
38 (MOFA) Moodle	Pretty Good Privacy PGP (S/Mime)	Literature/recommendations/Links CN: Ch. 8.5 NSE: Ch. 8 & Appendix H Base64 Radix64 definition Guide to PGP installation HowTo Gpg4win + thunderbird+enigmail Slides/videos ElectronicMailSecurity Slides	Lab PGP-Email PGP Problems solved
39 (MOFA)	VPN Virtual Private Network IP-Sec Installation of VM VirtualBox Ubuntu 20.04 Kali Linux	Literature/recommendations/Links NSE Ch. 9 very detailed. CN: Ch. 8.7 good overview Wiki IPSec Wiki VPN Wiki OpenVPN Protocols and modes overview OpenVPN Security Overview Slides/Videos IPSec & VPN Whiteboard Slides NSE IPSec Slides on Chapter 9 CN Chapter 8 Slides on VPN & IPSec IPsec & VPN Lecture Slides used	Mandatory VPN project Guidelines on installation of VirtualBox, Ubuntu, Kali & VPN Alternatively choose Mandatory Blockchain project Word Mandatory Blockchain project PDF Useful tips and links for blockchain
40 (MOFA)	Mandatory project VPN	Mandatory VPN project extra links OpenVPN Security Overview OpenVPN HowTo Digital Oean OpenVPN Installation On Ubuntu 16.04 OpenVPN Client Configuration Example OpenVPNConfiguration	(VPN 14.04 Old version Problems Answered) VPN 16.04/18.04 Problems Answered
41 (MOFA)
42	Autumn Vacation	Holidays That means students catch up	Teachers relax !
43 (MICL)	Web security Web Tokens Short follow up on exercises. Jwt Token Intro Password systems Introduction to password cracking. Exercises Password Cracking Mini	Literature/recommendations/Links JWT Token Structure JWT Basics JWT 4 minutes Explanation JWT Useful links Slides/videos JWT Introduction Slides Literature/recommendations/Links Master-Slave architecture System Architecture1 Example System Architecture2 Example Slides/videos	JWT TokenIntroduction JWTRestService JWTAuthServerClient Password Managerment AttacksPassword Management Solutions PasswordCrackingMiniAssignment PasswordCrackingCentralizedC
43 (MICL)	Password Management HashCat with GPU	Literature/recommendations/Links NSE: Ch. 11.3 Windows passwords techniques Cracking Windows Passwords I Cracking Windows Passwords II http://splashdata.com bad passwords hashcat.net Cracking using graphic processors video How to crack passwords using hashcat	Hashcat cracking BELOW NOT THIS YEAR !! Instructions PasswordCracking PasswordCrackingProject PasswordCrackingCentralizedJava SocketConcurrentJava
44 (MICL)	Hacking from week 43 Database security SQL-Attacks Firewalls	Literature/recommendations/Links CN: Ch. 8.7 Connolly DB Ch. 18 Ch. 18-18.2, 18.4 SQL Injection Examples Slides/Videos Lecture Slides DB Security DB Security Threats Firewalls Slides	Exercises from week 43 Firewalls 2024 SQLInjection Smart SQLInjection Defence
45 (MOFA OnLine	Hack or get hacked Homeworks 4+5 ManInTheMiddle-Attacks ARP Cache Poisoning, DNS Spoofing ARP Cache Poisoning, SSL Hijacking	Literature/recommendations/Links CN: Ch. 6.1, 6.4 Wikipedia: MAC_address Slides/Videos CN Chapter 5 All Slides Ed 6 ManInMiddle Slides PDF ManInMiddle Slides PP https://hack.me http://www.windowsecurity.com/articles-tutorials/	Homework 5 Wireshark SSL ManInMiddle Attack Excercise ManInMiddle Attack Excercise PDF Removed Cain and Abel zip with exe files Cain and Abel zip with txtcnnheat files John the Ripper Cracker Challenge from US Difficult! N/A: Firewalls
46 (MOFA) OnLine	Hack or get hacked Kali-Linux tool	Literature/recommendations/Links http://www.hackingtutorials.org/wifi-hacking-tutorials/top-10-wifi-hacking-tools-in-kali-linux/ https://itsfoss.com/best-kali-linux-tools/ http://tools.kali.org/ http://www.kalitutorials.net/ http://www.kalitutorials.net/2013/08/kali-linux.html https://gitlab.com/kalilinux http://www.techrepublic.com/article/pro-tip-install-kali-linux-tools-on-ubuntu-with-this-easy-script Slides/Videos Kali-Linux Slides (PP) Kali-Linux Slides (PDF)	Kali-Linux Tools Exercise Kali-Linux Tools Exercise PDF nmap.txt
46 (MOFA) OnLine	Hack or get hacked Kali-Linux tool Metasploit Metasploitable	Literature/recommendations/Links https://tools.kali.org/exploitation-tools/metasploit-framework https://sourceforge.net/projects/metasploitable/files/Metasploitable2/ https://www.offensive-security.com/metasploit-unleashed/ https://www.wikigain.com/download-install-metasploitable-in-virtualbox/ https://www.exploit-db.com/ Slides/Videos Hacking Slides (PP) Hacking Slides (PDF) Metasploit Slides (PDF) N/A	Metasploit Investigation Metasploitable Installation Pentest using Metasploitable vs. 1.0
47	Synopsis writing and supervision starts on Wednesday	Synopsis tips and tricks	Problems problems YouTube song problems problems
19	Synopsis writing	Here are some ideas: Firewalls theory/practise Various risks/denfences Security on mobiles Gaming over net, vulnerabilities Cloud security Log transcripts exercise Windows vulnerabilities Hacking theory and practise Security in layers Wireless keyboards hacking E-coins theory and simple practice Ethereum vs, Lisk tools Kerberos ideas in Angular Private blockchains Web-token and Angular Your own blockchain Attaxks on Windows 7 in Metasploit Machine Learning: Tools investigations and Interpolation Machine Learning: Tools and Face Recognition
20	Synopsis writing	Synopsis tips and tricks
21	Synopsis writing	Synopsis tips and tricks
22	Synopsis writing	Synopsis tips and tricks
50	Synopsis writing
51	Synopsis writing
52
EXTRA Online	Blockchain E-Coins Introduction on Mandatory VPN or Blockchain Mandatory project starts	BlockChain Wikipedia BlockChain for dummies Bitcoin the original article!! Lisk Ethereum Blockchain.com/charts Slides/Videos BlockChain Whiteboard Slides PDF BlockChain Whiteboard Slides PP Secret Chinese Bitcoin Mine BlockChain Introduction (6 minutes) BlockChain Detailed (23 minutes)	Mandatory VPN project Guidelines on installation of VirtualBox, Ubuntu, Kali & VPN Alternatively choose Mandatory Blockchain project Word Mandatory Blockchain project PDF Useful tips and links for blockchain Blockchain questions
EXTRA	Pretty Good Privacy (PGP) (S/Mime)	Literature/recommendations/Links CN: Ch. 8.5 NSE: Ch. 8 & Appendix H Base64 Radix64 definition Guide to PGP installation Slides/videos ElectronicMailSecurity Slides	Lab PGP-Email PGP Problems solved
EXTRA	Hacking and defence Firewalls	http://www.hackingtutorials.org/wifi-hacking-tutorials/top-10-wifi-hacking-tools-in-kali-linux/ http://www.kalitutorials.net/ http://www.kalitutorials.net/2013/08/kali-linux.html http://tools.kali.org/ http://www.techrepublic.com/article/pro-tip-install-kali-linux-tools-on-ubuntu-with-this-easy-script/ https://www.sunnyvalley.io/docs/network-security-tutorials/what-are-the-top-firewall-vulnerabilities-and-threats	nmap.txt Kali-Tools
EXTRA	Database transactions Concurrency by locks	Literature/recommendations/Links DBMS Note: DB Connolly DB Ch. 19 DB 19-19.2.5, 19.2.7-8, 19.3,19.5 Slides/Videos Lecture Slides DBTransactions DB Transaction	Firewalls DB Chapter19 Assignments DB Comparison Fireewalls Solution Comparison of Firewalls DB Chapter 19 DB Comparison Solution
			SecureSocket C# SecureSocket Java Network-tools Shields up for ports
23	Rehearsal for exam
24	Oral Exam Good luck !		Exam Roll List Re-exam unkbnown
35	5th Semester starts

Maintenance by micl@easj.dk