Spring 2013 - ISA564 Security Laboratory

INSTRUCTOR INFORMATION

Instructor:	Dr. Avinash Srinivasan
Office:	ENGR 5337
Phone:	703-993-1773
E-mail:	asriniv5 AT gmu dot edu
Office Hours:	MR 6-7PM; W 3-4PM; or by appointment

COURSE INFORMATION

Room:	ENGR 5358
Day:	R
Time:	7:20 PM - 10:00 PM
Credits:	3
Course Homepage:	http://www.cs.gmu.edu/~asriniv5/ISA564.html

TA INFORMATION

Name:	TBA
Office:	TBA
E-mail:	TBA
Office Hours:	TBA

COURSE DESCRIPTION

This class will be focused on current research in Security with emphasis in Network and Software Security including:

Experiment with Attacks against Networks and Machines:

Denial-of-service (Dos) attack

Host-based Attacks (Buffer overflows, Kernel rootkits)

Defenses, Forensics and diagnostics for security:

Detect and Trace the attack either real-time or after the fact

Install and Test Defenses including Intrusion and anomaly detection Systems (IDS)

Examine the functionality of Botnets, Malware, anti-virus, anti-spyware

Steganography and Information Hiding

Password Cracking and Log Analysis

PREREQUISITES

ISA562 Information Security Theory/Practice

COURSE OBJECTIVE

This course provides hands-on experience in configuring and experimenting with commodity networked systems and security software in a live laboratory environment, with the purpose of understanding real-world security threats. This course will take both offensive and defensive approaches and expose students to a variety of real-world attacks, including viruses, worms, rootkits, and botnets. Possible mitigation and defending mechanisms such as firewalls and intrusion detection software will also be covered.

BIBLIOGRAPHY

There is no textbook for this course since we will be covering a gamut of topics. We are going to cover these topics using the provided slides, papers, and online material.

GRADING POLICY

You will be graded on a total of 1000 points. Your grade will be calculated as follows:

50 points Class Participation
450 points Projects
There will be a total of 7 projects during the semester including one Group Term Project.

Projects will be graded as follows-

Metaspoilt	25
Malware and Shell-code	50
Network Attacks	50
Traffic Analysis	25
Cryptographic Protocol Implementation	50
Steganography and Information Hiding	50
Team Project (3-4 per group)	200

Final letter grade will be calculated using the scale below-

≥ 495	A+
≥ 465	A
≥ 450	A-
≥ 435	B+
≥ 420	B
≥ 400	B-
≥ 350	C
≥ 250	F

Acknowledgements: This course uses material from an earier version of the course designed by Prof. Angelos Stavrou.

CAMPUS RESOURCES

Counseling and Psychological Services (CAPS)

Calendar of Religious Holidays

Diversity Statement

GMU Academic Calendar

Final Exam Schedule

Honor Code

Disability Resource Center

STUDENTS WITH DISABILITIES

If you have a documented learning disability or other condition that may affect academic performance you should:

Make sure this documentation is on file with the Office of Disability Services (SUB I, Rm. 222; 993-2474; www.gmu.edu/student/drc) to determine the accommodations you need.
Talk with me to discuss your accommodation needs.

Dr. Avinash Srinivasan - Dept. of Computer Science - George Mason University.