Meeting Time & Place: Tuesday 6:15 - 8:15pm, Room TBA

Instructor:   Prof. Ping Ji
Office:   06.63.07NB
Phone:  212-237-8841
e-mail:   pji@jjay.cuny.edu
Office hours:   Tuesday, 5:00 - 6:00 pm, or by appointment!

Text: 1. Cryptography and Network Security: Principles and Practices, by William Stallings, Prentice Hall, Latest Edition
2. Computer Networking: A Top-Down Approach Featuring the Internet, by James F. Kurose and Keith W. Ross, Addison Wesley, Latest Edition

Course website: http://jjcweb.jjay.cuny.edu/pji/fcm742.html

Course Description: This course introduces advanced fundamental knowledge on modern computer networks and network securities for graduate level students in the Master program of Forensics Computing. Topics cover network protocol mechanisms and implementation principles, advanced network architecture, network algorithms, cryptography theories, network security and system security (the threats and countermeasures). Prerequisite: algorithms, operating system, programming skills; knowledge on computer networks is a plus.

Workload: Two to three programming projects will be assigned. In addition, written exercise will be assigned through the semester. However, only selected written assignments will be collected together with programming assignments. The course workload and grading scale are specified in the following table.

Syllabus:

• Part 1. Computer Networks Introduction and Applications
  • Introduction to Computer Networks
    • Network architecture, protocol layers,
    • Internet backbones, NAPs and ISPs
  • Network applications
    • Principles of application layer protocols and service: HTTP, FTP, E-mail, DNS
    • Socket programming
• Part 2. Computer Networks: Transport and Network layers
  • Transport layer
    • Transport-layer services and principles
    • Connectionless transport: UDP
    • Reliable data transfer, TCP
  • Network layer
    • network service model
    • Routing principles
    • Internet Protocol - IP
• Part 3. Cryptography
  • Overview on symmetric key and public key mechanism
  • Encryption standard: DES, AES
  • Key management
• Part 4. Network security
  • Authentication applications: Kerberos, X.509 authentication services
  • Applications security
    • PGP (pretty good privacy)
    • security in P2P networks
  • Transport layer security
    • SSL (secure sockets layer)
    • Secure electronic transaction
  • IP security
    • IPsec architecture
    • Authentication header and encapsulating security payload
• Part 5. System security
  • Intrusion detection: DOS, DDOS, intrusion detection
  • Firewall: design principles, trusted systems
  • Virus & malicious softwares
• Part 6. Wireless network and its security (time permit)