Ateneo - UPO

Introduction to the fundamental principles of network security and cryptography, description of fundamental techniques, and examples of applications and protocols.

William Stallings, Cryptography and Network Security, fifth or sixth edition, Pearson

Knowledge and understanding: knowing the basic principles of IT security, fundamental cryptographic techniques and essential devices for the protection of a computer network.

Knowledge of the functioning of computer networks, programming in Java, basic notions of using Unix.

Lectures and Didactic Laboratories

Ability to execute projects

Written test

-Introduction to safety. Vulnerabilities and security requirements. - Security policy - Symmetric key encryption. Block and stream encryption systems. Principles of confusion and diffusion. DES and 3DES, AES, RC4. Encryption of long messages. - Public key encryption. RSA, Diffie-Hellman and DSA: use, attacks, protocols and standards. Introduction to elliptic curve cryptography: ECDH and ECDSA. - Comparison between public key and symmetric key cryptography systems. Hybrid scheme. Exchange of secrets and generation of symmetric keys. IES and ECIES. - Cryptographically secure hash functions. Collisions. Structure of hash functions. Examples of hash functions. - Message Authentication Codes. Comparison with hash functions. HMAC. - Authentication of public key messages and non-repudiation. - Time: nonce and timestamp. Synchronization. - Digital certificates. Certification Authority and Registration Authority. Revocation lists. OCSP protocol. - Authentication Authorization Accounting (AAA) scheme. Authentication: login / password, challenge / response and timestamp paradigms. - VPN. Notes on IPsec, SSL / TLS, SSH. - Firewall. Architecture of a firewall. Fundamental principles. Bastion Host. DMZ. - Static and dynamic packet filters. Access list. Proxy.

Describe the security requirements
Describe the types of attacks
Explain the differences between symmetric and public key cryptography
Explain what a cipher is and be able to distinguish between the various classes of ciphers
Explain the function and requirements of hash functions in cryptography
Explain how mechanisms to ensure integrity are achieved
Explain the characteristics and functioning of the digital signature
Explain what digital certificates are and explain their function
Explain the mechanisms for authentication (secure identification)
Explain the principles of network security and explain the tools used in this area
Analyze the security requirements guaranteed by a proposed protocol
Analyze the functionality and limitations of different tools such as network-level packet filters and proxies or application-level packet filters