Ateneo - UPO

Introduction to the fundamental principles of network security and cryptography, description of fundamental techniques, and examples of applications and protocols.

William Stallings, Cryptography and Network Security, fifth or sixth edition, Pearson

Knowledge and understanding: know the basic principles of computer security, fundamental cryptographic techniques, and essential devices for protecting a computer network. Application of knowledge and understanding: know how to analyze the proposed problem and propose analysis and protection tools. Autonomy of judgment: correct perception of security risks and how computer security aspects are intertwined with the organization of a network. Communication skills: acquisition of area-specific technical terminology and ability to discuss security aspects and protection mechanisms. In addition, the student will improve her/his command of the English language at the technical computing level. Ability to learn: having learned the basic principles, the student will be able in the future to appreciate and evaluate new technologies and protocols that are based on the same principles.

Knowledge of the functioning of computer networks, programming in Java, basic notions of using Unix.

Lectures and Didactic Laboratories

Students with physical disabilities, Learning Disabilities or Special Education Needs can request specific services and tools via the "Staff Sviluppo e Coordinamento Carriere e Servizi alle Studentesse e agli Studenti", consulting the University webpage: https://www.uniupo.it/en/services/services-students-physical-or-learning-disabilities. Students with disabilities, learning disabilities or special education needs, once they have contacted the University Staff, can refer to the tutor in charge of the course to define the examination modalities, concerning academic aspects.

The exam is written. The exam consists of 6 open-ended questions for a total of 32 points. The mark "30 cum laude" is assigned upon reaching 31 points.

-Introduction to safety. Vulnerabilities and security requirements. - Security policy - Symmetric key encryption. Block and stream encryption systems. Principles of confusion and diffusion. DES and 3DES, AES, RC4. Encryption of long messages. - Public key encryption. RSA, Diffie-Hellman and DSA: use, attacks, protocols and standards. Introduction to elliptic curve cryptography: ECDH and ECDSA. - Comparison between public key and symmetric key cryptography systems. Hybrid scheme. Exchange of secrets and generation of symmetric keys. IES and ECIES. - Cryptographically secure hash functions. Collisions. Structure of hash functions. Examples of hash functions. - Message Authentication Codes. Comparison with hash functions. HMAC. - Authentication of public key messages and non-repudiation. - Time: nonce and timestamp. Synchronization. - Digital certificates. Certification Authority and Registration Authority. Revocation lists. OCSP protocol. - Authentication Authorization Accounting (AAA) scheme. Authentication: login / password, challenge / response and timestamp paradigms. - VPN. Notes on IPsec, SSL / TLS, SSH. - Firewall. Architecture of a firewall. Fundamental principles. Bastion Host. DMZ. - Static and dynamic packet filters. Access list. Proxy.

Describe the security requirements Describe the types of attacks Explain the differences between symmetric and public key cryptography Explain what a cipher is and be able to distinguish between the various classes of ciphers Explain the function and requirements of hash functions in cryptography Explain how mechanisms to ensure integrity are achieved Explain the characteristics and functioning of the digital signature Explain what digital certificates are and explain their function Explain the mechanisms for authentication (secure identification) Explain the principles of network security and explain the tools used in this area Analyze the security requirements guaranteed by a proposed protocol Analyze the functionality and limitations of different tools such as network-level packet filters and proxies or application-level packet filters