- Educational Objectives
- Reading Assignments
- Acknowledgements
- References
This course has four objectives:
- Teach security improvement techniques.
- Explain how exploitable errors have been made in the development
of software.
- Raise the level of ethics awareness.
- Bring attention to legal issues.
| "The infrastructure of the Internet is fundamentally
flawed in so many ways that it is a constant source of amazement
that it doesn't collapse under its own weight. But for those of
us who depend on the Internet for the competitive advantages it
brings, there is little choice but to live with it and struggle
to recover from the constant curves it throws us." |
| Fred Cohen, Sandia National Laboratories |
Introduction to the Internet Security Course
- Statement of Ethics
- Prerequisites
- Lecture Contents
- Lab Experiments
- OSIS Lab
- Exams
Prerequisites
- Be very comfortable with Unix as a User
- System administration experience not necessary
- Must be familiar with software development on Unix
- gcc, g++
- make
- shell scripts
- Familiar with TCP/IP
Lecture Contents
- All lectures are supported by reading materials on the web
- See the Weekly Schedule
Lab Experiments
OSIS Lab
Exams
This course is heavily lab oriented. Most experiments are to be
performed by the student individually with a few that are best learned
when there is a pair of students.
Terminology
- Very few good definitions.
- Media distorted
- Hacker:
- An experimenter, not interested in "theory", interested
in results regardless of elegance in solution, intentions may be
good/bad, see http://www.netmeg.net/jargon/
- Cracker
- Some one who attempts to crack a secret, typically an encrypted
password.
-
- Attacker:
- Script Kiddie:
Denial of Service
- escape sequence "\033[4;65536;65536t" can
kill xterm
- Is this a "denial of service?
- Course syllabus, syllabus.html
- Visit the links in the References section.
These lecture materials are gleaned from many sources. All are
presented after careful reading. In some cases, I may have
neglected proper attribution. I assure the reader it is not because I
claim authorship. Indeed, in the lectures there is hardly any
thing new that I have contributed. I welcome concrete suggestions
of improvement.
- Hackers.com "One of the
prettiest hacker sites in existence. You will also find plenty of
useful content if you dig through it."
- www.securityfocus.com
- www.antionline.com
- www.infowar.com
- www.infosyssec.org A
comprehensive computer and network security resource.
