Networks And Security

Professor: Giovambattista Ianni - http://www.gibbi.com

Office hours and Exams registration: Monday 15:00-17:00

Teaching assistant: Francesco Pacenza - https://www.francescopacenza.it

Office hours: by appointment

Our Facebook Group.

General information

• Detailed course description sheet here/qui

• Old course Network and Computer Security

News

Projects assignments

• 2011

• 2012

• 2013

• 2014

• 2015

• 2016

• Current Project assignments

Teaching Material

• 01 - Introductory lecture - Download (Last update: Feb 2024)

• Repository with all the exercises saw during the laboratory sessions - GitHub

Cryptography and Digital signature

• All slide sets from the book "Criptography and Network Security" download

• 02 - Symmetric Cryptography, Cipher modes, Random numbers - Download (Last update: Feb 2024)

  • Old slide set:

    Symmetric Cryptography - Download (Last update: Oct 2021)

  • Old slide set:

    DES, AES and Cipher modes - Download (Last update: Oct 2021)

  • Old slide set:

    Random Numbers and stream ciphers - Download (Last update: Oct 2022)

• 03 - Diffie-Helmann-like key exchange, Public key encryption, Cryptographic hashes - Download (Last update: Mar 2024)

• 04 - Key Distribution and PKI - Download (Last update: Mar 2024)

• TLS - Download (Last update: Nov 2022)

• TLS and smtp (Sections 1 to 6 are a good introduction to TLS in general)

• Ten risks of PKI - Download

Layer 2 Security

• Security of Layer 2 Links - Download (Last update: Jul 2023)

• A survey of common MITM attacks

• WLAN technologies and security

• Anatomy of common MITM Layer 2 attacks - Download (Last update: Oct 2021)

Layer 2 & 3: Virtual Private Networks

• Principles and goals of a VPN - Download (Last update: Jul 2023)

• VPN with SSH Tunneling

• Linux VPN technical analysis - Download (Last update: Oct 2021)

• How to setup a PPTP/GRE server on Linux

• How to setup a L2TP/IPSec server on Linux

  • IpSec - Download (Last update: Jul 2023)

  • IPSec HOWTO

• IPV6 - here and here

• Common VPN Security Flaws - Download (Last update: Oct 2021)

• Firewall Traversal - Download (Last update: Dec 2021)

• The TOR network - Download (Last update: Dec 2021)

Layer 4 & 5 Security

• SSL+TLS infrastructure

• How to configure an Apache server with a SSL certificate - Download

Identity management

• Password workflow, AAA, Identity management - Download (Last update: Jul 2023)

Laboratory sessions

• GNS3 slides - Download (Last update: Oct 2022)

  • GNS3 Laboratory configuration guide - Download (Last update: Oct 2022)

  • Configuration files

• Symmetric Cryptography slides - Download (Last update: Nov 2022)

  • Cryptocat exercise - Download (Last update: Oct 2022)

  • Steghide exercise - Download (Last update: Oct 2022)

  • Decryptcat exercise - Download (Last update: Oct 2022)

  • Example Wordlist - Download (Last update: Oct 2022)

• Asymmetric Cryptography and Certificate Generation slides - Download (Last update: Apr 2024)

  • How to store and load a SSL/TLS Pre-Master Secret key - Download (Last update: Nov 2022)

  • Self signed certificate generation - Download (Last update: Oct 2022)

  • Letsencrypt certificate generation - Download (Last update: Mar 2024)

  • Configure Apache on Linux - Download (Last update: Oct 2022)

  • TLS client/server socket - Download (Last update: Nov 2022)

• Layer 2 attacks slides - Download (Last update: Nov 2022)

  • Mac Flooding Challenge - Download (Last update: Nov 2022)

  • ARP Spoofing Challenge - Download (Last update: Nov 2022)

• Other MITM Attacks - Download (Last update: Apr 2024)

  • IP Spoofing attack with scapy - GitHub

  • ARP Poisoning with Ettercap - GitHub

  • DNS Spoofing with Ettercap - GitHub

• Wifi cracking - Download (Last update: Nov 2022)

  • WEP cracking - GitHub | Slides

  • WPA2 cracking - GitHub

• Phishing and VPN - Download (Last update: Dec 2022)

  • Phishing Attack - GitHub

  • VPN Configuration - GitHub

• SSLSTRIP and Password Cracking - Download (Last update: Dec 2022)

  • SSLSTRIP and HSTSHIJACK - GitHub

  • Linux Shadow Password Cracking- GitHub

GNS3

• GNS3

• Debian Linux Image

How to install Netkit

• Netkit consists of three files that are here.

• Then apply the patch 2 as described here.

• Netkit web site - http://www.netkit.org/