#acl GiovambattistaIanni:read,write,delete,revert,admin FrancescoPacenza:read,write,revert All:read


= Networks And Security =

'''Professor''': Giovambattista Ianni - http://www.gibbi.com

'''Office hours and Exams registration''': Monday 15:00-17:00
 
'''Teaching assistant''': Francesco Pacenza - https://www.francescopacenza.it

'''Office hours''': by appointment


Our [[https://www.facebook.com/groups/223968634368349/|Facebook]] Group. 


----
<<TableOfContents>>
----
{{{#!wiki alert
 
'''For tentative Erasmus students: please note that this is an advanced course which requires a solid background on Computer Networks. Do not add this exam to your Learning Agreement unless you already took a course on Computer Networks. The percentage of failure for students taking the exam without previous background in computer networks is 95%.'''

}}}

== General information ==

 * Detailed course description sheet [[http://www.mat.unical.it/ianni/storage/SCHEDA-RSI-2013.pdf|here/qui]] {it} {en} 
 * Old course [[http://www.mat.unical.it/informatica/RetiESicurezzaInformatica|Network and Computer Security]]


== News ==

 
=== Projects assignments ===
   * [[https://www.mat.unical.it/informatica/RetiESicurezzaInformatica/AssegnazioneProgetti2011|2011]] 
   * [[https://www.mat.unical.it/informatica/RetiESicurezzaInformatica/AssegnazioneProgetti2012|2012]] 
   * [[https://www.mat.unical.it/informatica/RetiESicurezzaInformatica/AssegnazioneProgetti2013|2013]] 
   * [[https://www.mat.unical.it/informatica/RetiESicurezzaInformatica/AssegnazioneProgetti2014|2014]] 
   * [[https://www.mat.unical.it/informatica/RetiESicurezzaInformatica/AssegnazioneProgetti2015|2015]] 
   * [[https://www.mat.unical.it/informatica/RetiESicurezzaInformatica/AssegnazioneProgetti2016|2016]]
   * <<newicon>> [[https://www.mat.unical.it/informatica/RetiESicurezzaInformatica/AssegnazioneProgetti2017|Current Project assignments]]


== Teaching Material ==

   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/01-Intro-NS.pptx", text="01 - Introductory lecture", expire=864000)>> 
   * Repository with all the exercises saw during the laboratory sessions - [[https://github.com/fpacenza/NetworkAndSecurity|GitHub]]

=== Cryptography and Digital signature ===
 
 * All slide sets from the book "Criptography and Network Security" [[http://goo.gl/QVMFS3#downlaoddiv|download]] 

 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/02-Cryptography-Part-One.pptx", text="02 - Symmetric Cryptography, Cipher modes, Random numbers", expire=864000)>>

   * Old slide set: <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/ch02-SimmetricCryptography.pptx", text="Symmetric Cryptography", expire=864000)>>
   * Old slide set: <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/ch03-05-DES-AES-CipherModes.pptx", text="DES, AES and Cipher modes", expire=864000)>>
   * Old slide set: <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/ch07-RandomNumbersAndRC4.pptx", text="Random Numbers and stream ciphers", expire=864000)>>
 
 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/03-Cryptography-Part-Two.pptx", text="03 - Diffie-Helmann-like key exchange, Public key encryption, Cryptographic hashes", expire=864000)>>
 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/04-PKI-and-Key-distribution-2020.pptx", text="04 - Key Distribution and PKI", expire=864000)>>
 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/SSL.pptx", text="TLS", expire=864000)>>
 * [[https://www.fehcom.de/qmail/smtptls.html|TLS and smtp]] (Sections 1 to 6 are a good introduction to TLS in general)
 * Ten risks of PKI - [[https://www.schneier.com/academic/paperfiles/paper-pki.pdf|Download]]
 
=== Layer 2 Security ===

 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/LAYER2-ISSUES.pptx", text="Security of Layer 2 Links", expire=864000)>> 
 
 * [[https://ieeexplore.ieee.org/document/7442758|A survey of common MITM attacks]]
 * [[attachment:hakin9_wifi_EN.pdf|WLAN]] technologies and security 

 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/MiTMAttacks.ppt", text="Anatomy of common MITM Layer 2 attacks", expire=864000)>>  


=== Layer 2 & 3: Virtual Private Networks ===

  * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/VPN.pptx", text="Principles and goals of a VPN", expire=864000)>>
 * VPN with [[https://help.ubuntu.com/community/SSH_VPN|SSH Tunneling]]
 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/Linux-VPN-Analysis-Howto_final-1.pdf", text="Linux VPN technical analysis", expire=864000)>>
 * How to setup a  [[http://poptop.sourceforge.net/dox/debian-howto.phtml|PPTP/GRE]] server on Linux
 * How to setup a [[http://www.jacco2.dds.nl/networking/freeswan-l2tp.html|L2TP/IPSec]] server on Linux 
  * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/ipsec.pptx", text="IpSec", expire=864000)>>
  * [[https://www.tldp.org/HOWTO/Adv-Routing-HOWTO/lartc.ipsec.html|IPSec HOWTO]]
 * IPV6 - [[http://www2.garr.it/ws5/pdf/TutorialIPv6.pdf|here]] and [[attachment:sanog5-pfs-ipv6-tutorial.pdf|here]]
 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/Common-VPN-Flaws-2005.pdf", text="Common VPN Security Flaws", expire=864000)>> 
 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/FirewallTraversal.pptx", text="Firewall Traversal", expire=864000)>> 
 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/tor.pptx", text="The TOR network", expire=864000)>> 
 

=== Layer 4 & 5 Security ===

 * [[http://www.symantec.com/connect/articles/apache-2-ssltls-step-step-part-1|SSL+TLS]] infrastructure
 * How to configure an Apache server with a SSL certificate - [[attachment:openssl.pdf|Download]] 


=== Identity management ===

 * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/slides/PasswordStorage.pptx", text="Password workflow, AAA, Identity management", expire=864000)>> 

=== Laboratory sessions ===
  * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_1/Lab_01_Slides.pdf", text="GNS3 slides", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_1/gns3_lab_configuration.pdf", text="GNS3 Laboratory configuration guide", expire=864000)>>
   * [[https://bit.ly/3EbQvIQ|Configuration files]]
  * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_2/Lab_02_Slides.pdf", text="Symmetric Cryptography slides", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_2/cryptocat/Cryptocat.pdf", text="Cryptocat exercise", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_2/steghide/Steghide.pdf", text="Steghide exercise", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_2/Decrypt%20cryptcat%20stream/DecryptCryptcatStream.pdf", text="Decryptcat exercise", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_2/Decrypt%20cryptcat%20stream/wordlist.txt", text="Example Wordlist", expire=864000)>>
  * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_3/Lab_03_Slides.pdf", text="Asymmetric Cryptography and Certificate Generation slides", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_3/guides/WiresharkTLS.pdf", text="How to store and load a SSL/TLS '''Pre-Master Secret''' key", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_3/guides/self_signed_certificate_generation.pdf", text="Self signed certificate generation", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_3/guides/letsencrypt_certificate_generation.pdf", text="Letsencrypt certificate generation", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_3/guides/install_and_configure_apache_linux.pdf", text="Configure Apache on Linux", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_3/TLS%20sockets.pdf", text="TLS client/server socket", expire=864000)>>
  * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_4/Lab_04_Slides.pdf", text="Layer 2 attacks slides", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_4/Challenges/MAC_Flooding/MacFloodingChallenge.pdf", text="Mac Flooding Challenge", expire=864000)>>
   * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_4/Challenges/ARP_Spoofing/ArpSpoofingChallenge.pdf", text="ARP Spoofing Challenge", expire=864000)>>
  * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_6/Lab_06_Slides.pdf", text="Other MITM Attacks", expire=864000)>>
   * IP Spoofing attack with scapy - [[https://github.com/fpacenza/NetworkAndSecurity/tree/main/Other%20MITM%20Attacks/IP%20Spoofing/|GitHub]]
   * ARP Poisoning with Ettercap - [[https://github.com/fpacenza/NetworkAndSecurity/tree/main/Other%20MITM%20Attacks/ARP%20Poisoning%20with%20Ettercap|GitHub]]
   * DNS Spoofing with Ettercap - [[https://github.com/fpacenza/NetworkAndSecurity/tree/main/Other%20MITM%20Attacks/DNS%20Spoofing|GitHub]]
  * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_5/Lab_05_Slides.pdf", text="Wifi cracking", expire=864000)>>
   * WEP cracking - [[https://github.com/fpacenza/NetworkAndSecurity/tree/main/WEP_WPA2_Crack/WEP | GitHub]] | [[https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_5/guides/How_to_crack_WEP_network.pdf | Slides]]
   * WPA2 cracking - [[https://github.com/fpacenza/NetworkAndSecurity/tree/main/WEP_WPA2_Crack/WPA2 | GitHub]]
  * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_7/Lab_07_Slides.pdf", text="Phishing and VPN", expire=864000)>>
   * Phishing Attack - [[https://github.com/fpacenza/NetworkAndSecurity/tree/main/Phishing | GitHub]]
   * VPN Configuration - [[https://github.com/fpacenza/NetworkAndSecurity/tree/main/VPN | GitHub]]
  * <<FancyURL(url="https://www.mat.unical.it/ianni/RSI-Web/esercitazioni/Laboratory_22-23/Session_8/Lab_08_Slides.pdf", text="SSLSTRIP and Password Cracking", expire=864000)>>
   * SSLSTRIP and HSTSHIJACK - [[https://github.com/fpacenza/NetworkAndSecurity/tree/main/sslstrip | GitHub]]
   * Linux Shadow Password Cracking- [[https://github.com/fpacenza/NetworkAndSecurity/tree/main/Password%20Cracking | GitHub]]

=== GNS3 ===

 * [[https://www.gns3.com/|GNS3]]
 * [[https://goo.gl/h0OIZC|Debian Linux Image]]

=== How to install Netkit ===

 * Netkit consists of three files that are [[http://wiki.netkit.org/index.php/Download_Official|here]].
 * Then apply the patch 2 as described [[ElencoFaq|here]].
 * Netkit web site - http://www.netkit.org/