IT 444: Network
Security II
Textbook:
Gray Hat Hacking: The
ethical hacker’s handbook (5th edition) By McGraw Hill
ISBN: 978-1-26-010842-2
Ethical Hacing and Countermeasure: Threats and defense mechanisms
By EC-Council
ISBN-10: 1305883446
ISBN-13: 978-1305883444
Prerequisites:
IT443
Course Description
Information Technology specialists
spend a significant amount of time to protect the corporate network from
anonymous attacks. Even with the strongest perimeter, corporate still cannot
have a complete protection against attacks.
Cybercrime can originate from the internet or from inside
the corporate network. This course introduces a wide range of tools and
techniques hackers use to penetrate the network, or gain access to high profile
systems. By gaining an understanding of virus, malware, social engineering
attacks, web attacks, or attacks via existing Operating System vulnerabilities,
Information Technology specialists can develop a strong countermeasures and
defensive system for their corporate network.
Topics Covered
1 Course description, lab development
2 Vulnerability Dissecting
3 Social Engineering
4 Linux Exploit
5 Windows Exploit
6 Denial of Service
7 Buffer Overflow
8 Windows vulnerability penetrating with GUI tools
9 Windows vulnerability penetrating with Metasploit
10 Website weak authentication discovering and script injection
11 Securing site to site traffic with VPN tunnel
Format of the Course
This is a combined lecture and lab course.
The student will use the lecture time to learn the theory, the
background and the ethnical concept.
They will use the class exercise time for the practical lessons. They
will penetrate the network and assess the level of security each lab computer
system has.
There will be two exams to cover the theory discussed in each text book
chapter.
Grading Policy
All homework and exams are subject to the honor code. Plagiarism is not
allowed in any form.
Grades will be computed as follows:
Class Exercises 50%
First Exam 20%
Second Exam 20%
Attendance 10%
Final grades will be given based on the following standard scale:
A 100 – 93 A- 92 – 90
B+ 89 – 86 B 85 – 83
B- 82 – 80 C+ 79 – 76
C 75 – 73 C- 72 – 70
D+ 69 – 66 D 65 – 63
D- 62 – 60 F < 60
Accommodations for Students with Disabilities
Section 504 of the Americans with Disabilities Act of 1990 offers
guidelines for curriculum modifications and adaptations for students with
documented disabilities.
Students may obtain adaptation recommendations from the Ross Center for
Disability Services.
Their web site is https://www.umb.edu/academics/vpass/disability.
The student must present these recommendations and discuss them with me
within a reasonable period, preferably by the end of Add/Drop period.
Late Work
There will be no penalty for work that is one day late.
Thereafter, students may lose 10 points for each day that an assignment
is late.
Students can never get a negative score.
If you have a personal emergency that makes you unable to submit an
assignment on time, send me an email and I will not assign the penalty.
Academic Honesty
The Academic Honesty section the Code of Student Conduct of the
University reads as follows
It
is the expressed policy of the University that every aspect of academic life
not only formal coursework situations, but all relationships and interactions
connected to the educational process shall be conducted in an absolutely and
uncompromisingly honest manner. The University presupposes that any submission
of work for academic credit indicates that the work is the student’s own and is
in compliance with University policies. In cases where academic dishonesty is discovered
after completion of a course or degree program, sanctions may be imposed
retroactively, up to and including revocation of the degree. Any student who
reasonably believes another student has committed an act of academic dishonesty
should inform the course instructor of the alleged violation.
Contacting Me
If you have a question, email me at stran@cs.umb.edu.
Don't hesitate to email me if you have a problem.
If something doesn't make sense to you, drop me an email.
It is your responsibilities to get the information you need to complete
the assignments you are given.
If you are confused about an assignment and have not tried to contact
me, I will not be sympathetic.