CPSC 557 / 601.96 - Winter 2006

News

Unofficial final grades are available here here. Please notify Prof. Jacobson of any recording errors as soon as possible. I will submit the final letter grades on Wednesday, May 3 after 4:30 PM.

You may pick up your graded Assignment 4, term test, and reseach projects from the front CPSC office.

Apr 24 - Solutions for Assignment 4 are posted.
Apr 7 - The lecture on Monday, April 10 is cancelled. The in-class term test will take place during the usual lecture time on Wednesday, April 12. I will be available in my office on the afternoon of Tuesday, April 11 for consultation.
Apr 5 - Solutions for Assignment 3 are posted.
Apr 5 - Do not forget to exchange PGP public key fingerprints in person with the TA. If you haven't already done so, please see him during regularly scheduled office hours.
Apr 5 - Due to problems with the tripwire installation in the lab, Problem 6 will not be included in the assignment (i.e., max available marks will be 85 instead of 100). Students who submit the written description for Problem 6 and attempt the demo will receive up to 15 bonus marks.
Apr 4 - The schedule for the graduate student research presentations is listed below. All presentations will take place in ST 130.
- April 17, 10:00-10:50 - Will Lorimer, "Cryptography and the Paranormal: The Use of Cryptography as a Control in Paranormal Research"
- April 17, 11:00-11:50 - Taisya Krivoruchko, "Replay, Man In The Middle and Type Flaw Attacks"
- April 18, 10:00-10:50 - Tanvire Elahi, "Co-operative Intrusion Detection in Wireless Ad-hoc Networks"
- April 18, 11:00-11:50 - Greg Leighton, "A Survey of XML Access Control Methods"
- April 19, 10:00-10:50 - Kai Hu, "The application of agent technology in intrusion detection"
Apr 4 - A sign-up sheet for the Assigment 4 lab demos will be passed around in class on Apr 5 and 7. It you're unable to attend either of these lectures, it will be posted outside my office as well.
Apr 3 - To get VisualZone and ZoneAlarm to work well together in the lab, you need to change the location of the log file from the default location (C:\WIndows\Internet Logs\ZALog.txt) to a location without file access restrictions (eg. C:\Temp\ZALog.txt). If the log file location is changed in both programs in this way, the programs should work fine.
Mar 27 - Slides from Kjell Wooding's guest lecture are available on the "handouts" page.
Mar 27 - A list of scans the TA may perform for Assignment 4, Problem 7 can be found on the "handouts" page.
Mar 24 - Assignment 4 is posted (due Wednesday, April 12 by 4:00 PM).
Mar 17 - PowerPoint slides of a talk at PST 2005 on the connection between security and trust, especially in the context of PKI here.
Mar 17 - Description of recent "gpg vulnerability".
Mar 16 - Solutions for Assignment 2 are posted.
Mar 13 - Problem 13.5 in the textbook erroneously refers to a protocol from Problem 13.1. The correct reference is Problem 13.4 - the protocol in question is the revised version of the Woo-Lam protocol found at the bottom of p.387.
Mar 1 - Assignment 3 is posted (due Wednesday, March 22 by 4:00 PM). The client and server skeleton programs and an Openssl crypto library demo program (with Makefile) for Problem 5 can be found on the "handouts" page. A number of links to documentation on the Openssl crypto library can be found on the "external pages" page.
Feb 27 - Due to popular demand, the deadline for Assignment 2 has been extended to Wednesday, March 1.
Feb 20 - Solutions for Assignment 1 are posted.
Feb 15 - A sample RSA implementation (Assignment 1, Question 6) has been posted on the "handouts" page. You may use this as the basis for Assignment 2, Question 6 (RSA-OAEP) if you were not able to get your implementation for Assignment 1 working.
Jan 27 - Office hours for next week will be Wednesday, Feb 1, 11:00-13:00.
Jan 26 - CISaC (Centre for Information Security and Cryptography) runs a distinguished lecture series on Information Security. The first lecture in on Thursday, Feb 2 12:00-13:00 by Ian Wilms (IBM Canada) on "Building a National Security Cyberspace Protectorate." Abstracts, speaker bios, and the schedule for the rest of the term can be found here.
Jan 16 - Updated versions of Assignments 1 and 2 with the correct written problems (corresponding to edition 4 of the text) have been posted.
Jan 2 - Assignment 2 is posted (due Monday, Feb 27 by 4:00 PM). The driver program and the required timer class files be found on the "handouts" page.
Jan 2 - Assignment 1 is posted (due Monday, Feb 6 by 4:00 PM). The driver program for A1 problem 5 can be found on the "handouts" page.
Jan 2 - A simple example program using the number theory C++ library NTL can be found on the "handouts" page.
Jan 2 - A sample term test has been posted on the "handouts" page.
Jan 2 - A description of the research project and two sample project proposals can be found on the "handouts" page.

Tentative Course Schedule

Week Topic Course Work

09/01 Introduction and motivation (Ch 1 Stallings); OSI security architechture, weaknesses of "textbook" public-key cryptography NA

16/01 Mechanisms for data integrity (Ch 11,12 Stallings); message authentication codes, hash functions, security, examples (SHA-1, CBC-MAC, HMAC) 16/01 Assignment 1 set

23/01 Random numbers and OAEP (Ch 7 Stallings); pseudorandom number generation (ANSI X9.17), cryptographically secure random bit generators (Blum-Blum-Shub), plaintext-aware public-key encryption (RSA-OAEP) NA

30/01 Key management (Ch 7,14 Stallings) ; key distribution centers, public-key infrastructures, ID-based cryptography NA

06/02 Authentication (Ch 13 Stallings); basic mechanisms, authenticated key agreement (variations of Needham-Schroeder, station-to-station) 06/02 Assignment 1 due; Assignment 2 set

13/02 Access control (Ch 14 Stallings); password mechanisms and one-time passwords (S/KEY), SSH, Kerberos NA

20/02 Reading week NA

27/02 Secure email and web security (Ch. 15,17 Stallings); PGP and SSL (TLS) 27/02 Assignment 2 due; Assignment 3 set

06/03 IPSec and virtual private networks (Ch 16 Stallings); Overview of IPSec architecture, Internet Key Exchange (IKE) 06/03 Research project proposal due

13/03 Guest lectures; March 13 - Kjell Wooding (Real World (in)Security) NA

20/03 Intrusion detection (Ch 18 Stallings); hacking methodology and techniques, theory of intrusion detection, systems 20/03 Assignmnet 3 due; Assignment 4 set

27/03 Firewalls (Ch 20 Stallings); introduction, usage NA

03/04 Student presentations NA

10/04 Student presentations and term test 10/04 Assignment 4 due; 12/04 Term test (in class); 13/04 Research project due (16:30 in my office)

Assignments:	PS:	1 - 2 - 3 - 4	PDF:	1 - 2 - 3 - 4
Solutions:	PS:	1 - 2 - 3 - 4	PDF:	1 - 2 - 3 - 4

Week	Topic	Course Work
09/01	Introduction and motivation (Ch 1 Stallings); OSI security architechture, weaknesses of "textbook" public-key cryptography	NA
16/01	Mechanisms for data integrity (Ch 11,12 Stallings); message authentication codes, hash functions, security, examples (SHA-1, CBC-MAC, HMAC)	16/01 Assignment 1 set
23/01	Random numbers and OAEP (Ch 7 Stallings); pseudorandom number generation (ANSI X9.17), cryptographically secure random bit generators (Blum-Blum-Shub), plaintext-aware public-key encryption (RSA-OAEP)	NA
30/01	Key management (Ch 7,14 Stallings) ; key distribution centers, public-key infrastructures, ID-based cryptography	NA
06/02	Authentication (Ch 13 Stallings); basic mechanisms, authenticated key agreement (variations of Needham-Schroeder, station-to-station)	06/02 Assignment 1 due; Assignment 2 set
13/02	Access control (Ch 14 Stallings); password mechanisms and one-time passwords (S/KEY), SSH, Kerberos	NA
20/02	Reading week	NA
27/02	Secure email and web security (Ch. 15,17 Stallings); PGP and SSL (TLS)	27/02 Assignment 2 due; Assignment 3 set
06/03	IPSec and virtual private networks (Ch 16 Stallings); Overview of IPSec architecture, Internet Key Exchange (IKE)	06/03 Research project proposal due
13/03	Guest lectures; March 13 - Kjell Wooding (Real World (in)Security)	NA
20/03	Intrusion detection (Ch 18 Stallings); hacking methodology and techniques, theory of intrusion detection, systems	20/03 Assignmnet 3 due; Assignment 4 set
27/03	Firewalls (Ch 20 Stallings); introduction, usage	NA
03/04	Student presentations	NA
10/04	Student presentations and term test	10/04 Assignment 4 due; 12/04 Term test (in class); 13/04 Research project due (16:30 in my office)

CPSC 557 / 601.96 (Winter 2006) Applied Cryptography and Network Security

CPSC 557 / 601.96 (Winter 2006)
Applied Cryptography and Network Security