News

Exercises for the Linux lab at thursday 10.30 in the unix-lab can be found at http://www.iu.hio.no/~haugerud/unix

First lab thursday at 10.30 in the Unix lab. No lab on Wednesday.

First lecture will be monday 20 august, probably in room PS323 at 12.30.

Intrusion detection and firewall security (MS004A)

Course info Staff: Hårek Haugerud
Builds on: Network and system administration 1, Security
10 ECTS Lectures in ENGLISH Level: Master Term: Autumn

[Student login]

Course plan
NotesTopicExercisesHints
1[en-pdf] Course overview, Linux shell [en]
2[en] Course overview: hostile data streams [en]
3[en] TCP,UDP,IP and network communication in general [en]
4[en] Firewalls and some architectures [en]
5[en] Network Filtering rules and IPtables syntax [en]
6[en] Forwarding and NAT [en]
7READING WEEK
8[en] Testing firewalls
9[en] Host intrusion detection [en]
10[en] Network Intrusion Detection and Snort [en]
11[en] Snort [en]
12[en] IPS, Honeypots [en]
13[en] Mitnick Attack, Anomaly detection [en]
14[en] Forensics, Log analysis [en]
15 Summary [en]
Resources and Links
USENIX/SAGE association CERT Connection tracking on rex with world map.
CAIDA Securityfocus (Bugtraq) The National Security Agency (US)
Økokrim Datatilsynet Symantec scurity response
Silicon Defence Firewall lab Master wiki
dshield.org sans.org TCP/IP pocket reference guide
VirusInfo MS05-039 exploit Vulnerability Exploits Break Records
Mark Burgess: Unix Mark Burgess: Unix (PDF)