ITX8063 2011

Course Description

• Schedule
  • The course will be conducted on the second half of Autumn semester of 2011/2012
  • First lecture/lab on 25th of October

• EAP: 3.00

• Course Objectives and Organization
  • Main objective is to give a good technical overview of different attack methods and vulnerabilities the attackers are exploiting to compromise IT systems. Malware in general is out of the scope as this topic will be covered in detail in specific course.
  • We will not use strong academic approach. Rather, we will focus on the current problems and practical issues of IT security.
  • There will be less lectures and more hands-on work on lab systems
  • The labs are built around Capture The Flag Exercises
    1. We set up purposely vulnerable systems
    2. Student's job is to identify vulnerabilities, gain access somehow and find the flag from the systems
    3. First one gets the most points
    4. Afterwards: securing and patching the systems

• Instructors
  • Responsible: Kaur Kasak, kaur.kasak(at)gmail.com, +372 52 17 946
  • There will be several instructors for this course: Mehis Hakkaja, Roman Palik, Tarko Tikan, Jaanus Kääp, Mait Peekma
  • Our aim is get presentations from persons who have strong real-world experience

• Prerequisites
  • Experience in administrating Linux and Windows based systems
  • Understanding of main networking protocols (IP, TCP, UDP, ICMP, ARP, DNS, HTTP)
  • Some experience with web technologies and relational databases (HTML, PHP, MySQL, Javascript)
  • Programming skills in any standard high-level language

• General List of Topics
  1. Introduction. Attack Phases. Reconnaissance
  2. Scanning and Enumeration
  3. Password and Brute-Force Attacks
  4. Man-In The Middle Attacks
  5. Attacks and Defence of Network Infrastructure
  6. Exploitation
  7. Web Application Security (Jaanus Kääp, Mait Peekma)
     • Web Application Mapping and Reconnaissance
     • Authentication and Authorization (Lab:Jaanus)
     • Session Management

• 1. • Injection (code, OS command, SQL, log injection)
     • Direct Object Reference
     • XSS
     • CSRF

• 1. • Special Functionalities (password recovery, default pwd generation).
     • Business Logic Flaws (Lab:Jaanus)
     • Resource Intensive Queries
     • Error Handling and Logging (Lab:Jaanus)
     • Rich Internet Applications (Flash, Silverlight,...)

Schedule

• Starting from the second half of the semester
• Tuesdays, 17:45-21:00, IT-213E, IT-213I

• This is a DRAFT SCHEDULE

25.10 I

• Introduction (Mehis Hakkaja)
• Access to Lab
• Reconnaissance. Scanning and Enumeration
• Password and Brute-Force Attacks

01.11 II

• 17:45-19:15: Attacks and Defence of WAN infrastructure (Tarko Tikan)
• 19:30-21:00: Attacks and Defence of LAN infrastructure

08.11 III

• DNS Security
• Mail Security

15.11 IV

• Exploitation

22.11 V

• Exploitation

29.11 VI

• Web Application Security

06.12 VII

• Web Application Security

13.12 VIII

• Web Application Security

Grade assignment

• 5 first on the scoreboard will get 85%
• Lab report 50%
• Written Exam (closed-book) 50%
• Bonus for Practical Homework (web exploit analysis) 15%