1CS530L CS530L ––lab component of lab component of Security Systems courseSecurity Systems courseAugust 29, 2014CorrelationCorrelationlab component << >> main courselab component << >> main course loosely coupled contributes to course grade– directly: via grading of individual labs– indirectly: subject matter may appear in exams cumulative lab results are reported to Professor Neuman who considers them in determining course grade2Lab sessions per weekLab sessions per week a 50-minute lab lecture– Friday 4:30 pm, in OHE122– addresses the theory that the exercise demonstrates– explains the exercise procedurally an 80-minute lab exercise– at a time the following week– performed hands-on– per specific instructions– assisted by graders - Serhat Yilmaz and Adhip GuptaLab websiteLab websitehttp://www-scf.usc.edu/~csci530l/or equivalentlyhttp://ccss.usc.edu/530lgotcha!letter “ell”notnumber “wun”37 candidate timeslots for scheduling7 candidate timeslots for schedulingLocation: OHE406 - fourth floor Olin Hall1:30p-2:20p12:30p-1:50p3:00p-4:20p10:30a-11:50a10:30a-11:50a9:00a-10:20a 9:00a-10:20aFridayWednesdayMondayLab mechanicsLab mechanics sign up for a lab session by filling out a form4Lab mechanicsLab mechanics form is at http://dmorgan.us/cgi-bin/csvupdate.pl express a preference 1-2, 5, or 0, for each of the 7 timeslots(non-correct, non-complete forms will get discarded and receive later lower priority scheduling; 1=most preferred, 5=least preferred, 0=conflict) give a single 1 and single 2, to your top 2 timeslots give 5’s to all non-conflicting but unpreferred timeslots give 0’s to all conflicting timeslots I will seek to follow preferences response deadline – end of Tuesday 9/2/2014An acceptably filled formAn acceptably filled forma single “1”a single “2”exactly five “5 or 0”sno blanks/omissionsFor the 7 timeslots:Note: web form does notdynamically validate user input up front. But at the backend incorrect records get filtered out before processing. Please enter your preferences carefully to make sure they receive consideration.5Lab exercise mechanicsLab exercise mechanics before: preview website’s posted instructions attend your chosen/assigned lab session lab will be attended by assisting lab grader recover and install your removable hard drive perform the week’s prescribed lab after: turn in requested result electronically– email it to [email protected]– use prescribed email title for each lab– deadline: start of following week’s lab timeslotregardless whether a lab is then actually performed (or is remote)Lab mechanicsLab mechanics there are 10 lab exercises each is followed by a few questions every question must be answered each lab graded fail/lo-pass/pass/hi-pass0 1 2 3 9 highest grades averaged (i.e., lowest discarded) average will influence course grade– average > 2 raises/enhances– average < 2 lowers/damages– average = 2 no effect6Lab workstation installationsLab workstation installations operating platform is Windows 7 hosting virtual (vmware) operating systems– CentOS 6.4 linux– CentOS 4.3 with Snort and overflowable stack– Kali linuxwith hashcat pw cracker and heartbleed attacker– Fedora 19 with heartbleed-vulnerable openSSLPoliciesPolicies no late submissions submissions not accepted without attendance follow course online homes– lab website athttp://www-scf.usc.edu/~csci530l/(different from professor’s main site for the course)– lab lectures on DEN7Representative lab topicsRepresentative lab topics Cryptography/key mgmt Authentication Authorization Application security Packet sniffing Firewalls Intrusion detection ARP spoofing Tunnels & VPNs Computer forensicssubject to adjustment – some changes might be madeCalendar scheduleCalendar scheduleFri lecture Topic lab meeting week of:9/5 Cryptography 9/89/12 Authentication 9/159/19 Authorization 9/229/26 Application security 9/2910/3 Packet sniffing 10/610/10 Firewalls (remote)10/17 Intrusion detection 10/2010/24 arp spoofing (remote)10/31 Tunnels and VPNs (remote)11/7 Computer forensics (remote)Possibility of week off in the middle for midtermProf Neuman’s lectures vs our labs – note 15 weeks vs only 10– we conclude by around mid-November8DEN studentsDEN studentsnext Friday expect announcement of a URL (or posted earlier on lab website) where you can download VMware virtual machines identical to those in the lab (please install VMware player v6 in order to use them)TodayToday’’s takes take--away for your toaway for your to--do listdo list Non-DEN students– please make your timeslot choices per earlier instructions DEN students– install VMware player if you don’t already have some version of VMware9Email contactsEmail contacts [email protected] graders, me, course TA, prof collectively [email protected] individuallyThank youThank you for sharing an interest in the subject matter for your kind attention
View Full Document