IERG4130 Introduction to Cyber Security / Fall 2024

Announcements

Released: [Hacking Lab #2 - Web Security]. Due: Mon, Dec 9, 11:59PM.
Make-up Lecture time: 9:30 AM-12:30 PM on Dec 2, Monday (Mandatory) and 1:30 PM to 4:30 PM on Dec 3, Tuesday (Optional). Venue: BMS G18.
Lab Hours for Lab2: November 30th (Sat), December 1st (Sun), 7th (Sat), and 8th (Sun)

Venue: ERB 1004

The lab room will be open from 9:00 AM to 8:00 PM on these days, and the TA will be present from 2:00 PM to 5:00 PM for consultation.

While you may complete the lab assignment with your personal laptop, we encourage you to take advantage of TA’s presence during these hours if you have questions or need guidance.
Released: [Hacking Lab #1 - Bonus Only (Buffer Overflow)]. Due: Mon, Dec 2, 11:59PM.
Released: [Hacking Lab #1 - Network Security & Buffer Overflow]. Due: Mon, Nov 25, 11:59PM.
Released: [Assignment #2 - Written+Hands-on Assignment]. Due: Mon, Nov 11, 11:59PM.
Released: [Assignment #1 - Written Assignment]. Due: Fri, Oct 18, 11:59PM.
Tutorial time: 5:30-6:15 PM every Tuesday at SC L2 (Science Centre L2) starting Sep 10.
Website account: student, password: ierg4130

Course Description

Cyber Security is an important topic in modern information and communication technology. This course introduces students to major areas of Cyber Security, including introductions to cryptography, network security, system security, web security and application security.

Topics to be covered include:

Introduction to the problem of Web security: threats, vulnerabilities, and security policies; (3 hrs)
Basic cryptography; Secret key algorithms (DES, 3DES, AES, RC4); (4 hrs)
Hashes, message digests (MD5, SHA) and Message Authentication Codes (MAC); (3 hrs)
Public key algorithms (RSA, Diffie-Hellman); digital signatures; (3 hrs)
Public Key Infrastructure: Certification Authority (CA) and digital certificates; Trust models; (3 hrs)
Authentication: technologies and protocols; (3 hrs)
Network security: attack types (sniffing, spoofing, hijacking, denial-of-service); typical attack process and countermeasures; tools (scanning, filtering, firewalls, wrappers, DMZ, VPN, intrusion detection); (4 hrs)
System security: attacks and defenses; Applications security: Web-applications security pitfalls (client and server); Mobile code security; (6 hrs)
Secure Networking/Application Protocols (IPSec, SSL/TLS) and Applications: email (S/MIME, PGP). (4 hrs)

Prerequisite:

Basic understanding of computer systems and networking protocols;
Not for students who have taken CSCI4130 or ESTR4306 or IEMS5710.

Please check Blackboard for important announcements, assignment submissions, grades, etc.

Course Assessment

Homework Assignments: 25%
Labs/ Hacking Exercises: 25%
Final Written Exam: 40 %
Class Participation: 10%

Attendance

Regular attendance will be vital to your success in this class; some portion of the material presented and tested may not be contained in the notes.

Student/Faculty Expectations on Teaching and Learning

https://mobitec.ie.cuhk.edu.hk/StaffStudentExpectations.pdf

Academic Honesty

You are expected to do your own work and acknowledge the use of anyone else’s words or ideas. You MUST put down in your submitted work the names of people with whom you have had discussions.

Refer to https://www.cuhk.edu.hk/policy/academichonesty for details.

When scholastic dishonesty is suspected, the matter will be turned over to the University authority for action.

You MUST include the following signed statement in all of your submitted homework, project assignments and examinations. Submission without a signed statement will not be graded.

I declare that the assignment here submitted is original except for source material explicitly acknowledged, and that the same or related material has not been previously submitted for another course. I also acknowledge that I am aware of University policy and regulations on honesty in academic work, and of the disciplinary guidelines and procedures applicable to breaches of such policy and regulations, as contained in the website https://www.cuhk.edu.hk/policy/academichonesty/.

Academic Honesty Slides from Associate Dean of Faculty of Engineering

Use of Generative AI tools policy

Students are NOT allowed to use any Generative AI tools (e.g., ChatGPT) for any homework/ lab assignments in this course.

Any violations will be treated as cheating.

Time and Venue

Lectures:

Mon 11:30AM - 1:15PM (Science Centre L4)
Tue 1:30PM - 2:15PM (Basic Med Sci Bldg G18)
Mon 9:30AM - 12:30PM (Basic Med Sci Bldg G18 for Make-up lecture on Dec 2 (Mandatory))
Tue 1:30PM - 4:30PM (Basic Med Sci Bldg G18 for Make-up lecture on Dec 3 (Optional))

Tutorials: