Course

Syllabus

Introduction – Overview of computer networks and network security, Introduction to Application Layer, Transport Layer, Network and Link Layers.

Weaknesses, vulnerabilities, and attacks against the above protocols – hijacking, spoofing and DoS attacks. Attacks using above protocols: simple, amplified, and distributed DoS attacks.

OSI Security Architecture, security attacks, security services, CIA Triad, Encryption, and message confidentiality,

Application layer security – Goals, TLS – Objectives, protocol, working and features, PGP: Overview, objective, working, features, and limitations. Network Layer Security – IPSec: Introduction, Tunnel and Transfer Modes, IPSec Authentication Header, Encapsulating Security Header and Payload, IPSec Key Exchange and VPNs. Firewalls, Intrusion Detection Systems, and Intrusion Prevention Systems. Snort, Signature and Anomaly based detection, IPtables, Honeypots, and Honeynet.

Attacks against transport layer protocols: UDP flooding, TCP spoofing, TCP connection hijacking, TCP SYN flood. Attacks against vulnerabilities in ARP. BGP security, Secure Network Communication: SCP, SSH, TLS 1.2, STARTTLS, and Secure HTTP; Attacks on SSL/TLS: SSL stripping, Drown and Poodle attack.

AI-based Intrusion Detection Systems, Traffic Analysis using AI, Adversarial Machine Learning for Network Security

Text Books / References

1. James F Kurose and Keith W Ross “Computer Networks – A top-down approach”, Pearson – 7^th Edition, 2017
2. Wenliang Du, “Internet Security: A Hands-On Approach”, Peason – 3rd Edition, 2022
3. William Stallings, “Network Security Essentials – Applications and Standards”, Sixth Edition, Pearson, 2017.
4. William R Cheswick, Steven M Bellovin, Aviel D Rubin “Firewalls and Internet Security – Repelling the Wily Hacker”
5. Kaufman, Perlman, and Speciner.” Network Security: Private Communication in a Public World”, Second Edition, Prentice Hall PTR

Preamble: This course provides a comprehensive study of computer networking concepts and the security challenges associated with networked environments. It covers the architecture and operation of network protocols across the application, transport, network, and link layers, along with common vulnerabilities and attacks targeting these protocols. The course introduces fundamental security principles, cryptographic techniques, secure communication protocols such as TLS, SSH, IPSec, and VPNs, and network defense technologies including firewalls, intrusion detection and prevention systems, honeypots, and traffic monitoring tools.

The course further explores contemporary advancements in network security, emphasizing AI-enabled intrusion detection, machine learning-based traffic analysis, and adversarial machine learning techniques for cyber defense. Through theoretical concepts, hands-on laboratory exercises, protocol analysis, and research-oriented problem-solving, students will develop the ability to design, implement, and evaluate secure networked systems. The course prepares students for advanced research and professional practice in network security, cyber defense, and intelligent security analytics.

Course Objectives:

• To provide a comprehensive understanding of computer network architectures, protocols, and their security implications.
• To familiarize students with fundamental security concepts, including confidentiality, integrity, availability, authentication, and access control.
• To develop the ability to identify, analyze, and mitigate vulnerabilities and attacks across different layers of the TCP/IP protocol stack.
• To introduce cryptographic techniques and secure communication protocols used to protect data and network services.
• To enable students to design and evaluate secure network architectures using technologies such as TLS, IPSec, SSH, VPNs, and firewalls.
• To provide hands-on experience with network monitoring, traffic analysis, intrusion detection, intrusion prevention, and security assessment tools.
• To develop skills for implementing and evaluating network defense mechanisms against modern cyber threats, including DoS/DDoS attacks, spoofing, and routing attacks.
• To introduce AI and machine learning techniques for network traffic analysis, anomaly detection, and intelligent intrusion detection systems.

Course Outcomes:

CO-PO Mapping:

Evaluation Pattern: