CONTENTS

• Access Control & OS
  1. Tutorial Overview
  2. Windows Lab Procedures
  3. Unix 's File System
  5. SOLARIS
  6. SOLARIS Lab Procedures
• Apache SSL
  1. Tutorial Overview
  2. Installing Components
  3. Creating a Certificate
  4. Configuring Apache SSL
• Authenticode
  1. Tutorial Overview
  2. Installing .NET Framework SDK
  3. Signing a File
  4. Verifying a Signature
• Common Criteria Methodology
  1. Tutorial Overview
  2. General Evaluation Guidelines
  3. Evaluation of Functional Requirements TOE
  4. Questions
  5. References
• Cryptography with C#
  1. Tutorial Overview
  2. C# .NET Framework Examples
  3. Message Authentication
  4. Digital Signatures
  5. Exercises
  6. Resources
• Cryptographic Libraries
  1. Tutorial Overview
  2. OpnelSSL's Toolkit
  3. Java Cryptography Extension
  4. Exercises
  5. Resources
• Firewall Access Control Lists
  1. Tutorial Overview
  2. Technical Details
  3. Telnet and FTP
  4. Lab Report
• Firewall Configurations & Attacks
  1. Tutorial Overview
  2. Attacking Without a Firewall
  3. Filter an IP Address
  4. Filter TCP Traffic
  5. Misconfigured Firewall Examples
  6. Exercises
• Forensics
  1. Tutorial Overview
  2. Exercises
  3. Hidden Data
  4. Steganography
  5. Viewing IE Cache
  6. Installation Instructions
• IIS & Server 2003
  1. Tutorial Overview
  2. Installing Components
  3. Create a Certificate Request
  4. Submit a Certificate Request
  5. Installing a Certificate
  6. Secure Certificate Services
  7. Secure the Server
  8. Secure IIS
• IPSec and VPN Tunnel
  1. Tutorial Overview
  2. Technical Details
  3. VPN Tunnel Parameters
  4. Lab Report
• Java Code Signing
  1. Tutorial Overview
  2. Installing Java & Signing a File
  3. Verifying a Signature
• Network Protocol Analyzers
  1. Tutorial Overview
  2. TCPDump
  3. Ethereal
  4. Sniffer Distributed System
  5. Telnet Session
• PKI
  1. Tutorial Overview
  2. Installing Thunderbird
  3. Installing GPG and Enigmail
  4. Create and Use Key Pairs
• Secure Cookies
  1. Tutorial Overview
  2. Installing Components
  3. Creating a Secure Cookie
• Three Tier

This site provides access to educational materials on security developed by faculty at the University of Pittsburgh and the University of Puerto Rico with support from the National Science Foundation, specifically, the Federal Cyber Service Scholarship for Service.

The faculty involved in the project included James Joshi, Prashant Krishnamurthy, Michael B. Spring, and David Tipper from the University of Pittsburgh and Yi Qian from the Univeristy of Puerto Rico. The project began in Spetember, 2004 and is ongoing although NSF support for this effort ended in August of 2006. The NSF award of $286,710 supported the development of courses and labs. For more information on the courses, follow the links below. including:

The President’s Critical Infrastructure Protection Board “National Strategy to Secure Cyberspace” lists developing and sustaining a well-trained, highly skilled domestic corps of IT security professionals as a national priority. This project developed and implemented a Security Assured Information Systems (SAIS) track in the Information Science (BS., MS., Ph.D.) and Telecommunications degrees (M.S. and Ph.D.) offered by the University of Pittsburgh. For more specificas on the tracks, see the SIS website or the LERSAIS website. This track provides education in the development, design and deployment of secure information systems with an emphasis on networked information systems. The goal is to produce IT professionals with the knowledge to cope with the special security challenges (e.g., intrusion detection) posed by conventional and emerging network information systems (e.g., wireless local area networks) and their applications and services. The SAIS tracks consist of a set of required and elective coursework together with a practicum/capstone course. A core component of the coursework is a set of innovative laboratory exercises and classroom experiments that will illustrate theoretical concepts and technologies and provide students hands on experience. For more information on the labs and tutorials, follow the links below.