Learn about how cryptography tools are used to achieve information security with Justin Tracey (University of Waterloo).
The workshop will consist of five lectures in QNC 1201:
- Monday May 15, 2023, 10:30am-12pm
- Tuesday May 16 2023, 11am-12:30pm
- Wednesday May 17, 2023, 10:30am-12pm
- Thursday May 18 2023, 11am-12:30pm
- Friday May 19, 2023, 10:30am-12pm
Detailed content:
1. Basics of Information Security
- Security architecture and infrastructure; security goals (confidentiality, integrity, availability, and authenticity); threats/vulnerabilities/attacks; risk management
2. Cryptographic Building Blocks
- Symmetric crypto: ciphers (stream, block), hash functions, message authentication codes, pseudorandom functions
- Public key crypto: public key encryption, digital signatures, key agreement
3. Network Security Protocols & Standards
- Overview of networking and PKI
- Transport Layer Security (TLS) protocol
- Overview: SSH, IPsec, Wireless (Tool: Wireshark)
4. Offensive and defensive network security
- Offensive: Pen-tester/attack sequence: reconnaissance; gaining access; maintaining access; denial of service attacks (Tool: nmap)
- Defensive: Firewalls and intrusion detection
5. Access Control & Authentication; Web Application Security
- Access control: discretionary/mandatory/role-based; phases
- Authentication: something you know/have/are/somewhere you are
- Web security: cookies, SQL injection
- Supplemental material: Passwords
This workshop is part of the CryptoWorks21 program at the University of Waterloo, but is open to graduate students, post-docs, and industry researchers across Canada.
Learn more about CryptoWorks21 at https://cryptoworks21.uwaterloo.ca.
