T353: Network Security: Practical Approaches from the Front Lines.

Interop - Las Vegas
Thursday-Friday, May 10, 2001 - May 11, 2001

Instructor(s): Jeffrey Schiller - Massachusetts Institute of Technology

Description:
Overview Today's networks require production-quality security. Gone are the days of "friendly" research networks where everyone can be trusted. Building a secure network requires an understanding of real-world network security issues. Available tools include Kerberos, cryptography, firewalls and other security techniques. This course is designed to teach the basics of network security, the problems that we all face in building secure networks, and practical solutions that do exist for many common problems. We will go into detail about MIT's Kerberos authentication system. The fundamentals learned there are applicable to newer systems such as systems based on X.509 certificates, which are gaining in popularity. We'll go over the Secure Sockets Layer (SSL) which is used to secure Web transactions with both the Netscape and Internet Explorer browsers. E-mail solutions such as PGP will be discussed as well.

Who Should Attend

Technical and network managers
Software engineers

Syllabus

Kerberos: Secure authentication across an open network
The role of cryptography, DES and RSA public key cryptography
Firewalls: How to keep the good in and the bad out
Pretty Good Privacy (PGP) and other file and e-mail based solutions
X.509: Where the OSI model leads
Commercial efforts, PKCS and security in groupware
SSL The Secure Sockets Layer (used by Microsoft and Netscape in their browsers)
SSH The Secure "Shell"
Case studies: Major security incidents on the Internet, how they could have been avoided and what you can do to prevent your organization from being the next victim

Instructor Jeffrey I. Schiller is the network manager at MIT and has managed the MIT campus computer network since its inception in 1984. He is the author of MIT's Kerberos Authentication System. Schiller is the Internet Engineering Steering Group's (IESG) Area Director for Security. He is responsible for overseeing security-related Working Groups of the Internet Engineering Task Force (IETF). His recent efforts have resulted in the first U.S. legal version of the popular PGP encryption program being released by MIT. Schiller is also a founding member of the Steering Group of the New England Academic and Research Network (NEARnet), now part of BBN Corporation.

This page has been accessed times since April 18, 2001.