AN TON MNG

1. Thng tin v ging vin H v tn: Chc danh, hc hm, hc v: C quan cng tc: Cng ngh in thoi: 7547611 H v tn: Chc danh, hc hm, hc v: C quan cng tc: Cng ngh in thoi: 7547064 2. Thng tin chung v mn hc Tn mn hc: An ton mng Ma s mn hc: S tin chi: 2 Cc mn hc tin quyt: Cc mn hc tin quyt: Mng v truyn d liu nng cao Hc phn: Bt buc: La chn: Cc mn hc k tip: Cc yu cu i vi mn hc (nu c): Gi tin chi i vi cc hot ng: Nghe ging l thuyt: 24 Lm bi tp trn lp: 0 Tho lun: 6 Thc hnh, thc tp: 0 T hc: 0 a chi Khoa/ b mn ph trch mn hc: B mn Mng v Truyn thng my tnh Nguyn i Th GV, TS Khoa Cng ngh Thng tin, Trng i hc Email: thond_cn@vnu.edu.vn Trnh Nht Tin PGS, TS Khoa Cng ngh Thng tin, Trng i hc Email: tientn@vnu.edu.vn

3. Mc tiu ca mn hc Kin thc:

Cc bi ging cung cp cho hc vin nhng kin thc sau y:

Cc khi nim c bn v an ninh truyn thng v an ninh h thng Tng quan v cc gii thut v giao thc m ha khi i xng, mt m kha cng khai, cc phng php xc thc, hm bm, ch k s, v cc k thut qun l kha Mt s dch v xc thc ph bin mc ng dng Mt s phng thc ch yu m bo an ninh th in t C ch an ninh mng tng IP Mt s phng thc chun m bo an ninh cho cc giao tc trn nn Web Cc bin php an ninh trong mt giao thc qun tr mng c s dng rng ri nht hin nay Nhng him ha do cc k xm nhp h thng gy ra v cc bin php i ph Nhng him ha do cc phn mm gy hi gy ra v cc bin php i ph Cch thc s dng tng la v khi nim h thng ng tin cy

Ky nng:
Cc bi tp rn luyn cho hc vin nhng k nng sau y: Vn dng cc phng php mt m hc trong cc giao thc mng phc v mc ch m bo an ninh truyn thng Tho lun v nhng vn chnh yu lin quan n an ninh mng Phn tch pht hin cc yu im ca cc h thng mng v cc him ha tn cng p dng mt cch thch hp cc k thut cn bn m bo an ninh truyn thng v an ninh h thng trong cc tnh hung cn thit xut v xy dng cc gii php m bo an ninh ca cc h thng mng

4. Tom tt ni dung mn hc
Mn hc bt u bng mt chng gii thiu (chng 1), sau c t chc thnh ba phn. Phn th nht gm cc chng 2 v 3 im li nhng kin thc mt m hc c bn bao gm cc ch v m ha, hm bm, ch k s v trao i kha l nn tng chung cho cc ng dng an ninh mng. Phn th hai tri di t chng t 3 n chng 8 cp n mt lot cc cng c v ng dng an ninh mng quan trng bao gm h thng xc thc phn tn Kerberos, cc chng thc X.509v3, chng trnh th in t PGP, chun m rng khun dng th in t S/MIME, giao thc an ton tng IP IPSec, giao thc an ton tng TCP SSL/TLS, giao thc an ton giao dch th tn dng SET, v chun giao thc qun tr mng SNMPv3. Phn th ba bao gm ba chng cui tp trung vo cc vn an ninh mc h thng, t nhng him ha do cc k xm nhp v cc phn mm gy hi gy ra, cc bin php i ph vi nhng him ha ny, n c ch s dng tng la v cc h thng ng tin cy.

5. Ni dung chi tit mn hc Chng 1. Gii thiu

1.1. 1.2. 1.3. 1.4. 1.5. 1.6.

Khi nim an ninh mng Kin trc an ninh OSI Cc hnh thc tn cng Cc dch v an ninh Cc c ch an ninh M hnh an ninh mng

Chng ny gii thiu h thng cc khi nim mang tnh cht c s ca lnh vc an nnh mng, phc ha mt bc tranh khi qut v lnh vc ny.

Chng 2. M ha i xng v bo mt thng bo 2.1. 2.2. 2.3. 2.4. 2.5. Cc nguyn tc ma ha i xng Cc gii thut ma ha i xng Cc phng thc ma ha lin hp B tri cc thit b ma ha Phn phi kha

Chng ny cung cp cc khi nim lin quan n vn bo mt thng bo, gii thiu c ch hot ng ca mt s gii thut m ha khi i xng thng dng bao gm DES (Data Encryption Standard), 3DES (phin bn m ha ca DES), v AES (Advanced Encryption Standard), ng thi cp n vn t chc thc hin m ha v cch thc qun l cc kha b mt.

Chng 3. Mt m kha cng khai v xc thc thng bo 3.1. 3.2. 3.3. 3.4. 3.5. 3.6. Cc phng php xc thc thng bo Cc hm bm an ton Cc nguyn tc mt ma kha cng khai Cc gii thut mt ma kha cng khai Ch k s Qun l kha

Chng ny u tin cp n vn m bo an ninh mng bng bin php xc thc thng bo (vi cc phng php tiu biu c xt n l m xc thc thng bo v hm bm), tip gii thiu phng php m ha kha cng khai (i su trnh by gii thut RSA c trng v k thut trao i kha Diffie-Hellman), cui cng lm r khi nim ch k s v m t cc phng php qun l kha da trn m ha kha cng khai.

Chng 4. Cc ng dng xc thc 4.1. H thng xc thc Kerberos 4.2. Dch v xc thc X.509 4.3. C s h tng kha cng khai

Chng ny tho lun hai trong s cc ng dng xc thc quan trng nht hin ang c s dng l h thng xc thc Kerberos da trn m ha i xng v chun X.509 c t cu trc cc chng thc kha cng khai km theo cc giao thc xc thc mu s dng cc chng thc ny, m hnh qun l cc chng thc kha cng khai cng s c cp n.

Chng 5. An ninh th in t 5.1. Chng trnh PGP 5.2. Chun S/MIME

Chng ny m t hai phng php tiu biu m bo an ninh th in t l phn mm PGP (Pretty Good Privacy) thch hp cho s dng c nhn v chun m rng khun dng th in t S/MIME (Secure/Multipurpose Internet Mail Extension) hng ti ng dng trong cc giao dch thng mi v c t chc.

Chng 6. An ninh IP 6.1. 6.2. 6.3. 6.4. 6.5. 6.6. Khi nim an ninh IP Kin trc an ninh IP Giao thc AH Giao thc ESP Kt hp cc lin kt an ninh Qun l kha

Chng ny nghin cu cc giao thc m bo an ninh mng mc IP (Internet Protocol) thay v i vo cc c ch chuyn bit mc ng dng, cc tnh nng an ninh IP bao gm xc thc, bo mt, v qun l kha.

Chng 7. An ninh Web 7.1. Khi nim an ninh Web 7.2. Cc giao thc SSL v TLS 7.3. Giao thc SET
Chng ny trnh by kin thc tng quan v vn m bo an ninh cho cc giao tc trn nn Web, trong i su kho st hai phng thc c chun ha gn lin vi cc ng dng thng mi in t l SSL/TLS (Secure Sockets Layer/Transport Layer Security) v SET (Secure Electronic Transaction), trong SSL/TLS c chc nng cung cp cc dch v an ninh ph qut trn nn TCP cho cc ng dng s dng giao thc ny, cn SET c thit k ring cho mc ch bo v cc giao dch th tn dng.

Chng 8. An ninh qun tr mng 8.1. Cc khi nim c bn ca giao thc SNMP 8.2. C s lin hp trong phin bn SNMPv1

8.3. Phin bn SNMPv3

Chng ny tp trung vo SNMP, m hnh qun tr mng c s dng ph bin nht hin nay, gii thiu t bin php m bo an ninh gin n duy nht trong phin bn SNMPv1 l xc thc da trn mt khu n mt lot cc tnh nng an ninh m rng do phin bn SNMPv3 cung cp.

Chng 9. Cc k xm nhp 9.1. Khi nim k xm nhp 9.2. Pht hin xm nhp 9.3. Qun l mt khu
Chng ny im qua nhng him ha i vi cc h thng my tnh ni mng do nhng ngi dng khng c php (nhng k xm nhp) gy ra, phn tch cc bin php phng trnh v pht hin, ng thi m t tng i chi tit vn qun l mt khu, bin php thit yu chng li cc hnh thc xm nhp.

Chng 10. Phn mm gy hi 10.1. Virus v cc him ha lin quan 10.2. Cc bin php phng chng virus 10.3. Cc hnh thc tn cng t chi dch v phn tn
Chng ny kho st nhng him ha do cc phn mm gy ra i vi cc h thng my tnh, lit k cc loi phn mm gy hi, trong phn tch k v bn cht ca cc virus v worm cng cc bin php phng trnh, cui cng dnh mt phn quan trng tho lun v cc hnh thc tn cng t chi dch v phn tn.

Chng 11. Tng la 11.1. Cc nguyn tc thit k tng la 11.2. Cc h thng ng tin cy 11.3. Cc tiu chun chung nh gi an ninh cng ngh thng tin
Chng ny trang b kin thc tng quan v mt bin php bo v hu hiu cc ti nguyn my tnh cc b khi cc nguy c tn cng t bn ngoi l tng la, thng qua cc ch v cc nguyn tc thit k, cc k thut trin khai, v vn an ninh ca bn thn cc tng la, trong c khi nim h thng ng tin cy v rng hn v cc tiu chun chung nh gi an ninh ca cc h thng.

6. Hc liu
6.1 Hc liu bt buc

[1] William Stallings. Network Security Essentials: Applications and Standards, Third Edition. Prentice Hall, 2007.
6.2 Hc liu tham khao

[2] William R. Cheswick, Steven M. Bellovin, and Aviel D. Rubin. Firewalls and Internet Security: Repelling the Wily Hacker, Second Edition. Addison-Wesley, 2003. [3] Michael Erbschloe. Trojans, Worms, and Spyware: A Computer Security Professional's Guide to Malicious Code. Butterworth-Heinemann, 2004. [4] Charlie Kaufman, Radia Perlman, and Mike Speciner. Network Security: Private Communication in a Public World, Second Edition. Prentice Hall, 2002. [5] Joseph Migga Kizza. Computer Network Security. Springer, 2005. [6] Jelena Mirkovic, Sven Dietrich, David Dittrich, and Peter Reiher. Internet Denial of Service: Attack and Defense Mechanisms. Prentice Hall, 2005. [7] Raymond R. Panko. Corporate Computer and Network Security. Prentice Hall, 2004. [8] Man Young Rhee. Internet Security: Cryptographic Principles, Algorithms and Protocols. John Wiley & Sons, 2003. [9] William Stallings. Cryptography and Network Security: Principles and Practices, Fourth Edition. Prentice Hall, 2006. 7. Hnh thc t chc dy hc
7.1 Lch trnh chung Hinh thc t chc day hc mn hc Ni dung Thuyt trinh S gi l thuyt Chng 1 Chng 2 Chng 3 Chng 4 Chng 5 Chng 6 Chng 7 2 2 1 1 1 1 0 0 0 S gi bai tp 0 0 0 0 0 0 0 S gi thao lun S gi thc hanh S gi t hc Tng

0 0 0 0 0 0 0

0 0 0

2 2 2 2 2 2

Chng 8 Chng 9 Chng 10 Chng 11 Tng

1 2 2 2 18

0 0 0 0 0

1 1 1 1 6

3 4 4 4 30

8. Kim tra, nh gi Kim tra gia k: Trng s: 0,2

Tiu ch nh gi: Sau khi hc xong su chng u, cc hc vin lm bi kim tra vit gia k gm 3 cu hi trong thi gian 90 pht theo hnh thc c php s dng ti liu. Cc cu hi nh gi mc tip thu kin thc v k nng vn dng thng qua cc bi ging v bi tp ca cc chng 4, 5 v 6.

Kim tra cui k:

Trng s: 0,5

Tiu ch nh gi: Cc hc vin lm bi kim tra vit theo hnh thc ging nh bi kim tra gia k nhng gm 5 cu hi trong thi gian 120 pht. Cc cu hi tp trung kim tra kin thc cc chng t 7 n 11.

Tiu lun hoc bi tp ln:

Trng s: 0,3

Tiu ch nh gi: Cc hc vin c giao vit tiu lun v mt ch nghin cu c th thuc lnh vc an ninh mng. Bi tp tiu lun nh gi kh nng c hiu, tng hp cc ti liu chuyn ngnh v thc tm ti sng to ca tng hc vin. thc tch cc tham gia pht biu kin trn lp cng s c nh gi vo im tiu lun.