Lecture Material
Lectures will be held Thursdays, 10:15 - 11:45 at room BIN-2.A.10.
Lecture | Date | Lecturer(s) | Slides 1-up | Slides 6-up | Release Date | Content (keyword(s)) | Remarks and References |
L00 | 19.09 | BS | M00-1up (PDF, 563 KB) | M00-6up (PDF, 536 KB) | 09.09 | Course Introduction and Organization | - |
L01 | 19.09 | BS | M01-1up (PDF, 1 MB) | M01-6up (PDF, 1 MB) | 09.09 | Basic Security Concepts | [1] |
L02 | 26.09 | BS | M02-1up (PDF, 2 MB) | M02-6up (PDF, 1 MB) | 19.09 | Cryptographic Principles | [2] |
L03 | 03.10 | BS | M03-1up (PDF, 3 MB) | M03-6up (PDF, 2 MB) | 26.09 | Security by Net. Layers | [1,8,9] |
L04 | 10.10 | BR | M04-1up (PDF, 2 MB) | M04-6up (PDF, 1 MB) | 03.10 | Cloud Security | [2,4,10] |
L05 | 17.10 | BR | M05-1up (PDF, 1 MB) | M05-6up (PDF, 837 KB) | 10.10 | ACL, FW, Policies | [1] |
L06 | 24.10 | BR | M06-1up (PDF, 1 MB) | M06-6up (PDF, 1006 KB) | 17.10 | Intrusion Detection and Prevention Systems | [1,11,12] |
L07. | 31.10 | BR | M07-1up (PDF, 3 MB) | M07-6up (PDF, 1 MB) | 24.10 | Security Information and Event Management | [13,14] |
L08 | 07.11 | BR / KK | M08-1up (PDF, 3 MB) | 31.10 | Penetration Tests | [15.16] | |
L09 | 14.11 | TG | M09-1up (PDF, 2 MB) | M09-6up (PDF, 1 MB) | 07.11 | Risk Management | References within slides |
L10 | 21.11 | AH | M10-1up (PDF, 1 MB) | M10-6up (PDF, 928 KB) | 14.11 |
Cybersecurity and Machine Learning (ML) |
[17,18] |
L11 | 28.11 | AH | M11-1up (PDF, 1 MB) | M11-6up (PDF, 1 MB) | 21.11 | Concerns of Machine and Federated Learning (ML/FL) | [17,18] |
L12 | 05.12 | GG/BR | M12-1up (PDF, 1 MB) | M12-6up (PDF, 721 KB) | 05.12 |
Research and Industry Talk |
|
L13 | 12.12 | BR | M13-1up (PDF, 1 MB) | M13-6up (PDF, 552 KB) | 10.12 | Evaluations and Summary | Previous lectures |
The files provided above may only be downloaded from a subnetwork of the University of Zurich's network. Thus, please use a VPN client from the outside. Information on the VPN setup can be found here. In case you have problems with downloading the files (e.g., showing error 404) check your VPN settings and delete your browser's cache!
References
Several references will be used as a basis during the lectures. However, two major references from W. Stallings below are recommended to provide a basis (seen in lectures M01 and M02) for further specific modules (M03 to M11). Specific references will be pointed out during the lectures or exercise sessions.
- William Stallings: Network Security Essentials: Applications and Standards (6th Edition 2016), Pearson.
- William Stallings: Cryptography and Network Security: Principles and Practice (7th Edition 2017), Pearson.
- Michael Steward: Network Security, Firewalls, and VPNS, ISBN 10: 076379130X
- Peter Mell, Timothy Grance. The NIST Definition of Cloud Computing. Special Publication 800-145. National Institute of Standards and Technology (NIST). 2011.
- Patrick Engebretson. The Basics of Hacking and Penetration Testing: Ethical Hacking and Penetration Testing Made Easy. Elsevier, 2013.
- Xin, Yang, Lingshuang Kong, Zhi Liu, Yuling Chen, Yanmiao Li, Hongliang Zhu, Mingcheng Gao, Haixia Hou, and Chunhua Wang. "Machine Learning and Deep Learning Methods for Cybersecurity." IEEE Access 6 (2018): 35365-35381.
- Khan, Suleman, Abdullah Gani, Ainuddin Wahid Abdul Wahab, Muhammad Shiraz, and Iftikhar Ahmad. "Network Forensics: Review, Taxonomy, and Open Challenges." Journal of Network and Computer Applications 66 (2016): 214-235.
- Edwards, P. N., Jackson, S. J., Bowker, G. C., & Knobel, C. P. (2007). Understanding infrastructure: Dynamics, tensions, and design.
- Pirayesh, H., & Zeng, H. (2022). Jamming Attacks and Anti-jamming Strategies in Wireless Networks: A Comprehensive Survey. IEEE Communications Surveys & Tutorials.
- Cloud Security Alliance. Top Threat to Cloud Computing Pandemic Eleven. URL: https://cloudsecurityalliance.org/artifacts/top-threats-to-cloud-computing-pandemic-eleven/
- Debar, H. (2000). An introduction to intrusion-detection systems. Proceedings of Connect, 2000.
- Canzanese, R., Mancoridis, S., & Kam, M. (2015, August). System call-based detection of malicious processes. In 2015 IEEE International Conference on Software Quality, Reliability and Security (pp. 119-124). IEEE.
- Engebretson, P. (2013). The Basics of Hacking and Penetration Testing: Ethical Hacking and Penetration Testing Made Easy. Elsevier.
- Messier, R. (2016). Penetration Testing Basics. Berkeley, CA: Apress.
- González-Granadillo, G., González-Zarzosa, S., & Diaz, R. (2021). Security information and event management (SIEM): Analysis, Trends, and Usage in Critical Infrastructures. Sensors, 21(14), 4759.
- Bhatt, S., Manadhata, P. K., & Zomlot, L. (2014). The Operational Role of Security Information and Event Management Systems. IEEE security & Privacy, 12(5), 35-41.
- Gereon, A. (2018). Hands-on Machine Learning with Scikit-Learn and Tensor Flow. O’Reily Media Inc., USA.
- Chio, C., & Freeman, D. (2018). Machine learning and security: Protecting systems with data and algorithms. " O'Reilly Media, Inc.".