JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Course Objectives:

• 1. To implement the cryptographic algorithms.
• 2. To implement the security algorithms.
• 3. To implement cryptographic, digital signatures algorithms.

Course Outcomes:

• 1. Demonstrate the knowledge of cryptography, network security concepts and applications.
• 2. Ability to apply security principles in system design.
• 3. Ability to identify and investigate vulnerabilities and security threats and mechanisms to counter them

List of Experiments:

• 1. Implementation of symmetric cipher algorithm (AES and RC4)
• 2. Random number generation using a subset of digits and alphabets.
• 3. Implementation of RSA based signature system
• 4. Implementation of Subset sum
• 5. Authenticating the given signature using the MD5 hash algorithm.
• 6. Implementation of Diffie-Hellman algorithm
• 7. Implementation of the ELGAMAL cryptosystem.
• 8. Implementation of Goldwasser-Micali probabilistic public key system
• 9. Implementation of Rabin Cryptosystem. (Optional).
• 10. Implementation of Kerberos cryptosystem
• 11. Firewall implementation and testing.
• 12. Implementation of a trusted secure web transaction.
• 13. Cryptographic Libraries-Sun JCE/OpenSSL/Bouncy Castle JCE.
• 14. Digital Certificates and Hybrid (ASSY/SY) encryption, PKI.
• 15. Message Authentication Codes.
• 16. Elliptic Curve cryptosystems (Optional)
• 17. PKCS Standards (PKCS1, 5, 11, 12), Cipher modes.

TEXT BOOK:

• 1. Cryptography and Network Security (principles and approaches) by William Stallings Pearson Education, 4th Edition.

REFERENCES:

• 1. Network Security Essentials (Applications and Standards) by William Stallings Pearson Education.
• 2. Principles of Information Security, Whitman, Thomson. VULNERABILITY ASSESSMENT & PENETRATION TESTING LAB (Lab- II) M.Tech CNIS/CN/CYS I Year I Sem. L T P C 0 0 4 2

Course Objectives

This lab session focuses on training the students in

• 1. Penetration Testing methodologies
• 2. Monitoring the network traffic and
• 3. To understand the host and services discovery

Course Outcomes:

• 1. Design for monitoring network traffic
• 2. Perform different penetration testing methods
• 3. Design different types of vulnerabilities scanning
• 4. Understand web application assessment

List of Experiments:

• 1. Monitoring Network Traffic
• 2. Host & Services Discovery using Nmap
• 3. Vulnerability Scanning using OpenVAS
• 4. Internal Penetration Testing
• a. Mapping
• b. Scanning
• c. Gaining access through CVE’s
• d. Sniffing POP3/FTP/Telnet Passwords
• e. ARP Poisoning
• f. DNS Poisoning
• 5. External Penetration Testing
• a. Evaluating external Infrastructure
• b. Creating topological map & identifying IP address of target
• c. Lookup domain registry for IP information
• d. Examining use of IPV6 at remote location
• 6. Different types of vulnerability scanning
• 7. Vulnerability scanning with Nessus
• 8. Web application assessment with nikto & burp suite

TEXT BOOKS:

• 1. Gray Hat Hacking-The Ethical Hackers Handbook, Allen Harper, Stephen Sims, Michael Baucom, 3rd Edition, Tata Mc Graw-Hill.
• 2. The Web Application Hacker’s Handbook-Discovering and Exploiting Security flaws, Dafydd Suttard, Marcus pinto, 1st Edition, Wiley Publishing.

REFERENCES:

• 1. Penetration Testing: Hands-on Introduction to Hacking, Georgia Weidman, 1st Edition, No Starch Press.
• 2. The Pen Tester Blueprint-Starting a Career as an Ethical Hacker, L. Wylie, Kim Crawly, 1st Edition, Wiley Publications.