Computer Networks

Outline

1. Introduction

---

The Physical Layer

---

The Data Link Layer
2. Link Layer

---

The Network Layer
3. IP: Internet Protocol
4. ARP: Address Resolution Protocol
5. RARP: Revsese Address Resolution Protocol

---

6. ICMP: Internet Control Message Protocol
7. Ping Program
8. Traceroute Program

---

Routing

---

9. IP Routing
10. Dynamic Routing Protocols
Network Layer Vulnerability
1. IP Spoofing, ref
2. Source Routing
3. IP denial of service attack
Reference Software, Gated, local copy

---

The Transport Layer
, slides, animation
11. UDP: User Datagram Protocol
12. Broadcasting and Multicasting
, slide, animation
13. IGMP: Internet Group Management Protocol
, slide animation
14. DNS: The Domain Name System
, slide animation
15. TFTP: Trivial File Transfer Protocol
16. BOOTP: Bootstrap Protocol
, slide animation
Transport Layer Vulnerability
1. Denial of Service: Smurfing,
   • Smurfing Cripples ISPs
   • Smurfing: The Latest DoS attack
   • More broadcast fun

---

Transmission Control Protocol, Related TCP RFCs
17. TCP: Transmission Control Protocol
18. TCP Connection Establishment and Termination
19. TCP Interactive Data Flow
20. TCP Bulk Data Flow
21. TCP Timeout and Retransmission
22. TCP Persist Timer
23. TCP Keepalive Timer
24. TCP Futures and Performance
Transport Layer Vulnerability
1. Sequence Number Prediction, also a project
• A Weakness in the 4.2BSD Unix TCP/IP Software
• Security Problems in the TCP/IP protocol Suite
• Techinical details of the attack as described by Markoff
• The Fugitive Game
2. Denial of Service: SYN Flooding, also a project,
   • Project Neptune
   • WebCom Security Software Failed in Server Attack
   • Syncookies Mailing List Archive
   • SYN/RST cookies

---

The Application Layer
Application Layer Vulnerability
1. Buffer Overflow Attack, also a project
   • The Internet Worm Incident
   • Smashing the Stack for Fun and Profit"
2. the Backdoor Worm, also a project
• Ken Thompson's Turing Award lecture Reflections on Trusting Trust
• Backdoor
3. X.509 Attack
25. SNMP: Simple Network Management Protocol
26. Telnet and Rlogin: Remote Login
27. FTP: File Transfer Protocol
28. SMTP: Simple Mail Transfer Protocol
29. NFS: Network File System
30. Other TCP/IP Applications
Specific Application Vulnerability
1. Packet Sniffing
NetXray , ref site , also a project
The Packet Project (sniffit),ref site , local
2. SMTP: sendmail vulnerability
3. FTP vulnerability: Port bouncing
4. NFS vulnerability
Intrusion Detection
1. Network Flight Recorder, ref site, also a project