your exercise iLab 1+2 info event online Tell your friends! - - PowerPoint PPT Presentation

▶
your exercise ilab 1 2 info event online
SMART_READER_LITE
LIVE PREVIEW

your exercise iLab 1+2 info event online Tell your friends! - - PowerPoint PPT Presentation

Feb 24, 2023 827 likes •1.81k views

The iLab Experience a blended learning hands-on course concept you set the focus Final Lecture Marc-Oliver Pahl, Jul 25, 2017 your exercise iLab 1+2 info event online Tell your friends!

slide-1
SLIDE 1

you set the focus

The iLab Experience

a blended learning hands-on course concept

Final Lecture

Marc-Oliver Pahl, Jul 25, 2017

your exercise

slide-2
SLIDE 2

iLab 1+2 info event online

  • Tell your friends!
  • https://www.net.in.tum.de/teaching/ws1718/ilab_information.html
slide-3
SLIDE 3

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2

DIY1 - Smart Space HW DIY2 - Smart Space SW Kick Off, Mini Labs, IPv6 - part I World-Wide-Web Security Holes Your Exercise Mad Brainstorming Advanced Wireless Playground YE 1st Lecture YE Review Presentation YE Final Presentation, Wrap-Up

25.4. 2.5. 9.5. 16.5. 23.5. 30.5. 8.6. 13.6. 20.6. 27.6. 4.7. (11.7.) 18.7.

IPv6 - part II, Mini Lab Lectures MiniLabs, BGP YE Topic Presentation and Voting, Modern Cryptography YE Didactics and Techniques summer term 2017

15

25.7.

Giving good Feedback

your exercise

slide-4
SLIDE 4

*

Somehow “Stable” Internal Tests Student Run

Feedback Revision

~2h Introductory Lecture

didactic concept | authoring tutorial | topic selection | assignment review teams

~30-35h Team Prepares Exercise

slides for talk | prelab | lab | slides | tutor support

~2h First Lecture Presentation

presentation | feedback | quality alignment

~20-25h Review

review another team

~2h Final Presentation

how is it now | what did you change/ learn | your take home?

~2h Received Feedback Pres.

presentation | feedback | quality alignment

~20-25h Revising new lab

updating learning material
slide-5
SLIDE 5

I give you some tools and experience

wikimedia: Biser Todorov

slide-6
SLIDE 6

Learn from each other…

slide-7
SLIDE 7

Topic Brainstorming Result May 16, 2017

slide-8
SLIDE 8

Topic Voting Event May 23, 2017

slide-9
SLIDE 9

2017-07-04 First Lecture - What was good? What could be improved?

slide-10
SLIDE 10

2017-07-04 Giving Feedback - What do you know about Feedback?

slide-11
SLIDE 11

2017-07-04 Giving Feedback - What are your open Challenges?

slide-12
SLIDE 12

2017-07-18 Review Reporting - What are your main Points for PreLab, Lab, and other aspects?

slide-13
SLIDE 13
  • 2 slide decks for your two

topic presentations (each talks one topic!)

  • Slide deck lecture (2 talk!)
  • Ready PreLab, Lab
  • Review report
  • Slide on review feedback &

planned improvements

  • Final lecture slides
  • Final PreLab, Lab, Peer Grade

Expected Artefacts

your exercise

Marc-Oliver Pahl 2017

Creation of Lecture, PreLab, Lab Revision

peer grading

  • Week -5:
  • Prepare your 2x3 min talks
  • Week -4:
  • Plan the structure and content of your lab, prelab, and lecture.
  • Week 1:
  • Lecture Preparation (most relevant concepts?)
  • Prelab Preparation (detailing the lecture content + tools + more)
  • Practical Part Lab Preparation (no cooking recipe)
  • Week 2+3:
  • Work on your content.
  • Week 4:
  • Review other team
  • Get reviewed by other team
  • Start improving based on the feedback
  • Week 5:
  • Improve your exercise based on the feedback
  • Week 6:
  • Finish your lab and the review reports.

19.6. 26.6. 11.7. 25.7. 22.5. 18.7.

  • 30.7.

Deadline

  • X

X X X X X X

slide-14
SLIDE 14

The Peer Review

You will grade your reviewed team.

http://www.utahcompose.com/sites/utahwrite/files/peer%20review%20kids.jpg
slide-15
SLIDE 15

you set the focus

The iLab Experience

a blended learning hands-on course concept

Your Final Lecture

15(+1) Minutes

slide-16
SLIDE 16

You make it interesting…

Flickr:nist6dh

slide-17
SLIDE 17

Order of Presentations

Team Topic 201 Email spoofing 202 War Rooms! 203 Hiding in plain sight

slide-18
SLIDE 18

create your own exercise

EMAIL SPOOFING MY BANK NEEDS MY PASSWORD

Armin Baur & Moritz Kellermann

1

slide-19
SLIDE 19

Motivation

  • Email Spoofing – My Bank needs my Password
  • Sender email address can be spoofed easily

– People trust the sender address – Spam can be send on behalf of others

  • Messages can be manipulated

2

slide-20
SLIDE 20

SMTP

  • Simple Mail Transfer Protocol (SMTP)
  • First RFC published August 1982
  • Original design of SMTP has no facility to

authenticate sender

3

slide-21
SLIDE 21

SMTP

4

MUA Mail User Agent MSA Mail Submission Agent MTA Mail Transmission Agent MDA Mail Delivery Agent

slide-22
SLIDE 22

5

Email Header

slide-23
SLIDE 23

Security Mechanisms

  • Sender Policy Framework (SPF)
  • DomainKeys Identifed Mail (DKIM)
  • Domain-based Message Authentication,

Reporting and Conformance (DMARC)

6

slide-24
SLIDE 24

SPF

  • Checks that incoming mail from a domain

comes from a host authorized by that domain

  • Authorizes hosts by IP addresses via DNS

– TXT Resource Record – SPF Resource Record (obsolete)

7

source.tld TXT= "v=spf1 ip4:192.0.2.0/24 mx a –all"

CC BY-SA 2.5: openspf.org
slide-25
SLIDE 25

Spoofing MTA (Return-Path)

8

slide-26
SLIDE 26

SPF

9

slide-27
SLIDE 27

DKIM

  • Cryptographic signing of outgoing email
  • Prevents email manipulation
  • Public key is published via DNS

– TXT Resource Record

10

unknown._domainkey.source.tld TXT= "DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeo/3jmZJii2wKBBpCiE

slide-28
SLIDE 28

DMARC

  • Prevents spoofing of email addresses
  • Requests reports about spoofed email
  • Publishes the DKIM signing policy of a domain

– TXT Resource Record

11

_dmarc.source.tld TXT= "v=DMARC1; p=reject;"

CC BY 3.0: dmarc.org
slide-29
SLIDE 29

Spoofing Sender Email (From)

12

slide-30
SLIDE 30

DMARC/DKIM

13

slide-31
SLIDE 31

Lab

  • Analysing email headers
  • Spoofing MTA host address
  • Spoofing email address
  • Configure SPF, DKIM and DMARC

14

slide-32
SLIDE 32

Teaser Practical Part

15

Alice (MTA + MDA) Eve (MTA) Bob (MTA + MDA) Switch (DNS)

slide-33
SLIDE 33

Order of Presentations

Team Topic 201 Email spoofing 202 War Rooms! 203 Hiding in plain sight

slide-34
SLIDE 34

create your own exercise

WAR ROOMS!

Andreas Janiak and Donika Mirdita

1

slide-35
SLIDE 35

What is War Rooms?

Is inspired from the game over the wire, and was meant to learn and practice security concepts within a secure environment. The name was derived from the rooms = current pc and the battle against the system to win the victory file.

2

http://overthewire.org

slide-36
SLIDE 36

Motivation

  • Be comfortable working with the command line
  • Know how to debug and explore

– Incomplete knowledge of networks – Handle unknown environments

  • Learn to use new tools
  • Improve skills with the old tools

3

slide-37
SLIDE 37

Lecture Overview

1.IPv4/IPv6 Recap 2.Systemd-Networkd deamon 3.Linux tools 4.OverTheWire Demo

4

slide-38
SLIDE 38

IPv4/IPv6 Recap

Networks need to be able to interact with a variety of host configurations:

  • IPv4 and IPv6 compatibility
  • Dual Stack IPv4/IPv6 support
  • Gateway and Broadcast addresses
  • Routing for the Internet

5

slide-39
SLIDE 39

Introduction to Systemd

Linux service and system manager.

  • Runs as PID 1; starts the rest of the system
  • Enables control over daemons
  • Built-in daemons for logging and system

configuration

6

https://wiki.archlinux.org/index.php/systemd

slide-40
SLIDE 40

Systemd Tools

1.Systemctl - manager for systemd 2.Journalctl - logging system 3.Systemd-networkd - network manager 4.Hostnamectl - system hostname manager 5.Services - Service Unit Configuration

7 https://www.freedesktop.org/software/systemd/man/

slide-41
SLIDE 41

Linux tools

  • ssh, sshpass → secure shell
  • find → search data
  • grep → searches content
  • | → pipelines
  • nmap → network discovery and security tool

8

slide-42
SLIDE 42

Over the wire demo

Demo...

9

slide-43
SLIDE 43
slide-44
SLIDE 44

Teaser Practical Part

10

1 2 3 6 5 4

slide-45
SLIDE 45

Order of Presentations

Team Topic 201 Email spoofing 202 War Rooms! 203 Hiding in plain sight

slide-46
SLIDE 46

https://www.youtube.com/watch?v=4vIu8ld68fc

https://www.youtube.com/watch?v=4vlu8ld68fc

slide-47
SLIDE 47

reate your own exercise

Hiding in plain sight

Yoav Schneider

2

slide-48
SLIDE 48

Covert Channels

 De%nition  How to encode and decode data  Examples  Detection and Prevention

3

slide-49
SLIDE 49

Covert Channels

„In computer security, a covert channel is a type of computer security attack that creates a capability to transfer information objects between processes that are not supposed to be allowed to communicate by the computer security policy” https://en.wikipedia.org/wiki/Covert_channel

4

slide-50
SLIDE 50

Scenario

 Leak Data  Control computers in a botnet  Distribute Malware

5

slide-51
SLIDE 51

„The Medium is the Message”

 Protokol  Data  Timing  Physical  Fan speed  Blinking leds

6

Marshall McLuhan, 1964

Source: https://en.wikipedia.org/wiki/File:Marshall_McLuhan.jpg
slide-52
SLIDE 52

„The Medium is the Message”

 Protokol  Data  Timing  Physical  Fan speed  Blinking leds

7

Source: https://en.wikipedia.org/wiki/File:Marshall_McLuhan.jpg
slide-53
SLIDE 53

„The Medium is the Message”

 Protokol  Data  Timing  Physical  Fan speed  Blinking leds

8

slide-54
SLIDE 54

„The Medium is the Message”

 Protokol  Data  Timing  Physical  Fan speed  Blinking leds

9

Source (left): https://en.wikipedia.org/wiki/File:Benjamin_Franklin2_1895_Issue-1c.jpg Source (right): own work using: http://manytools.org/hacker-tools/steganography-encode-text-into-image/go
slide-55
SLIDE 55

„The Medium is the Message”

 Printer Watermarks

10

Source: https://pixabay.com/p-161063/?no_redirect
slide-56
SLIDE 56

„The Medium is the Message”

 Protokol

11

Source: https://en.wikipedia.org/wiki/Transmission_Control_Protocol
slide-57
SLIDE 57

„The Medium is the Message”

 Example: Send “0x12345678” using the source port

12

Source: https://en.wikipedia.org/wiki/Transmission_Control_Protocol

0x1234

slide-58
SLIDE 58

„The Medium is the Message”

 Example: Send “0x12345678” using the source port

13

Source: https://en.wikipedia.org/wiki/Transmission_Control_Protocol

0x5678

slide-59
SLIDE 59

Detection

Hard Pattern Based Anomally Based

14

Source: https://upload.wikimedia.org/wikipedia/commons/c/cf/Binary_Code.jpg
slide-60
SLIDE 60

Detection

Hard Pattern Based Anomally Based

15

Source: https://upload.wikimedia.org/wikipedia/commons/c/cf/Binary_Code.jpg
slide-61
SLIDE 61

Prevention

 Software Isolation (VM)  Air Gap, the ultimate defence?

16

slide-62
SLIDE 62

17

The Following Learning Goals are Covered in the Lectu re PreLa b Lab Understand what covert channels are used for X X Learn about diEerent types of covert channels X X X Learn about some counter measures X X Introduce the packet manipulation tool scapy X X Create a covert channel with TCP Handshake X Bonus – Create a covert channel using DNS X

slide-63
SLIDE 63

T easer Practical Part

18

FSB NSA DNS

Secret DB

Source: https://en.wikipedia.org/wiki/File:Seal_of_the_U.S._National_Security_Agency.svg Source: https://en.wikipedia.org/wiki/File:FSB_Emblem.png
slide-64
SLIDE 64

Feedback

slide-65
SLIDE 65

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2

DIY1 - Smart Space HW DIY2 - Smart Space SW Kick Off, Mini Labs, IPv6 - part I World-Wide-Web Security Holes Your Exercise Mad Brainstorming Advanced Wireless Playground YE 1st Lecture YE Review Presentation YE Final Presentation, Wrap-Up

25.4. 2.5. 9.5. 16.5. 23.5. 30.5. 6.6. 13.6. 20.6. 27.6. 4.7. (11.7.) 18.7.

IPv6 - part II, Mini Lab Lectures MiniLabs, BGP YE Topic Presentation and Voting, Modern Cryptography YE Didactics and Techniques summer term 2016

15

25.7.

Giving good Feedback

slide-66
SLIDE 66

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-67
SLIDE 67

Your Mini Lab Selection…

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-68
SLIDE 68
  • Defeat the Lag Controlled bandwidth sharing for optimizing the Internet experience in your colo.
  • Virtual Private Networks with Tinc Setting up VPNs.
  • HTTP/2 - Make the Web Fast Again Features of HTTP/2.
  • Hacking and Defense, Black hat or White hat? You decide! Attack and secure your network.
  • Let's Encrypt, just another CA? Setting up CAs.
  • Multipath TCP Internet connections over multiple paths.
  • Blockchain The Trust Machine: Experiencing blockchains on your own.
  • The Quest Of The Mailserver Setting up email.
  • MQTT - An IoT Protocol A middleware for the IoT.
  • High Availability Proxy Providing availability via proxies.
  • Time is Power - Quantum Insert The Quantum Insert NSA attack.

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-69
SLIDE 69

The topic descriptions are online. The most selected 2-3 will be done as mini labs this year. You will get a mail on how to choose. Deadline is Friday night.

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-70
SLIDE 70

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-71
SLIDE 71

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-72
SLIDE 72

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

23.5.2017 Introduction into modern cryptography.

slide-73
SLIDE 73

Black Box 1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-74
SLIDE 74

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-75
SLIDE 75

IoT Smart Space Orchestration P2P Measurements Statistical Evaluation

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-76
SLIDE 76

Discover the diverse expertise in your class ;)

Your exercise madness

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-77
SLIDE 77

Discover the diverse expertise in your class ;)

Your exercise topic voting

1 2 3 4 5 6 7 8 9 10 11 12 13 BGP IPv6 2-3 mini labs SEC Advanced WL 14 Your Exercise S2O 1 S2O 2 15

slide-78
SLIDE 78

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

your exercise

BGP IPv6 2-3 mini labs SEC Advanced WL Your Exercise S2O 1 S2O 2

slide-79
SLIDE 79

*

Somehow “Stable” Internal Tests Student Run

Feedback Revision

~2h Introductory Lecture

didactic concept | authoring tutorial | topic selection | assignment review teams

~30-35 Team Prepares Exercise

slides for talk | prelab | lab | slides | tutor support

~2h First Lecture Presentation

presentation | feedback | quality alignment

~20-25h

Review

review another team

~2h Final Presentation

how is it now | what did you change/ learn | your take home?

~2h Received Feedback Pres.

presentation | feedback | quality alignment

~10-12 Revising new lab

updating learning material

9 10 13 14 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 BGP IPv6 2-3 mini labs SEC Advanced WL Your Exercise S2O 1 S2O 2

Giving Feedback

11

slide-80
SLIDE 80

you set the focus

The iLab Experience

a blended learning hands-on course concept

Your Self-Assessment

slide-81
SLIDE 81

Reported Difficulty/ Interest/ Length

  • 3
  • 2
  • 1
1 2 3

IPv6 part 1 IPv6 part 2 BGP Adv_Wireless WWWSec DIY1 DIY2 DIY_Measurement

difficulty interes.ng long

2017ss

slide-82
SLIDE 82

Time Reported PreLab/ Lab

2 4 6 8 10 12 14 16

IPv6 part 1 IPv6 part 2 BGP Adv_Wireless WWWSec DIY1 DIY2 DIY_Measurement

hours p weekly

2017ss prelab lab

slide-83
SLIDE 83

What will you learn?

  • The content:
  • Become a network master
  • Become a debug pro
  • Work in a team
  • Act in a multicultural

environment

  • Read, write, and speak English
  • Focus on a specific topic and master it
  • Build hardware
  • Create your own course. Learn how to:
  • Communicate (written and orally) and teach

technical content

  • Collect and give constructive feedback
  • …
slide-84
SLIDE 84

interactivity

Multiple-Choice Results Ranking in the Group Discussion with Others Credits Correction Comments Discussion at the Lecture Exam Feedback Exam Mark Multiple-Choice Results Feedback Interaction Lab Credits Discussion at the Lecture Oral Exam Impression

S e l f - L e a r n i n g S u p p o r t F e e d b a c k t o t h e T e a c h e r s

Feedback is important to encourage the learners to continue

  • learning. It is a

main mean for motivation. Feedback is important for the teachers as well as it helps them to adapt to the needs of the current student

  • group. The

student feedback is continuously used to improve the exercises.

slide-85
SLIDE 85

Feedback Fachschaft

10 Minutes

slide-86
SLIDE 86

What did you like most about the iLab2? What could be improved?

slide-87
SLIDE 87

you set the focus

The iLab Experience

a blended learning hands-on course concept

Students wanted…

slide-88
SLIDE 88

Bachelorthesis Masterthesis IDP Seminar Lectures Student Assistant

slide-89
SLIDE 89

0100010101101110011010100110111101 1110010010000001110100011010000110 0101001000000110100101001100011000 0101100010010110000010000101000101 0110111001101010011011110111100100 1000000111010001101000011001010010 0000011010010100110001100001011000 1001011000001000010100010101101110 0110101001101111011110010010000001

Lab

x

slide-90
SLIDE 90

Massive Open Online Course

  • Worldwide
  • ~6-8 weeks
  • Online in edX

Moritz Sichert Edwin Cordeiro Lars Wüstrich Stefan Liebald Marc-Oliver Pahl

Preparation: Spring 2017 Run: Fall 2017

slide-91
SLIDE 91

Topics

What happens if you type “Google” into Google?

Week4: Layer 4: TCP, UDP, SCTP(?), QUICK (?) − Congestion Control − Flow Control − QoS Week5: Layer 5: DNS and HTTP server − Security − Hierarchy − TLS Week6: Layer 1-8: Firewall and Proxy − iptables − vyos? ... − Transparent proxies − OWASP top 10 Week 7: Final exam − Covering our expected learning goals

Week0: Organizational stuff/ Setup Week1: Basics/ Setting/ Tools/ Layer 1+2 − Channel encoding − MAC addresses − Collision Domains − Ethernet, Token Ring, DWDM Fibre Week2: Layer 3: IPv6 and IPv4 (only as legacy) − ARP (as bridge from L2) − NDP (as bridge from L2) − SLAAC − DHCP − Headers − Fragmentation − Comparison v4 v6 Week3: Layer 3: Routing − NICs, address spaces − Static routing? − OSPF, BGP − Shortest path algorithms

slide-92
SLIDE 92

Students Searched for

  • content creation
  • vlab setup creation for the weeks
  • vlab testing
  • community page
  • tutoring probably in late summer

+ testing / feedback round

IDP Student Assistant (BA/ MA)

slide-93
SLIDE 93

Offers mop

  • iLab2 Hiwi
  • We search two Hiwis.

You are perfectly qualified…

  • MOOC 4 Masters about Networking (GRNVS).
  • A massive open online course you could help creating.
  • Improving DS2OS
  • Security, Caching, Use Cases, Demos, iLab2
  • Look at the website.

s 2

  • .

n e t . i n . t u m . d e

slide-94
SLIDE 94

it was great fun with you!

you set the focus

17

slide-95
SLIDE 95
slide-96
SLIDE 96

Flickr:nist6dh

all the best for you!

you set the focus

17