| Course Unit Code | 440-4214/04 |
|---|
| Number of ECTS Credits Allocated | 5 ECTS credits |
|---|
| Type of Course Unit * | Optional |
|---|
| Level of Course Unit * | Second Cycle |
|---|
| Year of Study * | |
|---|
| Semester when the Course Unit is delivered | Winter Semester |
|---|
| Mode of Delivery | Face-to-face |
|---|
| Language of Instruction | English |
|---|
| Prerequisites and Co-Requisites | Course succeeds to compulsory courses of previous semester |
|---|
| Name of Lecturer(s) | Personal ID | Name |
|---|
| NEV05 | Ing. Pavel Nevlud |
| KAP063 | Ing. Lukáš Kapičák, Ph.D. |
| Summary |
|---|
Upon successful completion of the course, the student:
– designs and configures basic components of an extensive computer network using Linux and IPv6,
– applies tools for network monitoring, management, and traffic analysis,
– configures and evaluates authentication and authorization mechanisms based on LDAP, RADIUS, and Kerberos,
– applies the principles of single sign-on and federated authentication,
– analyses network traffic and network status using appropriate monitoring and diagnostic tools. |
| Learning Outcomes of the Course Unit |
|---|
| The goal of course is to apply theoretical knowledge of computer networks, basic network services with operating system Linux and IPv6 protocol, into practical solutions. The graduate of this course will gain knowledge in the field of monitoring IPv6 networks, authentication and authorization. |
| Course Contents |
|---|
Lectures:
• Special distributions of operating systems, that are suitable to embedded systems with low power consumption, their properties and specifics, appropriate hardware platforms and their comparison.
• Reports and logged data from different systems, debugging and optimization of services, Syslog, NTP.
• Monitoring and management of networks - RRDtol, SNMP.
• Advance tools for network monitoring – Nagios, Zabbix and Grafana.
• Observation and generation traffic in IPv6 networks, Netflow, probes, collector, analysis of Netflow statistic.
• Virtual tools for different operating systems and back-up in Linux.
• LDAP protocol, address services, objects, and attributes, openLDAP.
• Authentication using RADIUS and TACACS.
• Single sign-on system – SSO, Kerberos.
• Advance authentication principles, authentication users between federations with applications SAML
• Shibboleth, its architecture, and using.
• Request tracker, tool for management and solving problems in network.
• XMPP protocol, Instant Messaging and Presence, Jabber.
• Practice example installation of advance network.
Practices:
• Installation and configuration special Linux open-source distributions. Assignment of semester projects.
• Installation and configuration of Syslog, local and remote storge of system logs. Installation and configuration of NTP protocol.
• Monitoring and management networks by using SNMP protocols. Installation, and configuration RRDtool.
• Using advance tools for monitoring and management network by using Nagios, Zabbix and Grafana.
• Observation and generation traffic in communication networks by using open-source tools, tcpdump, iptraf, ngrep and scapy.
• Installation and configuration of virtual tools – KVM, LXC/LXD, VirtualBox, Xen, Qemu, Wmware. Back-up in Linux, tools tar, dd and rsync.
• Installation and configuration open-source tools – OpenLDAP for access to data on file servers.
• Installation and configuration single sign-on system. Installation and configuration of Kerberos.
• Advance authentication principles by using SAML application, e.g. Simplesamlphp.
• Installation and configuration Request Tracker by using Appache and MySQL.
• Installation and configuration communication tool – Jabber.
• Presentation of semester projects.
Projects:
Project No. 1. The aim of the project is the collection, processing, and automatic rendering of data from various sensors in the network using a time series database.
Project No. 2. The aim of the project is to describe, configure and analyze various authentication and authorization methods in IPv6 networks.
|
| Recommended or Required Reading |
|---|
| Required Reading: |
|---|
• JULIAN, Mike. Practical Monitoring: Effective Strategies for the Real World. United States: O'Reilly Media, 2017. ISBN 978-1491957356.
• WILSON, Yvonne a Abhishek HINGNIKAR. Solving Identity Management in Modern Applications: Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0. United States: Apress, 2019. ISBN 978-1484250945.
• BOCK, Lisa. Identity Management with Biometrics: Explore the latest innovative solutions to provide secure identification and authentication. Great Britain: Packt Publishing, 2020. ISBN 978-1838988388. |
• SATRAPA, Pavel. IPv6: internetový protokol verze 6. 4. aktualizované a rozšířené vydání. Praha: CZ.NIC, 2019. ISBN 978-80-88168-46-1.
• JULIAN, Mike. Practical Monitoring: Effective Strategies for the Real World. United States: O'Reilly Media, 2017. ISBN 978-1491957356.
• WILSON, Yvonne a Abhishek HINGNIKAR. Solving Identity Management in Modern Applications: Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0. United States: Apress, 2019. ISBN 978-1484250945.
• BOCK, Lisa. Identity Management with Biometrics: Explore the latest innovative solutions to provide secure identification and authentication. Great Britain: Packt Publishing, 2020. ISBN 978-1838988388. |
| Recommended Reading: |
|---|
• NEMETH, Evi, Garth SNYDER, Trent R. HEIN, Ben WHALEY a Dan MACKIN’S. UNIX and Linux System Administration Handbook. 5th edition. Addison-Wesley Professional, 2017. ISBN 978-0134277554.
• MINING, Ethem. Kali Linux Hacking: A Complete Step by Step Guide to Learn the Fundamentals of Cyber Security, Hacking, & Penetration Testing. Includes Valuable Basic Networking Concepts. 1th edition. Independently published, 2019. ISBN 978-1672429733.
|
• NEMETH, Evi, Garth SNYDER, Trent R. HEIN, Ben WHALEY a Dan MACKIN’S. UNIX and Linux System Administration Handbook. 5th edition. Addison-Wesley Professional, 2017. ISBN 978-0134277554.
• MINING, Ethem. Kali Linux Hacking: A Complete Step by Step Guide to Learn the Fundamentals of Cyber Security, Hacking, & Penetration Testing. Includes Valuable Basic Networking Concepts. 1th edition. Independently published, 2019. ISBN 978-1672429733.
|
| Planned learning activities and teaching methods |
|---|
| Lectures, Experimental work in labs, Project work |
| Assesment methods and criteria |
|---|
| Tasks are not Defined |