CO3 Appreciate the application of security techniques and technologies in solving real-life security problems in practical systems. CO4 Design security protocols and methods to the specific security problems. CO5 Understand a variety of generic security threats and vulnerabilities, and identify & analyze particular security problems with current research issues. Module No. Week No. Experiments Name Course Outcome Weightage (in %) 1 W1 Write program to encrypt and decrypt using product cipher. CO 1 100 2 W2 Write a program to demonstrate strength of RSA. CO 2 30 3 W3 Write a program to implement Diffie-Hellman Algorithm. CO 2 30 4 W4 Write a program to implement DES algorithm. CO 2 40 5 W5 Write program to demonstrate integrity management by implementing message digest using MD5/SHA. CO 3 40 6 W6 Write a program to demonstrate working of virus. CO 3 20 7 W7 Implement password cracking using ophcrack. CO 3 20 8 W8 Implement SQL Injection using SQLmap. CO 3 20 9 W9 Implement Phishing attack. CO 5 50 10 W10 Write a program to implement DOS/DDOS attack. CO 5 50 11 W11, W12 Study experiment on Email Security using PGP and S/MIME. CO 4 100 Mapping Course Outcomes (CO) - Program Outcomes (PO) Subject Weight Course Outcomes Contribution to Program outcomes Pa Pb Pc Pd Pe Pf Pg Ph Pi Pj Pk Pl PR 40% CO1 : Understand the principles and practices of cryptographic techniques. 2 2 2 4 CO2 : Understand the cryptosystem in providing assurance concerning privacy and integrity of information. 4 2 2 1 1
Experiment No.: 4 Write a program to implement DES algorithm. Experiment No. 4 Aim: Write a program to implement DES algorithm. Objectives: From this experiment, the student will be able to Understand the principles of block ciphers. To describe the details of building elements of DES. Distinguish between DES and Triple DES. Outcomes: The learner will be able to Understand the DES technique skills for computing practice. Understand the professional, ethical, security and social issues and responsibilities. Recognize the need for DES, and an ability to engage in life-long learning. Hardware / Software Required: C/C++/JAVA. Theory:
William Stallings, “Cryptography and Network Security: Principles and Practice”, Pearson education, Fifth edition. Bernard Menezes, “Network Security and Cryptography”, Cengage Learning, Second Edition. Behrouz A Forouzan, Debdeep Mukhopadhyay, “Cryptography and Network Security”, Tata McGraw Hill, Second edition Behrouz A. Forouzan, “Cryptography and Network Security”, Tata McGraw Hill. Charles P. Pfleeger, “Security in Computing”, Pearson Education. Cryptography and System Security Experiment No.: 6
References: William Stallings, “Cryptography and Network Security: Principles and Practice”, Pearson education, edition. Bernard Menezes, “Network Security and Cryptography”, Cengage Learning, Second Edition. Behrouz A Forouzan, Debdeep Mukhopadhyay, “Cryptography and Network Security”, Tata McGraw Hill, Second edition Behrouz A. Forouzan, “Cryptography and Network Security”, Tata McGraw Hill. Charles P. Pfleeger, “Security in Computing”, Pearson Education. Cryptography and System Security Experiment No.: 9
Made the package and its documentation, including the source code, freely available via the Internet, bulletin boards, and commercial networks such as AOL (America On Line). Entered into an agreement with a company (Viacrypt, now Network Associates) to provide a fully compatible, low-cost commercial version of PGP. Figure 1. Summary of PGP services Figure 2. PGP cryptographic functions S/MIME Secure/Multipurpose Internet Mail Extension (S/MIME) is a security enhancement to the MIME Internet e-mail format standard based on technology from RSA Data Security. Although both PGP and S/MIME are on an IETF standards track, it appears likely that S/MIME will emerge as the industry standard for commercial and organizational use, while PGP will remain the choice for personal e-mail security for many users. S/MIME is defined in a number of documents—most importantly RFCs 3370, 3850, 3851, and 3852. In terms of general functionality, S/MIME is very similar to PGP. Both offer the ability to sign and/or encrypt messages. In this subsection, we briefly summarize S/MIME capability. We then look in more detail at this capability by examining message formats and message preparation. S/MIME provides the following functions. Enveloped data: This consists of encrypted content of any type and encrypted content encryption keys for one or more recipients. Signed data: A digital signature is formed by taking the message digest of the content to be signed and then encrypting that with the private key of the signer. The content plus signature are then encoded base64 encoding. A signed data message can only be viewed by a recipient with S/MIME capability. Clear-signed data: As with signed data, a digital signature of the content is formed. However, in this case, only the digital signature is encoded using base64.As a result, recipients without S/MIME capability can view the message content, although they cannot verify the signature. Signed and enveloped data: Signed-only and encrypted-only entities may be nested, so that encrypted data may be signed and signed data or clear-signed data may be encrypted.