Universitatea Babeş-Bolyai Cluj-Napoca
Facultatea de Matematică şi Informatică
Ciclul de studii: Licenţă
Domeniul: Calculatoare şi tehnologia informaţiei
Programul de studii: Ingineria informatiei - in limba engleza
Limba de predare: Engleză

SYLLABUS

I. General data
Code	Subject	
MIC0007	Specialised Protocols in Computer Networks	

Semester	Hours: C+S+L+P	Category	Status	
7	2+0+1+1	speciality	optional	

II. Full status faculty members
Name and	Scientific	Didactic	Chair	Type of activity	
surname	title	title		C	S	L	
DARABANT Sergiu	Ph.D.	Lect.	Computer Systems	*			

Associated faculty members
Name and	Scientific	Institution	Type of	Type of activity	
surname	title		position	C	S	L	

III. Course objectives
The main course objective is to provide to students a deeper approach to computer networks protocols as studied during the Computer Networks lectures. The course is presenting advanced features of computer networking protocols and leads the students to approach some practical issues of today’s networking technologies like firewalls, tunneling(IP-IP, PPTP, GRE, L2TP, OpenVPN), IPSec, IPv6, bandwidth control and Quality of Service, P2P protocols, VOIP, etc. The students will be able not only to understand the theoretical aspects of these technologies but also to practically apply them on simulated environments or real networks.	

IV. Course contents
1)	Network security at the IP Layer: the Linux fireall architecture, iptables
2)	Building a linux firewall.
3)	The Windows Vista firewall architecture.
4)	Proxy Servers and helper protocols: squid, Microsoft ISA, SOCKS
5)	Virtual Private Network: Architecture and Technologies.
6)	IP-IP tunneling protocol. Setting up IP in IP tunnels.
7)	PPTP/GRE tunnels. Setting up Linux-Linux, Linux-Windows PPTP tunnels. Windows PPTP servers, Linux PPTP servers
8)	L2TP tunneling.
9)	OpenVPN - tunnels. Implementing Routed and Bridged VPN tunnels with OpenVPN.
10)	Cryptography and secure communication. Symmetric and public key cryptography. Authentication. Digital Signaures;
11)	The IPSsec protocol. 
12)	IPSec Transport Mode. IPSec Tunnel Mode applied to Linux-Windows networks.
13)	QoS and bandwidth management. Differentiated Services. Queing disciplines:  FIFO, PRIO, TBF, SFQ, GRED, HTB, DSMARK, etc
14)	Ingress and Egress traffic control.
15)	VOIP technologies. Audio/Video compression and transmission. The SIP protocol. H323. Software VOIP: softphones and server applications. Asterisk : free opensource digital PBX telephony platform.
16)	Hole punching techniques for P2P networks with NAT-ed peers behind firewalls.
17)	Hamachi, Skype - hole punching - applications. 
18)	Wifi Security – WEP/WPA & how to crack or overcome the encryption protocols
19)	Mobile IP networks, advanced routing.
20)	P2P protocols : bittorent, emule.
21)	The NS2 simulator.
22)	Wake on Lan techniques- remotely starting computers over the network.
23)	The IPv6 protocol suite. Addressing, Automatic configuration. Main Architecture, IPv6 over IPv4.	

V. Bibliography
1) W. Richard Stevens TCP/IP Illustrated, Vol I: The Protocols, Addison Wesley, ISBN 0-201-63346-0
2) Gary R. Wright and W. Richard Stevens TCP/IP Illustrated, Vol II: The Implementation Addison Wesley, ISBN 0-201-63354-X
3) James F. Kurose and Keith W. Ross Computer Networking, A top-down approach featuring the Internet. Addison Wesley, 2001.
4) Douglas E. Comer and David L. Stevens Internetworking with TCP/IP, Vol II: Design, Implementation, and Internals. Prentice Hall.
5) William Stallings Computer Networking with Internet Protocols and Technology Prentice Hall 2004.
6) Forouzan, B.A. TCP/IP Protocol Suite second ed (2003) Mc Graw-Hill
7) Hassan, M. and Jain, R. High Performance TCP/IP Networking Concepts, Issues, and Solutions. Pearson Prentice Hall 2004. 	

VI. Thematic of didactic activities per weeks
1)	Introduction Advanced practical Networking( C)
Laboratory Activity setup (L)
Project Setup;
2)	Network security & packet filters (C)
Linux firewalls(L)
3)	The Linux and Windows packet filters(C)
Building a Windows Firewall and setting up policies(L)
Implementation of a custom firewall & NAT policy on Windows and Linux(P)
4)	Implementing Proxy Servers and NAT policies(C)
Setup of a NAT policy and proxy server (L)
5)	Tunneling and Virtual Private Networks – IP, PPTP/GRE (C)
Implementing an IP-IP tunnel using GRE(L)
SQUID. Microsoft ISA. SOCKE and traffic analysis and interception over a tunnel(P)
6)	OpenVPN and L2TP tunneling (C)
L2TP and OPENVPN Implementation(L)
7)	The IPSec protocol (C)
PPTP and openvpn (bridge and routed tunnels)(continued) (L)
Openvpn – bridge and routed policy implementation(P)
8)	Cryptography and secure communication – Public Key, signatures, symmetric encryption(C)
Certificate authorities, and certificate management software(L)
9)	QoS and bandwidth management. Differentiated Services. Queuing disciplines (C)
IpSec transport Mode(L)
Implementation of ingress and Egress policies with HT(P)
10)	VOIP Technologies. SIP. Audio/Video compression and transmission. Software Phones(C)
IPSec Transport Mode + QOS policies(L)
11)	TCP/IP Hole punching techniques(C)
Implementation of a VOIP PBX using Asterisk. Softphones and Asterisk PBXes (L)
Implementing a software telephony system(P)
12)	P2P Protocols. Emule, Bittorrent. Skype, Hamachi and other hole punching applications(C)
Implementing hole punching with netcat for hosts with NATed peers behind firewalls or private networks (L)
13)	Wifi Security protocols(C)
Wake on LAN. Wifi security hacking (WEP and WPA). Wifi Traffic analysis(L)
Traffic analysis for Wifi encryption cracking(P) 
14)	The IPv6 suite. Mobile Networks.(C)
Bittorent, emule, HTTP over DNS(L)	

VII. Didactic methods used
Speech, Presentation, Didactical Demonstration, Discovery,Projects	

VIII. Assessment
Student’s activity will be evaluated during the semester by their contribution to the practical works of the laboratory and at the end of the semester by an oral examination. The lab activity consists in a semester project/presentation. The final grade will be a weighted average of the lab activity and examination. The minimum grade for each of the two marked activities is 5.	

IX. Additional references

	Dean,							Chair head,

	Date,							Course responsible,
								Lect. DARABANT Sergiu, Ph.D.