PORTALE DELLA DIDATTICA

PORTALE DELLA DIDATTICA

PORTALE DELLA DIDATTICA

Elenco notifiche



Hardware & Wireless Security

01GYSUV

A.A. 2024/25

Course Language

Inglese

Degree programme(s)

Course structure
Teaching Hours
Lezioni 33
Esercitazioni in laboratorio 27
Lecturers
Teacher Status SSD h.Les h.Ex h.Lab h.Tut Years teaching
Co-lectures
Espandi

Context
SSD CFU Activities Area context
2024/25
The course, taught in English in the second semester of the second year of the Master of Science in Cybersecurity, is one of the characterizing courses of all the tracks. It aims at presenting the technologies for wireless communications and the security challenges they create for the cyber security of IT systems. This course focuses on the challenges in providing secure communication and network services in various wireless systems and approaches to managing these challenges. Topic coverage includes both the technology overview of different wireless communications systems and vulnerabilities, attacks, security mechanisms, and trade-offs at various layers of the protocol stack, from aspects of physical communication to application and service security issues; examples include jamming, MAC-layer misbehaviour, selective packet dropping, and cross-layer holistic attacks. The course introduces wireless technologies, including cellular, WiFi, Bluetooth, NFC, IoT-specific technologies and navigation systems. The students will learn about the various wireless system architectures and the security challenges one must consider and face to offer a reliable and secure communication system. The students will gain hands-on experience using tools and practical lab experiences.
The course, taught in English in the second semester of the second year of the Master of Science in Cybersecurity, is one of the characterising courses of all the tracks. It aims to present the technologies for wireless communications and the challenges they create for the cyber security of IT systems. The course focuses on the challenges of providing secure communication and network services in various wireless systems and the approaches to address these challenges. Covered topics include both the technology overview of different wireless communications systems, vulnerabilities, attacks, security mechanisms, and trade-offs at various layers of the protocol stack, from aspects of physical communication to application and service security issues; examples include jamming, MAC-layer misbehaviour, denial of service attacks, and cross-layer holistic attacks. The course introduces wireless technologies, including global navigation satellite systems (e.g. GPS), WiFi, Bluetooth, 3G/4G cellular networks and NFC technologies. The student will learn about the various wireless system architectures and the security challenges one must consider and face to offer a reliable and secure communication system. The students will gain hands-on experience using tools and practical lab experiences.
- Knowledge of the wireless communication - Knowledge of specific wireless technologies, including cellular, WiFi, Bluetooth, NFC, IoT-specific solutions and navigation systems. - Knowledge of security challenges in wireless transmission systems - Knowledge of the leading solution and countermeasures to detect and limit possible attacks - Gain hands-on experience in vulnerability analysis and secure system, service, or protocol design.
- Knowledge of wireless communication. - Knowledge of specific wireless technologies, including global navigation satellite systems, WiFi, Bluetooth, 3G/4G networks, and NFC solutions. - Knowledge of security challenges in wireless transmission systems. - Knowledge of the main solution and countermeasures to detect and limit possible attacks. - Gain hands-on experience in vulnerability analysis and secure system, service, or protocol design.
- Knowledge of computer network architectures, WiFi, and TCP/IP protocol stack. - Basic knowledge of programming languages and application security. - Knowledge of the main categories of attack against IT systems. - Knowledge of the main concepts (public-key and symmetric encryption) and technologies (PKI, firewall, VPN, TLS) for IT security. - Knowledge of the security architectures for authentication and access control. - Ability to analyze the risks of a distributed application.
- Knowledge of computer network architectures, WiFi, and TCP/IP protocol stack. - Basic knowledge of programming languages and application security. - Knowledge of the main categories of attack against IT systems. - Knowledge of the main concepts (public-key and symmetric encryption) and IT security technologies (PKI, firewall, VPN, TLS). - Knowledge of the security architectures for authentication and access control. - Ability to analyse the risks of a distributed application. - Elementary knowledge of digital communications and signals
1) Security at the physical layer (1.5 CFU) - Review of basic concepts for digital communications: Wireless Communication Overview, Wireless Channel, Signal Propagation, Digital Modulations - Physical layer security issues: jamming, anti-jamming/Jamming-resistance - Global Navigation Satellite Systems (GNSS) and positioning: Operating principles, signals and main systems (GPS and Galileo); Intentional and unintentional interference with GNSS signals, jamming, spoofing and countermeasures 2) Security of Cellular Networks (1 CFU) - 3G/4G/5G Network Structure and Architectures - Authentication and Confidentiality in cellular networks - Overview of Attacks and Countermeasures. 3) Security in WiFi Networks (1.5 CFU) - IEEE 802.11 Architecture and Protocols, Control and Management Frames - Security in WiFi: Rogue Access Points, WEP, WPA, IEEE 802.11i, IEEE 802.11w, Selfish behaviour at the WLAN MAC Layer. - Lab on WiFi security 4) Bluetooth security (1 CFU) - Overview of Bluetooth wireless technology, Bluetooth pairing, authentication, confidentiality, Low energy features - Bluetooth Vulnerabilities, Threats, and Countermeasures: bluesnarfing, bluejacking, DoS, MiTM - Lab on Bluetooth security 5) Security of Near Field Communications (NFCs) and RFIDs (1 CFU) - Introduction to NFC and RFID Technologies, Tags and Readers - NFC and RFID Security and Privacy Issues, Real-World Attacks, Standardisation Activities, Authentication and Access Control Protocols.
1) Security at the physical layer (1.5 CFU) - Review of basic concepts for digital communications: Wireless Communication Overview, Signal representation, Signal Propagation, Digital Modulations - Physical layer security issues: jamming, anti-jamming/Jamming-resistance - Global Navigation Satellite Systems (GNSS) and positioning: Operating principles, signals and main systems (GPS and Galileo); - GNSS threats: Intentional and unintentional interference with GNSS signals, jamming, spoofing and countermeasures 2) Security in WiFi Networks (2 CFU) - IEEE 802.11 Architecture and Protocols, Control and Management Frames - Security in WiFi: Rogue Access Points, WEP, WPA, IEEE 802.11i, IEEE 802.11w, Selfish behaviour at the WLAN MAC Layer. - Lab on WiFi security 3) Bluetooth security (1 CFU) - Overview of Bluetooth wireless technology, Bluetooth pairing, authentication, confidentiality, Low energy features - Bluetooth Vulnerabilities, Threats, and Countermeasures: bluesnarfing, bluejacking, DoS, MiTM - Lab on Bluetooth security 4) Security of Cellular Networks (1 CFU) - 3G/4G/5G Network Structure and Architecture - Authentication and Confidentiality in cellular networks - Overview of Attacks and Countermeasures. 5) Security of Near Field Communications (NFCs) and RFIDs (0.5 CFU) - Introduction to NFC and RFID Technologies, Tags and Readers - NFC and RFID Security and Privacy Issues, Real-World Attacks, Standardisation Activities, Authentication and Access Control Protocols.
The course is structured into lectures in the classroom (5 credits) and laboratories (1 credit), consisting of software tools and sniffers to put into practice some of the theoretical attacks seen during the classes. During the labs, the students will discuss their solutions to the assigned exercises with the teachers.
The course is structured into lectures in the classroom (4.5 credits) and laboratories (1.5 credits), consisting of using software tools and sniffers to practice some of the theoretical attacks seen during the classes. During the labs, the students will discuss their solutions to the assigned exercises with the teachers. Students will work in groups and prepare reports on lab experiences. Students will grade other students’ reports using a peer grading platform. During the labs, students will participate in challenges to complete attacks seen during the course.
The teachers will provide the material (slides and links to online resources) on the course website.
The teachers will provide the material (slides and links to online resources) on the course website. As auxiliary textbooks, covering many but not all topics, we suggest: 1) Wireless technology and security: Security in Wireless Communication Networks, Yi Qian, Feng Ye, Hsiao-Hwa Chen, First published:25 November 2021, Print ISBN:9781119244363 |Online ISBN:9781119244400, DOI:10.1002/9781119244400 2) Signal Processing: L. Lo Presti e F. Neri, L'analisi dei segnali, CLUT, 1992. 3) Digital communications: Proakis, J. G., & Salehi, M. (2008). Digital communications. McGraw-hill. 4) GNSS: Kaplan, E. D., & Hegarty, C. (Eds.). (2017). Understanding GPS/GNSS: principles and applications. Artech house. 5) GNSS Threats: Dovis, F. (Ed.). (2015). GNSS interference threats and countermeasures. Artech House.
Slides; Libro di testo; Esercitazioni di laboratorio; Strumenti di collaborazione tra studenti;
Lecture slides; Text book; Lab exercises; Student collaboration tools;
Modalità di esame: Prova orale facoltativa; Elaborato scritto prodotto in gruppo; Prova scritta in aula tramite PC con l'utilizzo della piattaforma di ateneo;
Exam: Optional oral exam; Group essay; Computer-based written test in class using POLITO platform;
... The exam consists of a written test that may include open-answer and closed-answer questions or exercises to check that the student has acquired the expected knowledge and skills (see expected learning outcomes). For the part about skills, the questions may be simple exercises or use cases related to the tools experimented with in the laboratories. For each question, the maximum grade that can be obtained is specified. The final grade will be the sum of the grades assigned to the answers given to the questions. The written test will be taken using the Exams platform in a classroom. In case of technical problems, the students may be asked to write their test with pencil and paper. The total duration of the test, as measured by the Exams platform, which includes the setup time, is 1 hour and 40 minutes. The test is closed-book, i.e., the student cannot consult any material during the test and cannot use any electronic device except the PC used for the test. Students with a grade of 25/30 or higher can opt for the oral exam. During the oral, the students will discuss all topics presented during the course. The grade of the oral exam may add a score between -3 and +3 to the grade of the written exam. Additionally, the teachers will request an oral exam in case of doubts about the evaluation of the written test. The oral exam will consist of additional questions to resolve the teachers' doubts in the evaluation. A sample exam test will be made available to the students through the Exercise platform.
Gli studenti e le studentesse con disabilità o con Disturbi Specifici di Apprendimento (DSA), oltre alla segnalazione tramite procedura informatizzata, sono invitati a comunicare anche direttamente al/la docente titolare dell'insegnamento, con un preavviso non inferiore ad una settimana dall'avvio della sessione d'esame, gli strumenti compensativi concordati con l'Unità Special Needs, al fine di permettere al/la docente la declinazione più idonea in riferimento alla specifica tipologia di esame.
Exam: Optional oral exam; Group essay; Computer-based written test in class using POLITO platform;
Exam: Optional reports (1 point each): Students will work in groups and prepare two reports. Students will grade reports of other groups via the peer-grading platform. For each report, the top 80% of reports will obtain 1 extra point, while the bottom 20% will get 0.5 points. Students participating in the peer grading will get 1 point if their review is thorough and properly done, 0.5 if superficial, and 0 if not done or inconsistent. Challenges (1 point each): during the labs, students will have to demonstrate their abilities to mount attacks seen during the course. Students completing the challenge within a deadline will get one extra point. Interaction during classes (1 point max): students answering questions during classes will get one extra point. Computer-based written test in class using the POLITO platform (28 points max): The exam consists of a written test that includes open-answer and closed-answer questions or exercises to check that the student has acquired the expected knowledge and skills (see expected learning outcomes). For the part about skills, the questions may be simple exercises or use cases related to the tools experimented in the laboratories. For each question, the maximum grade that can be obtained is specified. The final grade will be the sum of the grades assigned to the answers given to the questions. The written test will be taken in a classroom using the Exams platform. In case of technical problems, the students may be asked to write their test with pencil and paper. The total duration of the test, as measured by the Exams platform, which includes the setup time, is 1 hour and 40 minutes. The test is closed-book, i.e., the student cannot consult any material during the test and cannot use any electronic device except the PC used for the test. A set of sample questions is available to the students through the online course platform. Optional oral test: The teacher may request an oral test to be carried out in case of doubts about the evaluation of the written test. The oral test will consist of additional questions to resolve the teachers' doubts that emerged in evaluating the student's written test. Final grading: the final grade will be the sum of the written exam (max 28 points), the group reports (max 2 points), the peer grading participation (max 2 points), the challenges (max 1 point) and the class interaction (max 1 point).
In addition to the message sent by the online system, students with disabilities or Specific Learning Disorders (SLD) are invited to directly inform the professor in charge of the course about the special arrangements for the exam that have been agreed with the Special Needs Unit. The professor has to be informed at least one week before the beginning of the examination session in order to provide students with the most suitable arrangements for each specific type of exam.
Esporta Word