Networking and Security Course Group Status Report

April 2005

Networking Courses
Course no.	Title	Credit Hours	Reqd (R)/ Elective (E)
CSE494I	Introduction to Information Security	3	E
CSE694K	Network Security	3	E
CSE 677	Introduction to Computer Networking	3	E
CSE 678	Internetworking	3	E
CSE 679	Introduction to Multimedia Networking	3	E
CSE 777	Telecommunication Networks	3	E

1. Summary

The CSE department offers the following courses related to computer networking and security: CSE494I, CSE694K, CSE 677, CSE 678, CSE 679, and CSE 777. These courses expose students to various technologies behind the Internet. They are among the most popular elective courses. Students who wish to specialize in networking should take all of these courses. (The course numbers 494I and 694K are only temporarily used for the pilot sections. They will be replaced later with different, permanent numbers.)

2. Detailed Analysis

Section 2.1 describes the individual courses in the group. Section 2.2 explains how the group is related to the rest of program. Section 2.3 explains how the group helps achieve a number of EC 2000 and CSE outcomes. Section 2.4 discusses how we have addressed the concerns raised in the previous report. Section 2.5 summarizes additional main changes we have made in the courses since the previous report. Section 2.6 discusses some continuing concerns involving these courses and our plans to address them.

2.1 Summary of the courses

CSE 494I: Introduction to Information Security provides a high-level introduction to information security, with a focus on business aspects such as strategies and basic elements of information security architecture. It is a 3-credit course, with CSE 314 or 321 or AMIS 531 as the prerequisite. The course description is as follows: an introduction to security of digital information including: threats; regulations; vulnerability assessment; attack detection and response; cryptography, forensics; and technical training and certifications. This course has been taught twice as a pilot in Winter of 2004 and 2005.

CSE 694K: Network Security is a 3-credit course, with CSE 677 as the prerequisite. It provides an introduction to network security, and then covers the following topics: security threats, services, protocols, verification and design, architectures, technologies, testing, advances; elements of cryptography; securing network systems and applications.

CSE 677: Introduction to Computer Networking is the introductory course to computer networking and provides the background required for all other courses in this group (except for 494I). 677 covers the basic techniques for data communications, including network architecture, communication protocols, data link control, medium access control, local area networks, and wide area networks. The course also provides an introduction to the Internet and its protocols. Both programming and non-programming assignments are used to help students understand the material.

CSE 678: Internetworking focuses on the Internet protocol suite TCP/IP. It covers the IP protocol including addressing, internetworking, data forwarding, fragmentation and reassembly. The course covers the TCP protocol including key features, congestion control mechanisms and implementation choices. It provides an introduction to IPv6, its addressing scheme and features. The course also covers other important parts of the TCP/IP suite, such as Address Resolution Protocol (ARP), Internet Control Message Protocol (ICMP), The Domain Name System (DNS), Simple Network Management Protocol (SNMP), HyperText Transfer Protocol (HTTP) and initialization (BOOTP and DHCP). The course also introduces features of Mobile IP and Network Security. The labs and homeworks in 678 are similar in spirit to the ones assigned in 677.

CSE 679: Introduction to Multimedia Networking provides background on multimedia and network adaptation to better support multimedia requirements. This course will help the students become familiar with the basics of multimedia data type, and compression technologies; understand World-Wide-Web architecture, proxy, and streaming video technologies; understand how to evolve the best-effort service of the Internet to better support multimedia; be exposed to some new networking technologies beyond the best-effort service to better support multimedia. These ideas are solidified via one or more programming labs, a typical example being JPEG encoding. The students usually program in C.

CSE 777: Telecommunication Networks is an advanced course that introduces communication networks and concepts such as frame relay, narrow and broadband integrated services digital network (ISDN), asynchronous transfer mode (ATM), gigabit networks, wireless network and, all-optical networks. The emphasis is on communication networks, their functioning, traffic management and quality of service (QOS) provided for different types of transfer: data, voice and video, real and non-real time.

2.2 Relation of the courses to the rest of the CSE program

CSE 494I: Introduction to Information Security

Prerequisite: CSE 314 or 321 or AMIS 531

CSE 694K: Network Security
Prerequisite: CSE 677.

CSE 677: Introduction to Computer Networking
Prerequisites: Physics 112 or 132, CSE 360 or EE 265, and CSE 459.21.
This course is a prerequisite of CSE 694K, 678, 679, 777

CSE 678: Internetworking: This course is a continuation of CSE 677.
Prerequisites: CSE 660 and CSE 677.

CSE 679: Introduction to Multimedia Networking
Prerequisite: CSE 677.

CSE 777: Telecommunication Networks
Prerequisite: CSE 677.

None of these courses is a prerequisite for other CSE courses (which are not in this group). Students typically take these courses (except for 494I) in their junior or senior year. They will see in most of these courses how many of the concepts they have learned from other courses such as computer architectures, finite automata, operating systems, probability and statistics etc., are useful in computer networking.

2.3 Relation to program outcomes

The courses in this group play a key role in meeting both CSE program outcomes as well as EC 2000 Criterion 3 outcomes. We first consider CSE outcomes and then the EC 2000 outcomes.

2.3.1 CSE Outcomes

The published objectives and outcomes for the BS-CSE program lists the following five groups of outcomes.

Students will:

Demonstrate proficiency in the areas of software design and development, algorithms, operating systems, programming languages, information systems, and computer architecture.
Demonstrate proficiency in relevant aspects of mathematics, including discrete mathematics and probability, as well as electrical circuits and devices.
Successfully apply these principles and practices to a variety of problems.

Students will:

Demonstrate an understanding of differential and integral calculus, and of statistics.
Demonstrate an understanding of the basic principles of physics and at least one other laboratory-based science.
Demonstrate an understanding of the basic principles of at least one other engineering discipline in addition to computing and electrical engineering.

Students will:

Demonstrate familiarity with basic concepts and contemporary issues in the social sciences and the humanities.
Demonstrate an understanding of social, professional and ethical considerations related to engineering in general and to computing in particular.

Students will:

Demonstrate an ability to work effectively in teams.
Demonstrate an ability to communicate effectively.

Graduates will:

Find suitable positions in industry and government that offer the prospect of challenging and rewarding careers in computing.
Demonstrate an ability to acquire new knowledge in the computing discipline and to engage in life-long learning.
[Graduates with an aptitude for, and interest in, graduate studies will] Apply to and be accepted for entry by strong graduate programs in computing.

This group of courses contributes strongly toward CSE outcomes I.i and I.iii. Students typically take these courses (except for 494I) in their junior or senior year. These courses require the students to apply the knowledge and skills they have learned in other courses such as computer architectures, finite automata, operating systems. For example, the programming skills they have developed in several of the courses are key to successfully understanding the basics as well as the details of how various network protocols function. Basic ideas from digital logic as well as more advanced ideas from the architecture course serve as a base on which the functioning of routers and switches is explored. By completing the programming as well as non-programming assignments in these courses, students demonstrate their proficiency in all of these areas.

The networking group of courses makes its strongest contribution toward outcome V.i. In particular, there is such a high demand for graduates who have technical network-related skills that students who complete these courses are heavily recruited by numerous high-tech companies. Further, the area presents many technical challenges that are appropriate for graduate level research, so the students are also well prepared for entering good graduate programs. And finally, given that the Internet has become one of the most important technologies to facilitate life-long learning for so many people, it is clear that these courses contribute heavily to achieving the related outcome.

The two security courses, CSES 494I and 694K, contribute strongly toward III.ii; while the others only to a limited extent. Computer networks have introduced new social and ethical problems in the form of security, privacy, intellectual property, etc. Many of these problems are subjects of 494I and 694K. Therefore, we believe these two course strongly contribute to CSE outcome III.ii.

The courses in this group contribute moderately toward I.ii, V.ii, and V.iii. In particular, probability and statistics are essential for understanding the performance of network protocols. Probability and discrete mathematics are essential for understanding many of the security algorithms. The physical layer of the network architecture relates to electrical circuits and devices.

The courses in this group contribute moderately toward V.ii and V.iii.

CSE 494I contributes moderately toward IV.ii, as it requires students to write papers and make presentations. Before taking this course, students must have taken a second writing course.

Summary of Relation to CSE Outcomes

Course no.

CSE
I.i

CSE
I.ii

CSE
I.iii

CSE
II.i

CSE
II.ii

CSE
II.iii

CSE
III.i

CSE
III.ii

CSE
IV.i

CSE
IV.ii

CSE
V.i

CSE
V.ii

CSE
V.iii

CSE494I

XXX

CSE694K

XXX

CSE 677

XXX

CSE 678

XXX

CSE 679

XXX

CSE 777

XXX

2.3.2 EC 2000 Criterion 3 Outcomes

EC 2000 Criterion 3 requires that engineering programs must demonstrate that their students attain:

an ability to apply knowledge of mathematics, science, and engineering
an ability to design and conduct experiments, as well as to analyze and interpret data
an ability to design a system, component, or process to meet desired needs within realistic constraints such as economic, environmental, social, political, ethical, health and safety, manufacturability, and sustainability
an ability to function on multi-disciplinary teams
an ability to identify, formulate, and solve engineering problems
an understanding of professional and ethical responsibility
an ability to communicate effectively
the broad education necessary to understand the impact of engineering solutions in a global, economic, environmental, and societal context
a recognition of the need for, and an ability to engage in, life-long learning
a knowledge of contemporary issues
an ability to use the techniques, skills, and modern engineering tools necessary for modern engineering practice.

The networking courses contribute strongly to ABET criteria 3a, 3b, 3e, and 3k, enabling students to design and tailor protocols to meet specific requirements. The two security courses also strongly contribute to criterion 3f; students will achieve a profound understanding of professional and ethical issues through studies of security concerns.

The courses in this group contribute moderately to criteria 3b and 3j. They also help students see how technical ideas in networking enable communication among different groups and also how these ideas can have a global impact on society; the latter is especially true in the case CSE 678, given the incredible impact that the Internet has had on all aspects of human endeavor. The rapid evolution of ideas in networking also enable students to recognize the need for life-long learning; and since many of these changes are in response to contemporary needs, students also acquire an appreciation of these needs.

Summary of Relation to ABET Objectives
Course no.	ABET 3a	ABET 3b	ABET 3c	ABET 3d	ABET 3e	ABET 3f	ABET 3g	ABET 3h	ABET 3i	ABET 3j	ABET 3k
CSE494I	XXX	XX	XXX		XXX	XXX	XX		X	XX	XXX
CSE694K	XXX	XX	XXX		XXX	XXX			X	XX	XXX
CSE 677	XXX	XX	XXX		XXX	X			X	XX	XXX
CSE 678	XXX	XX	XXX		XXX	X			X	XX	XXX
CSE 679	XXX	XX	XXX		XXX	X			X	XX	XXX
CSE 777	XXX	XX	XXX		XXX	X			XXX	XX	XXX

2.4 Responses to concerns raised in the previous report

Concern: With respect to CSE 677 and 678, we wrote: "We are considering a reorganization of these two courses so that the topics are taught in a more top-down fashion."

Response: CSE 677 is now taught by most instructors in the top-down approach using the textbook “Computer Networking: A Top-Down Approach Featuring the Internet” by James F. Kurose and Keith W. Ross. We will keep observing how this work and revisit the above issue in the future.

2.5 Additional major changes since the previous report

CSE 679: Based on student feedbacks and the latest development in multimedia networking, the course has been updated, with more emphasis on multimedia communication protocols (such as RTP), multimedia services (such as voice over IP), and Quality of Service (QoS) support to multimedia communications.

New course: A new course, CSE 494I: Introduction to Information Security, has been introduced to the curriculum. Information security has become a critical component in today's organizations. There is a strong market demand for such expertise. However, there are very few universities offering information security courses or programs. OSU did have any such courses. Now we have created CSE 494I as a first step to meet the society demand. This course provides a high-level introduction to information security, with emphasis on business aspects such as strategies and basic elements of information security architecture. Specifically, the following topics are covered: an introduction to security of digital information including: threats; regulations; risk management; attack detection and response; cryptography, forensics; and technical training and certifications. This course has been taught twice as a pilot in Winter 2004 and Winter 2005. This course implements one of the IA (information Assurance) courses certified by the Committee on National Security Systems and the National Security Agency (NCA).

The curriculum committee has recently decided to convert this course to a regular one, with CSE 551 as the designated course number.

New course: A new course, CSE 694K: Network Security, has been introduced to the curriculum. It was taught as a pilot course in Spring 2004 and is being piloted again in Spring 2005. This 3 credit course has one prerequisite: CSE 677: Introduction to Computer Networking. It goes into more depth than some topics introduced in CSE 494K. The CSE694K course description is as follows: an introduction to network security; network security threats, network security architectures, network security properties and services (such as authentication, privacy, integrity, key management, etc.), protocols, and their design/verification /implementation, elements of cryptography ; popular key schemes and their considerations; case studies of protocol implementations securing network systems and applications (such as Kerberos, Email Security, Web Security, IP Security, etc.); denial of service; worm defense; anonymous communication; intrusion detection; firewall; virtual private networks. The course includes homework assignments, programming projects, and web research on the state-of-the-art issues and solutions. The course is the one of the IA (information Assurance) courses certified by the Committee on National Security Systems and the National Security Agency (NCA). It is also intended as one of the courses in a Security Minor to be created as we add more security course in the CSE curriculum.

As documented in the following table, there are a few topics which are covered in both 494I and 694K, but at different levels of depth. For these common topics, students who have taken 494I will benefit from going on to take 694K.

Overlap Content Items	CSE494I	CSE694K
Threats	Threats to organization information systems	Threats to network systems
Social, ethical, policy and legal issues	Detail	Brief
Cryptography	Basic ideas of security and public keys	Cipher, one-way functions, security and public key mechanisms
Intrusion Detection	Brief	Principles, protocols and instance detail studies: DDoS, Active worm detection
Incident Response	General description	DDoS and active worm defense
Malicious Code	Instance oriented introduction	Protocols and working Mechanisms
PGP	Configuration	Protocols and working Mechanisms
Firewall	Configuration	Protocols and working Mechanisms
VPN	Configuration	Protocols and working Mechanisms

2.6 Continuing concerns/suggestions

CSE 694K: The enrollment was not as high as expected. We should consider this issue before converting it to a regular course.

CSE 677: There are two questions which may deserve a thought. First, should 677 be a required course for all CSE undergraduates? Second, how does this course compare to the ACM-recommended first networking course in terms of topics?

CSE 777: Certain topics such as "ATM networks" have become less popular in the recent years. Several new networking topics have become more relevant such as wireless and sensor networks. One suggestion is to teach advanced and relevant topics in this course which may change from one year to the next. This course can therefore be better renamed as "Advanced Topics in Networking", thus giving the flexibility to the instructor to educate students with the latest topics in networking.

3. Conclusions

The networking courses constitute an important and popular set of electives for both our graduate and undergraduate students. These courses help us meet a number of the CSE outcomes as well as a number of the ABET Criterion 3 outcomes.

Course no.	Coordinator	Recent Instructors
CSE 494I	Xuan	Romig
CSE 694K	Arora	Arora
CSE 677	Xuan	Arora, Lai, Lee, Sinha, Xuan
CSE 678	Liu	Liu
CSE 679	Xuan	Xuan
CSE 777	Sinha	Babic, Sinha

People involved in preparing report: Anish Arora, Gojko Babic, Steve Lai, David Lee, Mike Liu, Prasun Sinha, Dong Xuan

Date of report: April, 2005

Steve Lai

April, 2005.