🛡️ Network Security & Cryptography Master Academic Repository

Welcome to the Network Security & Cryptography Master Academic Repository. This repository contains a complete, university-level Network Security curriculum, interactive textbook companion, lecture slide breakdown suite, computer assignment lab analysis, and research project implementation.

---

🌐 Live Online Textbook Portal

Access the interactive multi-page course website locally or via GitHub Pages:

• 📚 Master Documentation Portal: docs/textbook/index.html
• 🌐 Live GitHub Pages URL: https://tahamajs.github.io/Network_Security_UT/textbook/index.html
• 🚀 Automated CI/CD Workflow: Integrated via .github/workflows/pages.yml

---

📊 Academic Scope & Audit Metrics

---

📁 Repository Directory Structure

.
├── docs/
│   ├── index.html                       # Root GitHub Pages Redirect Portal
│   ├── .nojekyll                        # Disables Jekyll processing for raw HTML
│   └── textbook/                        # Complete University Textbook Website
│       ├── index.html                   # Master Landing Portal & Knowledge Map
│       ├── css/
│       │   └── style.css                # Custom Responsive Dark-Theme Stylesheet
│       ├── chapters/                    # 16 Full Textbook Chapters (3,000+ words each)
│       │   ├── 01-introduction.html
│       │   ├── 02-classical-cryptography.html
│       │   ├── 03-symmetric-cryptography.html
│       │   ├── 04-block-ciphers.html
│       │   ├── 05-public-key-cryptography.html
│       │   ├── 06-authentication.html
│       │   ├── 07-digital-signatures.html
│       │   ├── 08-key-management.html
│       │   ├── 09-network-security-applications.html
│       │   ├── 10-transport-security.html
│       │   ├── 11-wireless-security.html
│       │   ├── 12-email-security.html
│       │   ├── 13-ip-security.html
│       │   ├── 14-intrusion-detection.html
│       │   ├── 15-firewalls.html
│       │   └── 16-usable-security.html
│       ├── slides/                      # 23 Lecture Slide Companions (deck-01.html to deck-23.html)
│       ├── labs-exams/                  # Lab Analysis, Homeworks, Exams & Project
│       │   ├── hw-solutions.html        # Homework 1 through Homework 5 Solutions
│       │   ├── ca-lab-analysis.html     # Computer Assignments 1 through 4 (Wireshark PCAPs)
│       │   ├── loopy-hello-research.html# USENIX Security '24 Loopy Hello Research Project
│       │   └── exam-solutions.html      # Past Examination Problems & Step-by-Step Solved Math
│       ├── glossary.html                # Cryptographic A–Z Master Glossary
│       ├── takeaways.html               # 50 Core Key Security Takeaways
│       └── faq.html                     # Frequently Asked Questions & Exam Guide
├── HomeWorks/                           # Original Homework Assignments & Python Code (HW1–HW5)
├── NetSec/                              # Computer Assignments & Wireshark PCAP Traces (CA1–CA4)
├── proj/                                # USENIX Security '24 Research Project (Codes & Slides)
├── slides/                              # Original PDF Lecture Slide Decks
├── Books/                               # Textbook References & Academic Citation Mapping
├── scripts/                             # Repository Audit Tools (check_links.py)
└── .github/
    ├── workflows/
    │   └── pages.yml                    # Automated GitHub Pages Deployment Workflow
    ├── ISSUE_TEMPLATE/
    │   └── bug_report.md
    └── pull_request_template.md

---

🗺️ Master Knowledge Map

[ REFERENCE BOOKS ]  ──► Stallings 7th Ed (Architecture & Standards) + Smart 3rd Ed (Math Proofs)
          │
          ▼
[ CONCEPTS & THEORY ] ──► 16 Master Chapters (Galois Fields, RSA, TLS 1.3, IPsec, Firewalls)
          │
          ▼
[ LECTURE SLIDES ]   ──► 23 Slide Companions (deck-01.html – deck-23.html, 689 slides analyzed)
          │
          ▼
[ LABS & PROJECT ]   ──► HW1–HW5, CA1–CA4 (Wireshark PCAPs), USENIX '24 Loopy Hello Project

---

📖 Comprehensive Curriculum Breakdown

1. Master Textbook Chapters (docs/textbook/chapters/)

1. Chapter 01: Introduction to Network Security & Security Architecture
   CIA Triad (Confidentiality, Integrity, Availability), Authenticity, Non-Repudiation, ITU-T X.800 Architecture, Active vs. Passive Threats, Defense-in-Depth.
2. Chapter 02: Classical Cryptography & Cryptanalysis
   Substitution (Caesar, Vigenère, Hill matrix cipher), Transposition, Frequency Analysis, Index of Coincidence, One-Time Pad (OTP) Unconditional Secrecy Proof.
3. Chapter 03: Symmetric Cryptography & Block Cipher Modes
   Stream vs Block Ciphers, ECB (Pattern Leakage), CBC (IV Security & Padding Oracles), CFB, OFB, CTR, XTS-AES, AEAD Authenticated Encryption (AES-GCM).
4. Chapter 04: Block Ciphers, DES & Feistel Architecture
   Claude Shannon's Confusion (S-Boxes) & Diffusion (P-Boxes), Feistel Cipher Network Invertibility, DES Round Function F, 56-bit Brute Force, Triple DES (3DES) EDE.
5. Chapter 05: Public-Key Cryptography & Number Theory
   Asymmetric Trapdoor Functions, Primes, GCD, Extended Euclidean Algorithm, Euler's Totient $\phi(n)$, Fermat's & Euler's Theorems, Discrete Logarithm Problem (DLP), Diffie-Hellman Key Exchange.
6. Chapter 06: User Authentication & Kerberos Architecture
   Multi-Factor Authentication (MFA), Password Storage (Argon2id, bcrypt, PBKDF2), Challenge-Response HMAC, Kerberos v4/v5 Protocol (AS, TGS, Service Tickets, Timestamps).
7. Chapter 07: Digital Signatures, RSA & ECDSA
   RSA Cryptosystem (Factorization, Modulus $n=pq$, Private exponent $d$), RSA-PSS Padding, Elliptic Curve Cryptography (ECC Weierstrass Curves), ECDSA Nonce Security.
8. Chapter 08: Key Management, Distribution & PKI Infrastructure
   Key Distribution Centers (KDC), Needham-Schroeder Protocol, X.509 Digital Certificates, Root CA Trust Hierarchies, Certificate Revocation Lists (CRL), OCSP & OCSP Stapling.
9. Chapter 09: Network Security Applications & Protocols
   OSI Layer Security Trade-offs, SSH Protocol Suite (SSH-TRANS, SSH-USERAUTH, SSH-CONNECT), HTTPS, DNSSEC Cryptographic RRSIG Records.
10. Chapter 10: Transport Layer Security (TLS 1.2 / TLS 1.3)
    TLS Record Protocol, Handshake Protocol (2-RTT TLS 1.2 vs 1-RTT TLS 1.3), Mandatory ECDHE Forward Secrecy, AEAD Ciphers, Vulnerability Mitigations (BEAST, POODLE, Heartbleed).
11. Chapter 11: Wireless Network Security (IEEE 802.11i)
    802.11i Architecture, WEP 24-bit IV Collisions & CRC32 Linear Flaws, WPA2-CCMP (AES), WPA3 Simultaneous Authentication of Equals (Dragonfly SAE Handshake).
12. Chapter 12: Electronic Mail Security Protocols
    Pretty Good Privacy (PGP Web of Trust), S/MIME X.509 PKI, DomainKeys Identified Mail (DKIM DNS Signatures), Sender Policy Framework (SPF), DMARC Domain Spoof Enforcement.
13. Chapter 13: IP Security (IPsec: AH, ESP, IKEv2)
    Layer 3 IPsec Protocol Suite, Authentication Header (AH), Encapsulating Security Payload (ESP), Transport Mode vs Tunnel Mode, Security Associations (SA, SPI, SAD, SPD), IKEv2 Key Exchange.
14. Chapter 14: Intrusion Detection Systems (IDS/IPS) & SIEM
    Host-Based (HIDS) vs Network-Based (NIDS), Signature Detection (Snort Rules) vs Anomaly Detection (Statistical Baselines), Confusion Matrix ($TP, FP, TN, FN$), ROC Curves, SIEM.
15. Chapter 15: Firewalls, Perimeter Defense & DMZ Architecture
    Stateless Packet Filtering, Stateful Inspection Connection Tables, Application Proxies, Next-Generation Firewalls (NGFW), Dual-Homed DMZ Subnet Architecture.
16. Chapter 16: Usable Privacy & Security and Human Factors
    Human-in-the-Loop Model, Password Usability Cognitive Limits, FIDO2/WebAuthn Hardware Security Keys, Active vs Passive Warnings, Habituation & Phishing Mitigations.

---

2. Lab Assignments & Practical Code

• Homework 1 (HW1): Classical Cipher Decryption Solvers (HomeWorks/HW1/Solution_code/Solution.py) & DES S-Box Tables (s-box-tables.txt).
• Homework 2 (HW2): AES $\text{GF}(2^8)$ Galois Field Operations (HomeWorks/HW2/codes/Q1.py, Q2.py, aes_encryption.py) & ECB Image Pattern Leakage.
• Homework 3 (HW3): RSA Mathematics Report (HomeWorks/HW3/answers/main.pdf, 40 pages) & Extended Euclidean Inverses.
• Homework 4 (HW4): IPsec Configuration (ipsec.conf) & Wireshark Handshake Captures (ssl3.0.cap, tls1.2.cap, tls1.3.cap).
• Homework 5 (HW5): OpenSSL S/MIME PKI Certificate Generation (certificate_s_mime_mv.cer) & Email Signature Verification.
• Computer Assignments (CA1–CA4): Wireshark Packet Filtering, TCP 3-Way Handshake, SYN Flood Cookie Defenses, SSL 3.0 vs TLS 1.2 vs TLS 1.3 PCAP Analysis (Q4_TLS13_H_no_clientkeyexchange.txt).
• *Course Project (Loopy Hell(ow)):* USENIX Security '24 Application-Layer Infinite Traffic Loop Simulator (proj/Codes/server.py, Scapy traffic generators, UDP amplification loop benchmarks).

---

💻 Diagnostic Commands & Verification

Run Automated Link Checker

Audit all internal HTML links across the repository:

python3 scripts/check_links.py

Test Local Web Server

Serve the documentation locally using Python's built-in HTTP server:

python3 -m http.server 8000 --directory docs/textbook

Then navigate to http://localhost:8000 in your web browser.

---

📚 Academic References & Citations

1. William Stallings, Cryptography and Network Security: Principles and Practice (7th Edition, Global Edition), Pearson.
2. Nigel Smart, Cryptography: An Introduction (3rd Edition / Cryptography Made Simple), Springer.
3. Yepeng Pan, Anna Ascheman, Christian Rossow, "Loopy Hell(ow): Infinite Traffic Loops at the Application Layer", USENIX Security Symposium 2024.
4. IETF RFC Specifications: RFC 5246 (TLS 1.2), RFC 8446 (TLS 1.3), RFC 4301 (IPsec Architecture), RFC 5280 (X.509 PKI).

---

📜 License

This repository is distributed under the MIT License.