Intrusion Detection Systems and Auditing

Catalog description

This course is the study of network and system intrusion detection and auditing. An Intrusion Detection System (IDS) utilizes a complex process of determining when a network transmission contains malicious content. The course will begin by reviewing the principles of the Transmission Control Protocol (TCP) and the Internet Protocol (IP). With a solid foundation based on these principles the student will learn how to defend against network attacks. The student will learn the techniques of creating exploit signature code to thwart zero-day attack. The course will provide the student with the knowledge necessary to design, implement, and maintain an enterprise scale Distributed Intrusion Detection System based on the Open System's tool Snort.