Course Description | Outline | Cybersecurity Training | IT Training

Overview

This course teaches the student the fundamental concepts, methodologies, and tools necessary to analyze network traffic for the purposes of intrusion and threat detection and network defense.

The hands-on course begins with a discussion of role of network traffic analysis in computer network operations (CNO), defense (CND), and incident response. After a detailed discussion of the TCP/IP protocol suite and ethernet network operations, the student practices using various tools to capture, analyze, and generate IP traffic. Students then explore the tools and techniques used to exploit protocol weaknesses and perform more advanced network attacks. After building a thorough understanding of network based attacks, course focus shifts to the detection and analysis methodologies and tools available.

The course concludes with an extensive real world exercise in which the student must utilize all of the concepts and tools learned in class to analyze and fully characterize network activity and identify legitimate threats and attacks from a simulation of realistic network traffic.

Target Audience

Individuals involved in Computer Network Security, Information Assurance, Network Defense, Incident Response, or anyone else wishing to better understand the threats that may face their networks on a daily basis.

Prerequisites

Students should have a good understanding of TCP/IP networking and network security, and should be comfortable operating at the Linux command line.  UMBC Training Centers’ Linux+, CCNA, and CEH are recommended pre-requisite courses.

Contact

• if you have any questions about this course,
• to be notified when this course and any closely related courses are scheduled for open enrollment,
• to request a quote for group training at your location or ours.