ISCS 4700 - Network Security and Risk Management

The intent of the Network Security and Defense course is to provide students with knowledge of the concepts used in defending a network, and the basic tools and techniques that can be taken to protect a network and communication assets from cyber threats. Outcomes: To complete this KU, students should be able to do the following: .1. Describe the key concepts in network defense (defense in depth, minimizing exposure, etc.). 2.Explain how network defense tools (firewalls, IDS, etc.) are used to defend against attacks and mitigate vulnerabilities. 3. Analyze how security policies are implemented on systems to protect a network 4. Evaluate how network operational procedures relate to network security. Topics Because of the nature of the material - All topics and sub topics are required in this KU 1. Outline concepts of network defense, such as: a. Defense in Depth b. Network attacks c. Network Hardening d. Minimizing Exposure (Attack Surface and Vectors) 2. Network defense/monitoring tools: a. Implementing Firewalls b. DMZs / Proxy Servers c. VPNs d. Honeypots and Honeynets e. Implementing IDS/IPS 3. Network Operations a. Network Security Monitoring b. Network Traffic Analysis 4. Network security policies as they relate to network defense/security: a. Network Access Control (internal and external) b. Network Policy Development and Enforcement

Note: ** Course code was BUIS **

Credits: 3

Prereq: ISCS 3800, BUIS 3800, or Instructor Permission
Lecture hours: 2
Lab hours: 3
Course/lab fee: $