Network SecuritySillabus

Fənn kodu

İF-61402y-EN

Kredit

5

Tələbənin iş yükü

90

Semestr

Payız semestri

Akademik il

2

Fənnin tipi

Məcburi

Təhsil forması

Əyani

Tədris dili

İngilis

Auditoriyadaxili saatlar

a) 30 hours - lecture b) 30 hours - laboratory etc.

Auditoriyadan kənar saatlar

a) 50 hours – independent study b) 40 hours – project work or consultation hours, etc.

This course provides students with fundamental knowledge and practical skills in securing computer networks against various cyber threats and attacks. It covers network security principles, common vulnerabilities, network protocols, firewalls, intrusion detection and prevention systems, secure network architecture, access control, encryption, authentication, and security monitoring. Students will also study common network attacks such as denial-of-service (DoS), man-in-the-middle, spoofing, and network scanning, as well as methods for detecting, preventing, and mitigating these threats. Practical exercises and laboratory activities will help students develop the skills required to analyze network traffic, configure security mechanisms, identify vulnerabilities, and implement effective network protection measures.

• mühazirə
• interaktiv müzakirə
• laboratoriya işi
• problem-based learning
• case study
• təqdimatlar

1. 1

   CLO 1: Should be able to organize network access in accordance with authentication, identification, and access rules.

2. 2

   CLO 2: Should be able to perform network auditing and logging.

3. 3

   CLO 3: Should be able to perform network auditing and logging.

4. 4

   CLO 4: Should be able to establish and configure DMZ zones when integrating or connecting networks with other networks.

5. 5

   CLO 5: Should possess fundamental knowledge of next-generation firewalls

6. 6

   CLO 6: Should be aware of known attacks that can be carried out against networks and know methods for preventing them or quickly mitigating their effects.

1. 1.
   Introduction to network security and secure network managementMühazirə

   This topic introduces the fundamental concepts, principles, and objectives of network security and secure network management. It covers common network threats, vulnerabilities, and attack vectors, as well as basic methods for protecting network infrastructure, devices, and data. Students will learn about security policies, access control, authentication, authorization, network monitoring, risk management, and secure configuration practices. The topic also provides an overview of security management approaches for maintaining the confidentiality, integrity, and availability of network resources.

2. 2.
   OSI/TCP-IP models and physical layer securityMühazirə

   This topic provides an overview of the OSI and TCP/IP reference models, their layers, functions, and role in network communication. It examines the relationship between network protocols and security mechanisms across different layers. The topic also focuses on physical layer security, including the protection of network devices, cables, ports, communication infrastructure, and physical access points from unauthorized access, damage, tampering, and interception. Students will learn basic methods and practices for securing physical network infrastructure and maintaining the availability and reliability of network communications.

3. 3.
   Data link layer securityMühazirə

   This topic covers the security principles and mechanisms of the Data Link Layer in computer networks. It examines common threats and attacks such as MAC address spoofing, MAC flooding, ARP-based attacks, VLAN hopping, and unauthorized network access. Students will learn about security mechanisms and technologies including VLAN segmentation, port security, MAC address filtering, 802.1X authentication, and secure switch configuration. The topic also introduces practical approaches for monitoring and protecting Layer 2 networks against unauthorized access, network manipulation, and data interception.

4. 4.
   Layer 2 attacks and defense mechanismsMühazirə

   This topic examines common attacks targeting the Data Link Layer (Layer 2) of computer networks and the techniques used to detect, prevent, and mitigate them. It covers attacks such as MAC flooding, ARP spoofing and poisoning, VLAN hopping, DHCP spoofing, and STP manipulation. Students will study defense mechanisms including port security, DHCP snooping, Dynamic ARP Inspection (DAI), IP Source Guard, VLAN segmentation, and Spanning Tree Protocol security features. Practical approaches to configuring and monitoring Layer 2 security controls are also introduced to strengthen network resilience against unauthorized access and network-based attacks.

5. 5.
   STP security and protection against Layer 2 loopsMühazirə

   This topic focuses on the security of the Spanning Tree Protocol (STP) and mechanisms for preventing Layer 2 network loops. Students will learn the principles of STP, root bridge election, and the role of STP in maintaining a loop-free switched network. The topic covers common STP-related threats, including unauthorized root bridge manipulation and malicious BPDU injection. Students will also study security mechanisms such as BPDU Guard, BPDU Filter, Root Guard, Loop Guard, and PortFast, as well as their appropriate application for protecting network infrastructure and ensuring stable network operation.

6. 6.
   Network layer security: IP and routingMühazirə

   packet forwarding, and routing mechanisms. Students will examine common threats to IP-based communication and routing infrastructure, including IP spoofing, packet interception, route manipulation, and routing attacks. The topic introduces security mechanisms such as access control lists (ACLs), IP filtering, secure routing protocols, anti-spoofing techniques, and network segmentation. Students will also learn basic methods for securing routers and routing processes to ensure the confidentiality, integrity, availability, and reliable delivery of network traffic.

7. 7.
   ACLs and secure management of network trafficMühazirə

   This topic covers the use of Access Control Lists (ACLs) to control, filter, and secure network traffic. It explains how ACL rules are used to permit or deny specific traffic based on source and destination IP addresses, protocols, and ports. The topic also introduces the principles of secure traffic management, rule ordering, and the application of ACLs on network devices to prevent unauthorized access and protect network resources.

8. 8.
   Transport layer security and secure communicationsMühazirə

   This topic covers security mechanisms at the Transport Layer and the protection of data during network communication. It introduces TCP/UDP security, TLS, SSL, encryption, authentication, and secure communication protocols. Students learn how secure connections are established, how data confidentiality and integrity are maintained, and how common transport-layer threats can be mitigated.

9. 9.
   Network service security: DHCP and DNSMühazirə

   This topic covers the security of essential network services, with a focus on DHCP and DNS. It introduces common DHCP and DNS vulnerabilities, including DHCP spoofing, rogue DHCP servers, DNS spoofing, cache poisoning, and unauthorized modifications. Students learn security mechanisms and best practices for protecting DHCP and DNS services, ensuring reliable network communication, and preventing unauthorized access and manipulation.

10. 10.
    VPN and encrypted network connectionsMühazirə

    This topic covers Virtual Private Networks (VPNs) and their role in establishing secure and encrypted network connections. It introduces VPN technologies, tunneling protocols, encryption, authentication, and secure remote access. Students learn how VPNs protect data transmitted over public or untrusted networks and how encrypted connections can be implemented to ensure confidentiality, integrity, and secure communication between network endpoints.

11. 11.
    Firewalls and network traffic protectionMühazirə

    This topic covers the principles and technologies of firewall-based network traffic protection. It introduces firewall types, traffic filtering, security rules, stateful and stateless inspection, and application-level filtering. Students learn how firewalls control inbound and outbound traffic, block unauthorized connections, and protect network resources from common network-based threats.

12. 12.
    IDS/IPS and detection of network attacksMühazirə

    This topic covers Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) and their role in identifying and preventing network attacks. It introduces signature-based and anomaly-based detection, network traffic monitoring, alert generation, and common attack detection techniques. Students learn how IDS/IPS solutions analyze network activity, detect suspicious behavior, and respond to potential security threats.

13. 13.
    Wireless network securityMühazirə

    This topic covers the principles and technologies used to secure wireless networks and communications. It introduces wireless security protocols, authentication and encryption mechanisms, secure access point configuration, and common wireless attacks such as unauthorized access, eavesdropping, and rogue access points. Students learn how to implement security measures to protect wireless networks, users, and transmitted data.

14. 14.
    Application-layer and web service network securityMühazirə

    This topic covers security principles and mechanisms for protecting application-layer protocols and web services. It introduces common application-layer threats, secure web communication, authentication, authorization, input validation, and protection of web services against unauthorized access and attacks. Students learn how to identify vulnerabilities and apply security measures to ensure the confidentiality, integrity, and availability of web-based services.

15. 15.
    Network monitoring, SIEM, and security event analysisMühazirə

    This topic covers network monitoring and the use of Security Information and Event Management (SIEM) systems for collecting, correlating, and analyzing security events. It introduces log management, event correlation, alert generation, incident detection, and security monitoring techniques. Students learn how to analyze network and system logs, identify suspicious activities, and use SIEM solutions to support threat detection and incident response.

1. Santos, Omar. CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide. Cisco Press, 2023.
2. Muniz, Joseph, James Risler, and Steven Chimes. CCNP Security Virtual Private Networks SVPN 300-730 Official Cert Guide. Cisco Press, 2021.
3. Rajib, Nazmul. CCNP Security Cisco Secure Firewall and Intrusion Prevention System Official Cert Guide. Cisco Press, 2022.
4. Kizza, Joseph Migga. Computer network security. Boston, MA: Springer US, 2005.
5. Odom, Wendell. CCNA 200-301 Official Cert Guide, Volume 2. Cisco Press, 2019.
6. Odom, Wendell. CCNA 200-301 Official Cert Guide, Volume 1. Cisco Press, 2020.
7. Lammle, Todd. "Understanding Cisco Networking Technologies: Exam 200-301." (2020).
8. Meyers, Mike. CompTIA Network+ Certification All-in-One Exam Guide, Eighth Edition (Exam N10-008). McGraw-Hill Education, 2022