Network SecurityMövzu planı

This topic introduces the fundamental concepts, principles, and objectives of network security and secure network management. It covers common network threats, vulnerabilities, and attack vectors, as well as basic methods for protecting network infrastructure, devices, and data. Students will learn about security policies, access control, authentication, authorization, network monitoring, risk management, and secure configuration practices. The topic also provides an overview of security management approaches for maintaining the confidentiality, integrity, and availability of network resources.

This topic provides an overview of the OSI and TCP/IP reference models, their layers, functions, and role in network communication. It examines the relationship between network protocols and security mechanisms across different layers. The topic also focuses on physical layer security, including the protection of network devices, cables, ports, communication infrastructure, and physical access points from unauthorized access, damage, tampering, and interception. Students will learn basic methods and practices for securing physical network infrastructure and maintaining the availability and reliability of network communications.

This topic covers the security principles and mechanisms of the Data Link Layer in computer networks. It examines common threats and attacks such as MAC address spoofing, MAC flooding, ARP-based attacks, VLAN hopping, and unauthorized network access. Students will learn about security mechanisms and technologies including VLAN segmentation, port security, MAC address filtering, 802.1X authentication, and secure switch configuration. The topic also introduces practical approaches for monitoring and protecting Layer 2 networks against unauthorized access, network manipulation, and data interception.

This topic examines common attacks targeting the Data Link Layer (Layer 2) of computer networks and the techniques used to detect, prevent, and mitigate them. It covers attacks such as MAC flooding, ARP spoofing and poisoning, VLAN hopping, DHCP spoofing, and STP manipulation. Students will study defense mechanisms including port security, DHCP snooping, Dynamic ARP Inspection (DAI), IP Source Guard, VLAN segmentation, and Spanning Tree Protocol security features. Practical approaches to configuring and monitoring Layer 2 security controls are also introduced to strengthen network resilience against unauthorized access and network-based attacks.

This topic focuses on the security of the Spanning Tree Protocol (STP) and mechanisms for preventing Layer 2 network loops. Students will learn the principles of STP, root bridge election, and the role of STP in maintaining a loop-free switched network. The topic covers common STP-related threats, including unauthorized root bridge manipulation and malicious BPDU injection. Students will also study security mechanisms such as BPDU Guard, BPDU Filter, Root Guard, Loop Guard, and PortFast, as well as their appropriate application for protecting network infrastructure and ensuring stable network operation.

packet forwarding, and routing mechanisms. Students will examine common threats to IP-based communication and routing infrastructure, including IP spoofing, packet interception, route manipulation, and routing attacks. The topic introduces security mechanisms such as access control lists (ACLs), IP filtering, secure routing protocols, anti-spoofing techniques, and network segmentation. Students will also learn basic methods for securing routers and routing processes to ensure the confidentiality, integrity, availability, and reliable delivery of network traffic.

This topic covers the use of Access Control Lists (ACLs) to control, filter, and secure network traffic. It explains how ACL rules are used to permit or deny specific traffic based on source and destination IP addresses, protocols, and ports. The topic also introduces the principles of secure traffic management, rule ordering, and the application of ACLs on network devices to prevent unauthorized access and protect network resources.

This topic covers security mechanisms at the Transport Layer and the protection of data during network communication. It introduces TCP/UDP security, TLS, SSL, encryption, authentication, and secure communication protocols. Students learn how secure connections are established, how data confidentiality and integrity are maintained, and how common transport-layer threats can be mitigated.

This topic covers the security of essential network services, with a focus on DHCP and DNS. It introduces common DHCP and DNS vulnerabilities, including DHCP spoofing, rogue DHCP servers, DNS spoofing, cache poisoning, and unauthorized modifications. Students learn security mechanisms and best practices for protecting DHCP and DNS services, ensuring reliable network communication, and preventing unauthorized access and manipulation.

This topic covers Virtual Private Networks (VPNs) and their role in establishing secure and encrypted network connections. It introduces VPN technologies, tunneling protocols, encryption, authentication, and secure remote access. Students learn how VPNs protect data transmitted over public or untrusted networks and how encrypted connections can be implemented to ensure confidentiality, integrity, and secure communication between network endpoints.

This topic covers the principles and technologies of firewall-based network traffic protection. It introduces firewall types, traffic filtering, security rules, stateful and stateless inspection, and application-level filtering. Students learn how firewalls control inbound and outbound traffic, block unauthorized connections, and protect network resources from common network-based threats.

This topic covers Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) and their role in identifying and preventing network attacks. It introduces signature-based and anomaly-based detection, network traffic monitoring, alert generation, and common attack detection techniques. Students learn how IDS/IPS solutions analyze network activity, detect suspicious behavior, and respond to potential security threats.

This topic covers the principles and technologies used to secure wireless networks and communications. It introduces wireless security protocols, authentication and encryption mechanisms, secure access point configuration, and common wireless attacks such as unauthorized access, eavesdropping, and rogue access points. Students learn how to implement security measures to protect wireless networks, users, and transmitted data.

This topic covers security principles and mechanisms for protecting application-layer protocols and web services. It introduces common application-layer threats, secure web communication, authentication, authorization, input validation, and protection of web services against unauthorized access and attacks. Students learn how to identify vulnerabilities and apply security measures to ensure the confidentiality, integrity, and availability of web-based services.

This topic covers network monitoring and the use of Security Information and Event Management (SIEM) systems for collecting, correlating, and analyzing security events. It introduces log management, event correlation, alert generation, incident detection, and security monitoring techniques. Students learn how to analyze network and system logs, identify suspicious activities, and use SIEM solutions to support threat detection and incident response.