Network securitySyllabus

Subject code

MM-1404-EN

Credits

6

Student workload

135

Semester

Autumn semester

Academic year

1

Subject type

Mandatory

Form of education

Full-time

Language of instruction

Azerbaijani

In-class hours

Lectures 30 hours Seminars (Practical Classes) 15 hours

Out-of-class hours

MRTSI 65 hours TSI 70 hours

This course covers the principles of ensuring the security of data and network resources in computer networks. it introduces the fundamental concepts of network security, types of threats and attacks, network architecture security, authentication and authorization mechanisms, encryption techniques, security protocols, firewalls, intrusion detection and prevention systems (ids/ips), virtual private networks (vpns), and network segmentation. the course also examines methods for detecting and preventing dos/ddos attacks, ARP spoofing, DNS attacks, man-in-the-middle (mitm) attacks, and other network-based threats. students develop practical skills in network security monitoring, security incident analysis, and the implementation of protective mechanisms.

• lecture
• interactive discussion
• seminar

1. 1

   CLO 1: Explain the fundamental concepts of network security, including risk, threat, vulnerability, and exploit, as well as the operating principles of network devices according to the OSI model.

2. 2

   CLO 2: Implement secure management protocols for network devices, including ssh, snmpv3, radius/tacacs+, and port security mechanisms.

3. 3

   CLO 3: Analyze the impact of nat/pat, DHCP snooping, ARP inspection, and vrrp/hsrp mechanisms on network security.

4. 4

   CLO 4: Classify network attacks, develop appropriate countermeasures, and present the results, including ai-based solutions, as part of a team

1. 1.
   Introduction to network securityLecture

   This topic introduces the fundamental concepts, objectives, and role of network security in information security. the principles of ensuring confidentiality, integrity, and availability during data transmission over networks are examined, along with major threats to network security and the mechanisms used to mitigate them. students learn about the importance of network security in protecting information systems and data, as well as the principal approaches to secure data transmission.

2. 2.
   Network devicesLecture

   Network devices and their operating principles at different OSI model layers. their role in network security. cdp, snmp, lldp, telnet, rdp, ssh, radius, and TACACS protocols. (lecture) this topic examines the main types and functions of network devices and their operating principles at different layers of the OSI model. the roles of switches, routers, firewalls, and other network devices in network infrastructure and security are explored. the purpose, operating principles, and applications of cdp, snmp, lldp, telnet, rdp, ssh, radius, and TACACS in network device management are also discussed. the topic covers secure remote management, authentication, access control mechanisms, and the differences between secure and insecure management protocols.

3. 3.
   Network device securityLecture

   Vulnerable ports and their secure alternatives. risks, threats, and exploitation techniques. (lecture) this topic explores the security characteristics of ports and services used on network devices. vulnerable ports, the threats they pose, and exploitation techniques that may target them are examined. the implementation of secure alternative protocols, disabling unnecessary services and ports, access control, and secure configuration principles are discussed. students develop the skills needed to identify potential risks on network devices and implement appropriate security measures.

4. 4.
   Risk management in network securityLecture

   This topic examines the concepts of risk, threat, vulnerability, and exploit, including their relationships and differences. the principles of identifying, assessing, and prioritizing security risks within network infrastructure are explored. security measures for risk mitigation, prevention, and monitoring are discussed, along with risk management approaches for protecting network resources. students develop the ability to identify potential risks in network environments, assess their impact, and select appropriate risk management measures.

5. 5.
   Virtual private networks (vpns)Lecture

   Differences between vpns and proxy servers. types of vpns. (lecture) this topic introduces the purpose, operating principles, and key differences between virtual private networks (vpns) and proxy technologies. it explains how vpns protect network connections, encrypt data, and provide secure access to remote networks. remote-access vpns, site-to-site vpns, and other VPN types are examined, including their application areas and usage characteristics. students learn how different VPN solutions operate and how they contribute to network security.

6. 6.
   Local and wide area network securityLecture

   Local and wide area networks. threats originating from wide area networks, their classification, and protection methods. (lecture) this topic examines the architecture, operating principles, and security characteristics of local area networks (lans) and wide area networks (wans). cyber threats originating from wide area networks, their main types, and their potential impact on network resources are explored. security mechanisms such as firewalls, access control, network monitoring, and segmentation are discussed as methods for protecting local and wide area networks. students develop the ability to identify security risks in different network environments and apply appropriate protection methods.

7. 7.
   Dmz securityLecture

   Implementation of a demilitarized zone (dmz) and zone management. security between local and wide area networks. (lecture) this topic introduces the concept of a demilitarized zone (dmz), its implementation in network infrastructure, and its security objectives. the creation of security zones between local and wide area networks, resource isolation, and zone-based access control principles are examined. the placement of servers and other services within a dmz, traffic flow management, firewall rule implementation, and mitigation of potential threats originating from external networks are discussed. students learn about the role of DMZ architecture in network security and the organization of secure communication between local and wide area networks.

8. 8.
   Network segmentationLecture

   The concept of network segmentation. the importance of isolation in network security. (lecture) this topic examines the concept and objectives of network segmentation and its role in network security. the division of networks into separate segments, isolation of resources and users, inter-network traffic management, and access control principles are explored. the contribution of segmentation to limiting the spread of cyber threats, reducing the impact of security breaches, and protecting network resources is discussed. students learn the principles of planning and implementing network segmentation in accordance with security requirements.

9. 9.
   Network resilience and high availabilityLecture

   This topic covers network resilience and the principles of ensuring uninterrupted service delivery and network availability. the continuity and isolation of network traffic, maintaining service availability during equipment failures, and implementing redundancy mechanisms are examined. the operating principles of virtual router redundancy protocol (vrrp) and hot standby router protocol (hsrp), and their roles in providing redundancy and high availability between network devices, are explored. students learn methods for improving network infrastructure resilience and minimizing the impact of potential service disruptions.

10. 10.
    Dhcp implementation and securityLecture

    This topic examines the operating principles of the dynamic host configuration protocol (dhcp) and its application in network security. the role of DHCP snooping in preventing rogue DHCP servers and identifying trusted DHCP traffic is explored. dynamic ARP inspection (dai) is examined as a mechanism for detecting and preventing arp-based attacks. the nature of MAC spoofing attacks and methods for mitigating them are also discussed. students learn techniques for securing DHCP and ARP traffic within local networks and restricting the misuse of spoofed MAC addresses.

11. 11.
    Bgp: implementation and operating principlesLecture

    This topic examines the purpose, significance, and operating principles of the border gateway protocol (bgp). the role of autonomous systems (as) in internet route exchange and management, BGP routing mechanisms, and the establishment of neighbor relationships are explored. the main BGP message types—open, update, keepalive, and notification—and the state transitions of BGP sessions are discussed. students learn about the role of BGP in secure and reliable route management across global networks and gain an understanding of its fundamental operating mechanisms.

12. 12.
    Advanced ipv4 access control listsLecture

    This topic examines the purpose, types, and applications of ipv4 access control lists (acls) in network security. the principles of managing data flows between local and wide area networks and permitting or restricting traffic based on source and destination IP addresses, protocols, and port numbers are explored. the characteristics and configuration of standard and extended acls, as well as their role in controlling access to network resources, are discussed. students develop practical skills in designing and implementing ACL rules in accordance with security requirements to manage network traffic.

13. 13.
    Network address translation (nat) and port address translation (pat)Lecture

    This topic examines the operating principles of network address translation (nat) and port address translation (pat), including their roles in network security. the mechanisms that enable private IP addresses within local networks to access external networks, as well as the management of external access to internal resources, are explored. static and dynamic nat, pat, IP address and port translation, and network traffic monitoring are discussed. students learn the principles of using NAT and PAT to manage access to network resources and organize secure traffic flows.

14. 14.
    Nat implementationLecture

    This topic examines the implementation of NAT and PAT in local networks and their importance from a security perspective. the roles of source NAT and destination NAT in routing network traffic and controlling access to internal resources are explored. IP address and port translation between local and wide area networks, as well as the configuration and implementation of NAT and PAT rules, are discussed. students develop practical skills in managing network traffic and controlling access to network resources through NAT and PAT mechanisms.

15. 15.
    Application of artificial intelligence in network securityLecture

    This topic examines the application of artificial intelligence (ai) in network security, including the operating principles and capabilities of ai-based security features in network devices. the use of AI techniques to analyze network traffic and detect anomalous behavior and potential threats is explored. the development of AI models using real-world network traffic and threat data is discussed, including data collection and preprocessing, model training, and performance evaluation. students develop fundamental skills in detecting and analyzing network security incidents using ai-based approaches.

1. Curt m. white. data communications and computer networks: a business user’s approach, 7th edition, 2014.
2. Todd lammle. CCNA routing and switching study guide, 2013.
3. James f. kurose and keith w. ross. computer networking: a top-down approach featuring the internet, 6th edition, addison-wesley, 2012.