Subject · Information security (master)

Network monitoring systems

MS-1408-EN6 creditsAutumn semesterElective2

About this subject

Credits

6

Workload

135hours

Semester

Autumn

Academic year

2

Description

The course network monitoring systems focuses on the principles, technologies, and tools used to monitor, analyze, and manage computer networks. it covers the architecture of modern network monitoring systems, network protocols, traffic collection and analysis, network device monitoring using snmp, performance evaluation, and centralized log management. students learn to use tools such as wireshark, zabbix, and other monitoring platforms to assess network availability, identify performance bottlenecks, diagnose network problems, and analyze traffic patterns. the course also addresses network security monitoring, intrusion detection and prevention systems (ids/ips), security information and event management (siem), anomaly detection, and monitoring cloud-based and virtualized network environments. particular attention is given to interpreting monitoring data, identifying potential security incidents, preparing technical reports, and developing evidence-based recommendations to improve network reliability, availability, performance, and security. through theoretical instruction and practical activities, students develop the knowledge and skills required to configure monitoring systems, analyze network behavior, detect potential threats, and support effective network administration and security management.

Course learning outcomes

  1. CLO 1: Explain the fundamental concepts, objectives, and principles of network monitoring, as well as the architecture of modern network monitoring systems.

  2. CLO 2: Use monitoring technologies such as ping, traceroute, snmp, netflow/ipfix, and syslog to assess the status of network devices and services.

  3. CLO 3: Analyze network traffic and identify and evaluate performance metrics such as bandwidth, throughput, latency, jitter, and packet loss.

  4. CLO 4: Monitor network infrastructure and diagnose problems using wireshark, zabbix, and other network monitoring tools.

  5. CLO 5: Identify anomalies, security incidents, and potential attacks detected during network monitoring, and apply the fundamental principles of integration with ids/ips and SIEM systems

  6. CLO 6: Analyze network monitoring results, prepare monitoring reports, and propose well-founded technical recommendations to improve network reliability, availability, performance, and security.