| Course Title: | Advanced Network Security With Lab |
|---|---|
| Course Number: | SEC450 |
| Course Description: | Students in this course develop more advanced skills in identifying network security vulnerabilities, including wireless vulnerabilities; conducting risk assessments; preventing, detecting, and responding to intrusions; and providing for business continuity and disaster recovery. Topics include firewall architecture, authentication, intrusion-prevention strategies, web security, cryptography, and security gates. |
| Course Prerequisites: | NETW420/4-3 |
Syllabus
Course Information
Course Specific Requirements
Enter content here, if necessary.
Software Citation Requirements
This course uses open-source software, and as the end users of this software, students are required to cite the software for any student work, such as assignments, labs, or projects, where the software has been utilized. Open-source software does have end-user license agreements, and all students should read the entire agreement for a software prior to installation or usage. In order to use the software in this course, software citations have been created for students and can be located on the Open Source Applications page. These software citations must be included in all student work submissions that have used the software.
Textbooks and Resources
Required Textbooks
The following books are required for this course:
Implementing Cisco IOS Network Security (IINS) Foundation Learning Guide
2nd Edition
by Catherine Paquet
2012 Cisco Press
E-book Details
First Time Using VitalSource? Step 1: View the VitalSource Video Step 2: Register with VitalSource Bookshelf Online
Step 3: Access the Desktop and Mobile Versions | Already Registered? 3 Ways to Access Your eBooks
|
To find out more about VitalSource Bookshelf, check out the VitalSource FAQ.
Physical Books and Supplies
Your course may require additional materials, such as a course kit. Visit the online bookstore if you have not yet ordered your books and supplies.
Campus Additional Information
Enter content here, if necessary.
Terminal Course Objectives
DeVry University course content is constructed from curriculum guides developed for each course that are in alignment with specific Terminal Course Objectives. The Terminal Course Objectives (TCOs) define the learning objectives that the student will be required to comprehend and demonstrate by course completion. The TCOs that will be covered in detail each week can be found in the Objectives section for that particular week. Whenever possible, a reference will be made from a particular assignment or discussion back to the TCO that it emphasizes.
1
Given a large Network with Internet access, analyze the possible internal or external attacks on the network. Describe the attack scenarios and how to deal with each type of attack. Include Denial of Service attacks, Spoofing, Replays, TCP Session Hijacking and Attacks on Encrypted Data (such as passwords).
2
Given a medium size network with various IT personnel, create a plan for secure access to the network routers that includes: (1) Encrypted Authentication (2) Encrypted communication between the network router and the IT personnel and (3) Different levels of access based IT personnel roles.
3
Given a large network, implement a high level security plan that protects Layer 2 devices (Switches) from attacks based on Spanning-Tree Protocol (STP), DHCP, MAC Flooding and MAC Spoofing. The plan should allow authorized users to access network resources while preventing unauthorized access.
4
Given a large Network site connected to the Internet via a Firewall perimeter router, design a security solution using Access Control Lists (ACLs) that accomplish the following: (1) allow the free flow of inside initiated TCP and UDP sessions with its associated return traffic (2) do not allow any TCP or UDP sessions initiated from the Internet to enter the inside network (3) filter ICMP messages to prevent unnecessary inbound Internet ICMP messages that can be used to probe the network. Reflexive and/or Context Based Access Control (CBAC) ACLs should be considered.
5
Given a large Network connected to the Internet, create an Authentication plan designed to increase network security. Include internal users as well as remote users. Justify your choices in terms of security, cost and management overhead.
6
Given a large internetwork of two or more Local Area Networks (LANs) connected to each other via a public medium (such as the Internet); create a detailed plan for the creation of a Virtual Private Network (VPN) to maintain data confidentiality and integrity for protected packets.
7
Given a large network connected to the Internet, devise an Intrusion Detection/Prevention System (IDS/IDS) that will record all information regarding intrusions from the Internet that match known attack signatures. The attack should be prevented and the information should be stored permanently with timestamps on a syslog server.
Lab Schedule
Skillsoft SSO(example: "ssoType=DVUHubSSO2&node=skillSoftSSO&orgCode=org_##"):
Week 1
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 2
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 3
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 4
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 5
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 6
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 7
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Week 8
None
Citrix
RKON
Skillsoft
Toolwire
WebServer
ACC COMAT
ACC NonCOMAT
CWP
Course Schedule
| Week, TCOs, and Topics | Readings and Class Preparation | Activities and Assignments |
|---|---|---|
Week 1 TCO 1 | Chapter 1: Network Security Concepts and Policies, pages 1-63 | iLab |
Week 2 TCO 2 | Chapter 4: Securing the Management Plane on Cisco IOS Devices and AAA, pages 159-185 | iLab |
Week 3 TCO 3 | Chapter 5: Securing the Data Plane on Cisco Catalyst Switches, pages 233-273 | iLab |
Week 4 TCO 4 | Chapter 8: Access Control Lists for Threat Mitigation, pages 319-347 | iLab |
Week 5 TCO 5 | Chapter 4: Securing the Management Plane on Cisco IOS Devices and AAA, pages 186-207 | iLab |
Week 6 TCO 6 | Chapter 12: Fundamentals of Cryptography and VPN Technologies, pages 533-608 | iLab |
Week 7 TCO 7 | Chapter 11: Intrusion Prevention Systems, pages 467-532 | iLab Graded discussion topics Quiz |
| Week 8 All TCOs | Final Exam | |
Blended E-Learning
This course is an 8-week, intensive course that includes both classroom-based and e-learning activities. Your participation in both areas is essential to your success in this course. You should expect to spend time each week participating in the prescribed activities both before and after our class meeting.
Participation before, during, and after class meetings is critical to your success in this intensive environment.
To get the most out of our weekly class meetings, it is essential that you come to class prepared. The weekly readings listed in the Course Schedule will prepare you for class. Our class meetings, in turn, will prepare you for upcoming exams and assignments.
Through the DeVry e-learning platform, you will be able to
- review the Syllabus and weekly assignment information;
- submit completed work for grading;
- take quizzes and exams;
- obtain copies of class handouts and notes;
- e-mail the instructor and other students; and
- participate in online discussion of class material.
iConnect Live
This course contains iConnect Live sessions that provide students with the opportunity to attend live presentations, which cover course materials, projects, and assignments. Please see the iConnect Live items for the days and times of the live sessions and for the link to enter each session. You will also receive e-mail reminders each week.
If you are unable to attend the live session, you can watch the recorded session by clicking on the Recordings link that will appear in the iConnect Live item after the lecture has concluded. Please contact your instructor with any questions.
Please note that because of unavoidable technological issues and presenter availability, the live lectures may be substituted with prerecorded lectures.
Due Dates for Assignments & Exams
Unless otherwise specified, the following applies.
- Access to most weeks begins on Sunday at 12:01 a.m. mountain time (MT).
- All assignments are to be submitted on or before Sunday at the end of the specified week that they are due, by 11:59 p.m. (MT).
- All quizzes and exams are to be completed on or before Sunday at the end of the specified week that they open, by 11:59 p.m. (MT).
Week 8 opens at 12:01 a.m. (MT) on the ending Sunday of Week 7. Any assignments or exams must be completed by 11:59 p.m. (MT) Saturday of the eighth week.
Due Dates for Assignments & Exams
All assignments, quizzes, and exams are to be completed per the schedule indicated by your instructor.
Assignment Values and Letter Grades
The maximum score in this class is 1,000 points. The categories, which contribute to your final grade, are weighted as follows.
| Assignment | Points | Weighting |
|---|---|---|
| Discussions (30 points, Weeks 1-7) | 210 | 21% |
| iLab (42 points, Week 1; 55 points, Weeks 2-7) | 372 | 37.2% |
| Quiz (24 points, Weeks 1-7) | 168 | 16.8% |
| Final Exam | 250 | 25% |
| Total Points | 1,000 | 100% |
All of your course requirements are graded using points. At the end of the course, the points are converted to a letter grade using the scale in the table below.
| Letter Grade | Points | Percentage |
|---|---|---|
| A | 900–1,000 | 90% to 100% |
| B | 800–899 | 80% to 89% |
| C | 700–799 | 70% to 79% |
| D | 600–699 | 60% to 69% |
| F | 599 and below | Below 60% |
DeVry Graduate Academic Policy and Relevant Resources
DeVry Undergraduate Academic Policy and Relevant Resources
Frequently Asked Questions
When are grades calculated, and how can I view my grades?
- You must complete any quizzes and post your written assignments (if necessary) to the weekly Dropbox by Sunday 11:59 p.m. (MT) each week, except Week 8 which closes at 11:59 p.m. (MT) Saturday.
- Once your work is reviewed, you should see comments and total points for each assignment in the Gradebook. Instructors should have Discussion work graded by the following Tuesday and all other assignments by the following Friday.
- You may check your progress at any time by going to the Gradebook, selecting the week and then your name.
- Click on the points earned for each assignment in the Gradebook to see any instructor comments.
What should I do if a discrepancy is found with my grade?
- Double-check the error and try to determine what caused it.
- Send your instructor an email explaining your findings.
- Trust that any error in grading will be corrected quickly
What if I cannot get my work submitted on time?
- If you have an emergency that will cause your work to be late, please contact your instructor in advance of the due date so that arrangements can be made. Your instructor may reserve the right to deduct points for work turned in late based on the reason and the timeliness of notice.
- If a technical problem prevents you from meeting the scheduled due date, please contact the Help Desk at 1-800-594-2402 and immediately email your instructor about the situation.
How can I get extra credit?
Extra credit is not an option.
Questions and Concerns
Please feel free to contact me for help with coursework or other areas that may impact your progress. Here are some examples.
- Do you have general questions about attendance, deadlines regarding your courses, student financial aid, or other areas?
- Are you a member of the military service? Do you need to adjust your schedule due to active duty, or do you have questions about your GI Bill® benefits or have other unforeseen military and veteran-related issues that have developed?
- Do you need supplementary student assistance? Please let me know if you are having academic difficulty and would like an ADA accommodation. Although I can talk with you about getting assistance, an excellent point of contact is the Office of Student Disability Services. You can reach the Office by calling 877-496-9050, option 3, or by e-mailing adaofficer@devry.edu or adaofficer@keller.edu.
Regardless of your situation, please feel free to contact me for assistance in whatever area of concern you might have. I will do everything I can to assist you or put you in contact with University colleagues who are trained to assist you in whatever area of concern you might have.
"GI Bill® is a registered trademark of the U.S. Department of Veterans Affairs (VA). More information about education benefits offered by the VA is available at the official U.S. government website: www.benefits.va.gov/gibill.”