Networks and Communications Security

所在平台: Coursera

课程主页: https://www.coursera.org/learn/network-security-communications-sscp

课程评论：没有评论

第一个写评论        关注课程

课程简介

课程名称：网络与通信安全 概述：欢迎参加网络与通信安全课程！在本课程中，您将学习网络结构、数据传输方法、传输格式以及确保信息传输的完整性、可用性、身份验证和机密性的安全措施。课程将讨论公共和私人通信网络的概念。 课程目标： 1. 描述与网络相关的安全问题 2. 确定电信技术的保护措施 3. 定义控制网络访问的流程 4. 识别管理局域网安全的程序 5. 描述网络安全设备的操作和配置程序 6. 定义实现和操作无线技术的程序 课程大纲： 第1部分：理解与网络相关的安全问题 - 模块主题包括OSI和TCP/IP模型、互联网协议(IP)网络、网络拓扑和关系、常用端口和协议，以及HTTP代理。 第2部分：保护电信技术和控制网络访问 - 模块主题涵盖融合通信、VoIP、POTS和PBX、移动通信，以及攻击与对策。 第3部分：操作和配置基于网络的安全设备 - 模块主题包括将网络作为防御堡垒、防火墙和代理、网络入侵检测/预防系统、拒绝服务攻击(DoS/DDoS)和欺骗。 第4部分：管理局域网安全与实现和操作无线技术 - 模块主题涵盖数据平面和控制平面分离、网络分段、MACsec (IEEE 802.1AE)及安全设备管理，以及无线技术的传输安全和常见漏洞。 第5部分：案例研究 - 该作业基于案例研究，要求学生将所学知识付诸实践，并进行必要的分析，以确保对概念的全面理解。 第6部分：课程结束考核 - 本部分将评估学生对课程内容的整体掌握情况。 通过本课程，您将掌握网络和通信安全的关键知识，确保能够有效管理和保护网络环境。

课程大纲

Part: 1

Title:Understand Security Issues Related to Networks

Description:Module Topics: OSI and TCP/IP Models, Internet Protocol (IP) Networking, Network Topographies and Relationship, Commonly Used Ports and Protocols, and HTTP Proxying. OSI and TCP/IP Models include OSI Model, Layer 1: Physical Layer, Layer 2: Data-Link Layer, Layer 3: Network Layer, Layer 3 Protocols, Layer 4: Transport Layer, Layer 4 Protocols, Layer 5: Session Layer, Layer 6: Presentation Layer, Layer 6 Sublayers, Layer 6 Protocols, Layer 7: Application Layer, Layer 7 Protocols, and TCP/IP Reference Model. In Internet Protocol (IP) Networking you will learn about Network Classes, IPv6, Transmission Control Protocol (TCP), User Datagram Protocol (UDP), Internet-Intranet, Extranet, Dynamic Host Configuration Protocol (DHCP), Internet Control Message Protocol (ICMP), Ping of Death, ICMP Redirect Attack, Ping Scanning, Traceroute Exploitation, and Remote Procedure Calls (RPC). In Network Topographies and Relationship you will learn about Bus, Tree, Ring, Mesh, Star, Unicast, Multicast, and Broadcast Transmissions, Circuit-Switched Networks, Packet-Switched Networks, Switched Virtual Circuits (SVCs) and Permanennt Virtual Circuits (PVCs), Carrier Sense Multiple Access (CSMA), Polling, Token Passing,Eethernet (IEEE 802.3), Token Ring (IEEE 802.5), Fiber Distributed Data Interface (FDDI), Multiprotocol Label Switching (MPLS), and Local Area Network (LAN). In Commonly Used Ports and Protocols you will learn about Domain Name Service (DNS), DNS Quick Reference, Lightweight Directory Access Protocol (LDAP), LDAP Quick Reference, Network Basic Input Output System (NetBIOS), NetBIOS Quick Reference, Network Information Service (NIS), NIS+, Common Internet File System (CIFS)/Server Message Block (SMB), CIFS/SMB Quick Reference, Network File System (NFS), NFS Quick Reference, Simple Mail transfer Protocol (SMTP) and Enhanced Simple Mail Transfer Protocol (ESMTP), Comparing SMTP and ESMTP, File Transfer Protocol (FTP), FTP Quick Reference, Transfer Modes, Anonymous FTP, TFTP Quick Reference, Hypertext Transfer Protocol (HTTP), and HTTP Quick Reference. In HTTP Proxying you will learn about Anonymizing Proxies, Open Proxy Servers, Content Filtering, HTTP Tunneling, Implication of Multilayer Protocols, Supervisory Control and Data Acquisition (SCADA), SCADA System Components, SCADA Attacks, Defensive Actions, and Modbus.

Part: 2

Title:Protect Telecommunications Technologies and Control Network Access

Description:Module Topics for Protect Telecommunications Technologies and Control Network Access: Converged Communications, VoIP, POTS and PBX, Cellular, and Attacks and Countermeasures. In Converged Communications you will learn about IP Convergence, Implementation, Fiber Channel Over Ethernet (FCoE), iSCSI, How iSCSI Works, Multi-Protocol Label Switching (MPLS), MPLS Pseudowires, MPLS L3VPNs, MPLS VPLS, and MPLS Fast Reroute. In VoIP you will learn about Session Initiation Protocol (SIP), Packet Loss, Jitter, Sequence Errors, and Codec Quality. In POTS and PBX you will learn about POTS, PBX, and Cellular. In Attacks and Countermeasures you will learn about DDoS Attack for Hire, and SIP Flooding Attacks. Module Topics for Control Network Access: Access Control and Monitoring, Operation of Hardware, Transmission Media, Voice, Multimedia Collaboration, Open Protocols, Applications, and Services, Remote Access, Remote Access Services, Virtual Access Services and Desktops and Data Communication. In Access Control and Monitoring you will learn about Secure Routing/Deterministic Routing, Boundary Routers, Non-Blind Spoofing, Blind Spoofing, Security Perimeter, Network Partitioning, Dual-Homed Host, Bastion Host, and Demilitarized Zone (DMZ). In Operation of Hardware you will learn about Modems, Concentrators, Front-End Processors, Multiplexers, Hubs and Repeaters, Bridges and Switches, and Routers. In Transmission Media you will learn about Wired, Twisted Pair, Cable Categories, Unshielded Twisted Pair (UTP), Shielded Twisted Pair (STP), Coaxial Cable, Fiber Optic, Patch Panels, Endpoint Security, and Moble Devices. In Voice you will learn about Modems and Public Switched Telephone Networks (PSTN), and War Dialing. In Multimedia Collaboration you will learn about Peer-to-Peer (P2P) Applications and Protocols, Remote Meeting Technology, and Instant Messaging. In Open Protocols, Applications, and Services you will learn about Extensible Messaging and Presence Protocol (XMPP) and Jabber, Internet Relay Chat (IRC), Tunneling Firewalls and Other Restrictions. In Remote Access Point-to-Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP), Remote Authentication Dial-in User Service (RADIUS), and Simple Network Management Protocol (SNMP). In Remote Access Services you will learn about TCP/IP Terminal Emulation Protocol (TELNET), Remote Log-in (rlogin), Remote Shell (rsh), Remote Copy (rcp), and Screen Scraper. In Virtual Applications and Desktops you will be learn Virtual Network Terminal Services, Telecommuting, and Other Telecommuting Considerations. In Data Communication you will learn about Analog Communication, and Digital Communication.

Part: 3

Title:Operate and Configure Network-Based Security Devices

Description:Module Topics: The Network as a Bastion of Defense, Firewalls and Proxies, Network Intrusion Detection/Prevention Systems, DoS/DDoS, and Spoofing. In The Network as a Bastion of Defense you will learn about Key Concepts, Network Security Objectives and Attack Modes, Confidentiality, Eavesdropping (Sniffing), Integrity, Integrity, Domain Litigation, Open Mail Relay Servers, and Spam. In Firewalls and Proxies you will learn about Firewalls, Filtering, Network Address Translation (NAT), Port Address Translation (PAT), Static Packet Filtering, Stateful Inspection or Dynamic Packet Filtering, Proxies, Circuit-Level Proxy, Application-Level Proxy, and Web Proxy Servers. In Network Intrusion Detection/Prevention Systems you will learn about Port Scanning, FIN, NULL, and XMAS Scanning, TCP Sequence Number Attacks, Methodology of an Attack, Network Security Tools and Tasks, Intrusion Detection Systems (IDS), Architecture of an Intrusion Detection System (IDS), Security Event Management (SEM)/Security Event and Incident Management (SEIM), Scanners, Discovery Scanning, Compliance Scanning, Vulnerability Scanning and Penetration Testing, Scanning Tools, and Network Taps. In IP Fragmentation Attacks and Crafted Packets you will learn about Teardrop, Overlapping Fragment Attack, Source Routing Exploitation, Smurf and Fraggle Attacks, NFS Attacks, Network News Transport Protocol (NNTP) Security, Finger User Information Protocol, and Network Time Protocol (NTP). In DoS/DDoS you will learn about Denial-of-Service Attack (DoS), Distributed Denial-of-Service Attack (DDoS), and SYN Flooding. In Spoofing you will learn about IP Address Spoofing and SYN-ACK Attacks, E-Mail Spoofing, DNS Spoofing, DNS Vulnerabilities, Manipulation of DNS Queries, Information Disclosure, and Namespace-Related Risks.

Part: 4

Title:Manage LAN-Based Security and Implement and Operate Wireless Technologies

Description:Module Topics for Manage LAN-Based Security: Separation of Data Plane and Control Plane, Segmentation, MACsec (IEEE 802.1AE), and Secure Device Management. In Separation of Data Plane and Control Plane you will learn about Logical Design for Control Planes. In Segmentation you will learn about Advantages of Using VLANs, Implementing VLANs/Port-Based VLANs, How Does Tagging Work? Tagging Rules, Other VLAN Classification Criteria, Protocol-Based VLANs, Subnet-Based VLANs, and Common Attacks Against the Data-Link Layer. In MACsec (IEEE 802.1AE) you will learn about How MACsec Works, Understanding Connectivity Associations and Secure Channels, Understanding Static Connectivity Association Key Security Mode, and Understanding Static Secure Association Key Security Mode. In Secure Device Management you will earn about Automated CM Tools, Secure Shell (SSH), Simple Network Management Protocol (SNMP), Ports Definitions, DNSSEC, New Record Types, RRset. Module Topics for Implement and Operate Wireless Technologies: Transmission Security and Common Vulnerabilities and Countermeasures and Wireless Security Issues. In Transmission Security and Common Vulnerabilities and Countermeasures you will learn about Types of Wireless Technologies, Types of Wireless Networks, Direct-Sequence Spread Spectrum (DSSS), Frequency-Hopping Spread Spectrum (FHSS), Orthogonal Frequency Division Multiplexing (OFDM), Vectored Orthogonal Frequency Division Multiplexing (VOFDM), Frequency Division Multiple Access (FDMA), and Time Division Multiple Access (TDMA). In Wireless Security Issues you will learn about Open System Authentication, Shared Key Authentication, Ad Hoc Mode, Infrastructure Mode, Wired Equivalent Privacy Protocol (WEP), Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access 2 (WPA2), A “Parking Lot” Attack, Shared Key Authentication Flaw, Service Set Identifier (SSID) Flaw, The Vulnerability of Wired Equivalent Privacy Protocol (WEP), Attack on Temporal Key Integrity Protocol (TKIP), and Wireless Devices.

Part: 5

Title:Case Study

Description:This assignment is based on a case study that will require the student to put into practice the knowledge they have gained through the course. It requires the basic understanding of the topics and the ability to relate those topics to the real world. The objective of review is to determine whether the student has understood the concepts and has performed the necessary analysis to ensure a complete and thorough answer.

Part: 6

Title:End-Of Course Assessment

Description:

课程评论(0条)