|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/real-time-cyber-threat-detection
课程评论：没有评论
课程名称：实时网络安全威胁检测与防护 概要：本课程介绍了实时网络安全技术和方法，结合TCP/IP协议套件的背景。通过解释一些基本的TCP/IP安全攻击，强调了网络安全解决方案的必要性，例如无状态和有状态防火墙。学习者将了解设计和配置防火墙解决方案的技术，包括数据包过滤器和代理，以保护企业资产。 课程内容讨论了防火墙和入侵防御系统等边界解决方案在常见企业环境中的显著缺陷。这些弱点通常导致来自国家行为者的高级持续威胁（APT）等攻击。课程还展示了针对现代企业的DDOS攻击及第三方攻击的潜在解决方案。 课程大纲： 1. 基础网络安全 - 描述：本模块介绍TCP/IP安全基础，包括防火墙的设计与使用。 2. 更高级的网络安全技术 - 描述：本模块介绍数据包过滤器、防火墙规则集、代理及其他网络安全方法。 3. 网络安全架构 - 描述：本模块介绍防火墙架构、入侵检测和安全运营中心（SOC）设计的基础知识。 4. 企业网络安全 - 描述：本模块介绍边界的局限性，以及企业在处理如DDOS和APT等威胁时面临的挑战。
Name:Basic Network Security
Description:This module introduces the basics of TCP/IP for security, including firewall design and use.
Name:More Advanced Network Security Technologies
Description:This module introduces packet filters, firewall rule sets, proxies, and additional network security methods.
Name:Network Security Architectures
Description:This module introduces the foundations firewall architectures, intrusion detection, and SOC design.
Name:Enterprise Network Security
Description:This module introduces the limitations of perimeters, and the challenges in the enterprise of dealing with threats such as DDOS and APT.
This course introduces real-time cyber security techniques and methods in the context of the TCP/IP protocol suites. Explanation of some basic TCP/IP security hacks is used to introduce the need for network security solutions such as stateless and stateful firewalls. Learners will be introduced to the techniques used to design and configure firewall solutions such as packet filters and proxies to protect enterprise assets. Perimeter solutions such as firewalls and intrusion prevention systems are shown to have significant drawbacks in common enterprise environments. The result of such weakness is shown to often exist as advanced persistent threats (APTs) from nation-state actors. Such attacks, as well as DDOS and third-party attacks, are shown to have potential solutions for modern enterprise.
