Study Guide

Objective

After completing the course the student:
- is able identify and mitigate cyber threats in networks
- can detect cyber threats and defend against them
- can recognize Internet-based cyber threats such as denial of service attacks and mitigate them

Content

Students will protect enterprise-level network against cyber attacks. Students learn to detect network attacks and successfully defend against them.
In the lab exercises students
- configure firewalls and intrusion detection systems
- monitor network activities and detect cyber attacks
- react when network attack is happening

Materials

Learning material consists of material produced by the Lecturer as well as extra material obtainable from TUAS resources (ebooks).

Teaching methods

Learning is achieved through contact lectures, written home assignments and laboratory assignments.

Content scheduling

The course consists of contact lectures and contact laboratory sessions. There will be 9 lectures, which will cover theory and technologies behind Operational Security in the context of Security Operations Centers. In 5 laboratory sessions, students will practice detecting and reporting anomalies found in IT systems through laboratory assignments.

The course will begin on week 22/2024 and end by week 50/2024.

Evaluation scale

H-5

Assessment methods and criteria

Each home assignment and laboratory assignment will be evaluated separately.

There will be 3 written home assignments and 7 laboratory assignments, each valued on average at 10 points. The total points for the course will be 100 points and the grading will be as follows:

49 and less = Failed
50-59 pts = 1
60-69 pts = 2
70-79 pts = 3
80-89 pts = 4
90 and more = 5

Course lecture and lab session attendance will be monitored. Minimum of 50% attendance in the contact sessions is required to pass the course. Possible exceptions must be discussed with the lecturer by each student separately.