MASTER SYLLABUS

2020-2021

A.	Academic Division: Business, Industry, and Technology

B.	Discipline: Information Technology – Cyber Security

C.	Course Number and Title: ITEC2410 – Intrusion Detection & Prevention Systems (IDS/IPS)

D.	Course Coordinator: Brian Baldridge

Assistant Dean: Toni Johnson, PhD

Instructor Information:

Name:	Click here to enter text.

Office Location:	Click here to enter text.

Office Hours:	Click here to enter text.

Phone Number:	Click here to enter text.

E-Mail Address	Click here to enter text.

E.	Credit Hours: 3

Lecture: 2 hours

Laboratory: 2 hours

F.	Prerequisites: ITEC1430 (minimum grade of C-), ITEC1650 (minimum grade of C-)

G.	Syllabus Effective Date: Fall 2020

H.	Textbook(s) Title:

Managing Security with Snort & IDS Tools

Authors: Cox, Gerg

Copyright Year: 2004

Edition: 1st

ISBN#: 9780596006617

Workbook(s) and/or Lab Manual: None

J.	Course Description: This course presents an overview to Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) and an introduction to the security tools used to implement these technologies. Deploying an IDS/IPS on a network and tuning the platform to work in conjunction with network traffic flow will be demonstrated. Students will learn the role of an IDS/IPS in the network and how to deploy these technologies to operate effectively.

K.	College-Wide Learning Outcomes:

College-Wide Learning Outcome	Assessments - - How it is met & When it is met
Communication – Written
Communication – Speech
Intercultural Knowledge and Competence
Critical Thinking
Information Literacy
Quantitative Literacy

L.	Course Outcomes and Assessment Methods:

Upon successful completion of this course, the student shall:

Outcomes	Assessments – How it is met & When it is met
Compare and contrast intrusion detection systems/network security monitoring versus intrusion prevention systems	Part 1: Weeks 1-4 tests, labs, midterm and final exam
Plan and build a senor platform	Part 1: Weeks 3-4 tests, labs, midterm and final exam
Compare and contrast full packet captures versus string data captures	Part 1: Week 5 tests, labs, midterm and final exam
Describe detection mechanisms, indicators of compromise, and signatures	Part 2: Weeks 6-8 tests, labs, midterm, and final exam
Demonstrate the installation, configuration, and use of detection applications for a given set of conditions	Part 2: Weeks 8-10 tests, labs, midterm and final exam
Describe how to use Canary honeypots for detection	Part 2: Week 11 tests, labs, and final exam
Compare and contrast packet analysis applications	Part 3: Weeks 12-15 tests, labs, and final exam
Generate friendly and threat intelligence	Part 3: Weeks 13-15 tests, labs, and final exam
Describe analysis best practices	Part 3: Weeks 14-15 tests, labs, and final exam

M.	Topical Timeline (Subject to Change):

Part 1 – Collection

Week 1: Applied Network Security Monitoring

Week 2: Planning Data Collection

Week 3: The Senor Platform

Week 4: Session Data

Week 5: Packet Capture Data / Packet String Data

Part 2 – Detection

Week 6: Detection Mechanisms

Week 7: Reputation-Based Detection

Week 8: Signature-Based Detection [Snort and Suricata]

Week 9: Bro Platform

Week 10: Anomaly-Based Detection

Week 11: Honeypots

Part 3 – Analysis

Week 12: Packet Analysis

Week 13: Friendly/Threat Intelligence

Week 14: Analysis Process

Week: 15 Labs, Review, Term Project (optional)

Week 16: Lab Makeup/Final Exam

N.	Course Assignments:

Labs

Tests

Midterm Exam

Final Exam

Final Project (optional)

O.	Recommended Grading Scale:

NUMERIC	GRADE	POINTS	DEFINITION
93–100	A	4.00	Superior
90–92	A-	3.67	Superior
87–89	B+	3.33	Above Average
83–86	B	3.00	Above Average
80–82	B-	2.67	Above Average
77–79	C+	2.33	Average
73–76	C	2.00	Average
70-72	C-	1.67	Below Average
67–69	D+	1.33	Below Average
63-66	D	1.00	Below Average
60-62	D-	0.67	Poor
00-59	F	0.00	Failure

P.	Grading and Testing Guidelines:

Click here to enter text.

Q.	Examination Policy:

Click here to enter text.

R.	Class Attendance and Homework Make-Up Policy:

Click here to enter text.

S.	Classroom Expectations:

Click here to enter text.

T.	College Procedures/Policies:

Important information regarding College Procedures and Policies can be found on the syllabus supplement located at

http://catalog.ncstatecollege.edu/mime/download.pdf?catoid=5&ftype=2&foid=3