Intrusion detection and firewall security (MS004A)

Course info Staff: Hårek Haugerud
Builds on: Network and system administration 1, Security
10 ECTS Lectures in ENGLISH Level: Master Term: Autumn

[Student login]

Course plan
NotesTopicExercisesHints
1[en] Linux command line and bash scripts [en]
2[en] Course overview, Hostile datastreams, TCP,UDP,IP [en]
3[en] Firewalls, architectures and iptables [en]
4[en] Network Filtering rules and IPtables syntax [en]
5[en] Forwarding and NAT [en]
6 Meeting the company representative
7READING WEEK
8[en] Host intrusion detection [en]
9[en] Network Intrusion Detection and Snort [en]
10[en] Snort [en]
11Snort IPS [en]
12[en] Malware, Honeypots [en]
13[en] Penetration testing, Log analysis [en]
14 Test exam [en-pdf] [en-pdf]
15
Resources and Links
USENIX/SAGE association CERT Connection tracking on rex with world map.
CAIDA Securityfocus (Bugtraq) The National Security Agency (US)
Økokrim Datatilsynet Symantec scurity response
Silicon Defence Firewall lab Master wiki
dshield.org sans.org TCP/IP pocket reference guide
Forensics pocket reference guide VirusInfo MS05-039 exploit
Vulnerability Exploits Break Records Mark Burgess: Unix Mark Burgess: Unix (PDF)
iptables-tutorial.pdf ebook: Beginning Shell scripting ebook: Linux command line and shell scripting bible
ebook: shell programming

News

First lecture: Wednesday August 25'th at 12:30-14:15 in PI850