Introduction to Intrusion Detection Systems
Overview
This 5-day lecture and hands-on training course provides an introduction to the theory, technology and implementation of intrusion detection/prevention systems. Lecture material covers the range of intrusion detection issues, while the labs reinforce the lectures and allow students to implement an intrusion detection system. Students attending this course receive a Certificate of Completion.
Audience
Professionals working in system, security, and network administration or engineering who need to fill gaps in their understanding or are new to intrusion detection systems should attend.
Prerequisites
Computer literacy is required. Students should be familiar with a windowed Graphical User Interface (GUI) computing environment. Some knowledge of networking and TCP/IP is beneficial.
Course Materials
Lecture, labs and reference materials are provided.
Course Contents
•TCP/IP
• Packet Analysis
• History of Intrusion Detection Systems
• Host-based IDS
• Network Based IDS
• Networks and NIDS placement
• IDS signatures
• IDS operations
• Deploying an IDS
• IDS vs. IPS
• Tuning
• Analyzing IDS Data
• Common IDS Alarms
• Reports and Reporting Tools
• Procedures
• IDS Evasion Techniques
• Other Applicable Topics |