INSS 670 - Auditing, Monitoring, and Detection Intrusion

3 Credits

770 Prerequisite(s): INSS 635 A detailed study of the methodologies, techniques and tools for auditing, monitoring, and detection of problems or intrusions in computer systems or networks and their environments. Emphasis is on strategies for preventing and detecting unwanted process activity and recovering from malicious behavior. Topics include: types of threats, host-based and network-based information sources, vulnerability analysis, denial of service, deploying and managing intrusion detection systems, passive vs. active responses, designing recovery solutions. Operational and administrative security measures contributing to detection activities are also covered. Case studies and exercises will be used to evaluate security operations.