FLORIDA STATE COLLEGE AT JACKSONVILLE COLLEGE CREDIT COURSE OUTLINE COURSE NUMBER: CNT 2404 COURSE TITLE: Intrusion Detection Systems and Auditing PREREQUISITE(S): CET 2662 (with a grade of “C” or higher) COREQUISITE(S): None CREDIT HOURS: 4 CONTACT HOURS/WEEK: 4 CONTACT HOUR BREAKDOWN: Lecture/Discussion: 3 Laboratory: 1 Other ____________: FACULTY WORKLOAD POINTS: 4 STANDARDIZED CLASS SIZE ALLOCATION: 24 CATALOG COURSE DESCRIPTION: This course is the study of network and system intrusion detection and auditing. An Intrusion Detection System (IDS) utilizes a complex process of determining when a network transmission contains malicious content. The course will begin by reviewing the principles of the Transmission Control Protocol (TCP) and the Internet Protocol (IP). With a solid foundation based on these principles the student will learn how to defend against network attacks. The student will learn the techniques of creating exploit signature code to thwart zero-day attack. The course will provide the student with the knowledge necessary to design, implement, and maintain an enterprise scale Distributed Intrusion Detection System based on the Open System’s tool Snort. SUGGESTED TEXT(S): Intrusion Detection with Snort (current edition) IMPLEMENTATION DATE: Spring Term, 2003 (20032) REVIEW OR MODIFICATION DATE: Fall Term, 2008 (20091) Fall Term, 2015 (20161) Fall Term, 2015 (20161) Proposal 2014-74 Fall Term, 2015 (20161) – Outline Review 14-15 1 COURSE TOPICS CONTACT HOURS _ PER TOPIC___ I. Introduction to IDS 4 II. TCP/IP for Intrusion Detection 8 III. Network Traffic Analysis 8 IV. IDS Installation 8 V. IDS Management 12 VI. Auditing 12 VII. Hands-on Tests 8 Total: 60 2 PROGRAM TITLE: Network Systems Technology COURSE TITLE: Intrusion Detection Systems and Auditing CIP NUMBER: 1511100111 PROGRAM TITLE: IT Security COURSE TITLE: Intrusion Detection Systems and Auditing CIP NUMBER: 1511100306 PROGRAM TITLE: Digital Forensics COURSE TITLE: Intrusion Detection Systems and Auditing CIP NUMBER: 0511100119 Program Frameworks can be found at the following website: http://www.fldoe.org/workforce/dwdframe/ 3 Florida State College at Jacksonville Course Learning Outcomes and Assessment SECTION 1 Course Prefix and Number: Course Title: Semester Credit Hours (Credit): Contact Hours (Workforce): Intrusion Detection Systems and Auditing CNT 2404 4 SECTION 2a (To be completed for General Education courses only.) TYPE OF COURSE (Place an “X” in the box next to those that are applicable.) General Education Core (If selected, core discipline area will be identified in Section 4.) General Education (If selected, you must also complete Section 4, Section 5, and Section 8) SECTION 2b TYPE OF COURSE (Place an “X” in the box next to those that are applicable.) A.A. Elective A.S. Required Course X A.S. Professional Elective A.A.S. Required Course A.A.S. Professional Elective X Technical Certificate PSAV/Clock Hour/Workforce Development Education Apprenticeship Upper Division/Bachelors Other: If selected, use this space to title “other” option. SECTION 3 INTELLECTUAL COMPETENCIES (Place an “X” in the box next to those that are applicable.) X Reading Speaking Writing Listening X Critical Analysis X Information Literacy Qualitative Skills Ethical Judgement Scientific Method of Inquiry Working Collaboratively SECTION 4 (To be completed for General Education courses only.) GENERAL EDUCATION DISCIPLINE AREA (Place an “X” in the box next to those that are applicable.) Communications Humanities Mathematics Social and Behavioral Sciences Natural Sciences SECTION 5 (To be completed for General Education courses only.) GENERAL EDUCATION LEARNING OUTCOME AREA (Place an “X” in the box next to those that are applicable.) Communication Critical Thinking Information Literacy Scientific and Quantitative Reasoning Global Sociocultural Responsibility SECTION 6 LEARNING OUTCOMES TYPE OF OUTCOME (General Education, Course or Program) The student will be able to understand and apply the concepts of advanced Intrusion Detection Systems. Course The student will demonstrate proficiency in the use of network analysis tools. Course The student will perform the necessary steps to install configure and maintain an IDS system using the Open-Source program Snort. The student will learn the basics of database installation and management utilizing the MySQL database. METHOD OF ASSESSMENT In-class and online examinations and handson graded exercises to demonstrate proficiency and student comprehension. In-class and online examinations and handson graded exercises to demonstrate proficiency and student comprehension. Course In-class and online examinations and handson graded exercises to demonstrate proficiency and student comprehension. Course In-class and online examinations and handson graded exercises to demonstrate proficiency and student comprehension. 4 SECTION 6 (Continued) LEARNING OUTCOMES The student will become proficient in creating and deploying IDS rules to detect the network exploits and malicious content. The student will learn to build specially crafted Ethernet packets to test Intrusion Detection Systems and mitigate zero-day attacks. TYPE OF OUTCOME (General Education, Course or Program) Course Course METHOD OF ASSESSMENT In-class and online examinations and handson graded exercises to demonstrate proficiency and student comprehension. In -class and online examinations and handson graded exercises to demonstrate proficiency and student comprehension. SECTION 7 Faculty name(s): Dr. Walter Eaton Date: 10/5/2014 CS20150615 5