Real-Time Cyber Threat Detection and Mitigation

Real-Time Cyber Threat Detection and Mitigation

This course is part of Introduction to Cyber Security Specialization

Instructor: Dr. Edward G. Amoroso

24,421 already enrolled

Skills you'll gain

Tools you'll learn

Firewall

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

5 assignments

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your subject-matter expertise

This course is part of the Introduction to Cyber Security Specialization

When you enroll in this course, you'll also be enrolled in this Specialization.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate

There are 4 modules in this course

This course introduces real-time cyber security techniques and methods in the context of the TCP/IP protocol suites. Explanation of some basic TCP/IP security hacks is used to introduce the need for network security solutions such as stateless and stateful firewalls. Learners will be introduced to the techniques used to design and configure firewall solutions such as packet filters and proxies to protect enterprise assets.

This module introduces the basics of TCP/IP for security, including firewall design and use.

What's included

13 videos5 readings1 assignment

13 videosTotal 71 minutes

Introduction: What You Will Learn from This Course on Cyber Security2 minutes
Assignments and Reading2 minutes
Security Through Obscurity5 minutes
TCP/IP Evolution and Security6 minutes
TCP/IP Overview8 minutes
IP Spoofing6 minutes
TCP Sequence Number Attack6 minutes
Packet Flooding5 minutes
Packet Sniffing6 minutes
SYN Packets for Access Control5 minutes
Definition of a Firewall6 minutes
Firewall: Stateful versus Stateless5 minutes
Interview: John Viega9 minutes

5 readingsTotal 181 minutes

Required: “Network Firewalls,” Steve Bellovin and Bill Cheswick30 minutes
Required: “Introduction to TCP/IP Network Attacks,” Guang Yang45 minutes
Video: “Hacking DNS,” Eli the Computer Guy46 minutes
Suggested: Introduction to Cyber Security, Edward Amoroso and Matthew Amoroso, (Ch. 17 - 18)30 minutes
Suggested: TCP/IP Illustrated Volume 1 (2nd Edition), Kevin Fall and W. Richard Stevens, (Ch. 17 – 18)30 minutes

1 assignmentTotal 30 minutes

Module 1 Quiz30 minutes

This module introduces packet filters, firewall rule sets, proxies, and additional network security methods.

What's included

12 videos4 readings1 assignment

12 videosTotal 65 minutes

Assignments and Reading3 minutes
Packet Filtering7 minutes
Sample Packet Filtering and Reference Architecture6 minutes
Default Firewall Block5 minutes
Firewall Rules to Allow Outbound Web Browsing5 minutes
Firewall Rules to Allow Telnet and Other TCP Services3 minutes
Establishing Corporate Policy Rules4 minutes
FTP Protocol6 minutes
Firewall Rules for FTP4 minutes
Application Proxy Filtering6 minutes
Forward and Reverse Proxies5 minutes
Interview: Roger Piqueras Jover11 minutes

4 readingsTotal 81 minutes

Required: “Anomaly-based Network Intrusion Detection: Techniques, Systems, and Challenges.”20 minutes
Required: “Intrusion Detection via Static Analysis,” Wagner and Dean25 minutes
Video: “How Does Intrusion Prevention Systems Work,” 2013 - SourceFire6 minutes
Suggested: Introduction to Cyber Security, Edward Amoroso and Matthew Amoroso, (Chapters 19 - 20)30 minutes

1 assignmentTotal 30 minutes

Module 2 Quiz30 minutes

This module introduces the foundations firewall architectures, intrusion detection, and SOC design.

What's included

11 videos4 readings1 assignment

11 videosTotal 68 minutes

Assignments and Readings3 minutes
Firewall Architectures (Part 1)6 minutes
Firewall Architectures (Part 2)6 minutes
Management by Exception6 minutes
System Auditing7 minutes
Basics of Intrusion Detection8 minutes
Signature Versus Behavioral Detection6 minutes
IDS Versus IPS7 minutes
Design of SIEM5 minutes
Design of a SOC6 minutes
Interview: Dino Dai Zovi10 minutes

4 readingsTotal 112 minutes

Required: “An Evening with Berferd,” Bill Cheswick20 minutes
Required: “IDES Model,” Dorothy Denning30 minutes
Video: “DEFCAMP 2015 – Building a Security Operations Center,”32 minutes
Suggested: Introduction to Cyber Security, Edward Amoroso and Matthew Amoroso, (Ch. 21 - 22)30 minutes

1 assignmentTotal 30 minutes

Module 3 Quiz30 minutes

This module introduces the limitations of perimeters, and the challenges in the enterprise of dealing with threats such as DDOS and APT.

What's included

12 videos5 readings2 assignments

12 videosTotal 70 minutes

Assignments and Reading2 minutes
Practical Limitations of Perimeter7 minutes
APT Schema Through Perimeter Holes7 minutes
Third Party Security6 minutes
Target APT Attack5 minutes
Large Government Agency Attack5 minutes
Layer 3 DDOS Protection6 minutes
Layer 7 Application Level DDOS Risk4 minutes
Large Financial Website DDOS Attacks4 minutes
Network Security Industry Overview3 minutes
Interview: Ray Cheng - Pt. 114 minutes
Interview: Ray Cheng - Pt. 26 minutes

5 readingsTotal 120 minutes

Required: “Evolution of the Zero Trust Model for Cybersecurity,” Ed Amoroso, IEEE25 minutes
Required: “A Study of Advanced Persistent Threats,” Chen, Desmet, and Huygens30 minutes
“Implementing Zero Trust,” Ed Amoroso, 201830 minutes
Suggested: Introduction to Cyber Security, Edward Amoroso and Matthew Amoroso, (Ch. 23 - 24)30 minutes
Quiz Directions5 minutes