JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD

Prerequisites

Computer Networks, Computer Programming

Course Objectives:

• Compare alternative tools and approaches for Intrusion Detection through quantitative analysis to determine the best tool or approach to reduce risk from intrusion.
• Identify and describe the parts of all intrusion detection systems and characterize new and emerging IDS technologies according to the basic capabilities all intrusion detection systems share.

Course Outcomes

After completion of the course, students will be able to:

• Possess a fundamental knowledge of Cyber Security.
• Understand what vulnerability is and how to address most common vulnerabilities.
• Know basic and fundamental risk management principles as it relates to Cyber Security and Mobile Computing.
• Have the knowledge needed to practice safer computing and safeguard your information using Digital Forensics.
• Understand basic technical controls in use today, such as firewalls and Intrusion Detection systems.
• Understand legal perspectives of Cyber Crimes and Cyber Security.

UNIT - I

The state of threats against computers, and networked systems-Overview of computer security solutions and why they fail-Vulnerability assessment, firewalls, VPN’s -Overview of Intrusion Detection and Intrusion Prevention, Network and Host-based IDS

UNIT - II

Classes of attacks - Network layer: scans, denial of service, penetration Application layer: software exploits, code injection-Human layer: identity theft, root access-Classes of attackers-Kids/hackers/sop Hesitated groups-Automated: Drones, Worms, Viruses

UNIT - III

A General IDS model and taxonomy, Signature-based Solutions, Snort, Snort rules, Evaluation of IDS, Cost sensitive IDS

UNIT - IV

Anomaly Detection Systems and Algorithms-Network Behaviour Based Anomaly Detectors (rate based)-Host-based Anomaly Detectors-Software Vulnerabilities-State transition, Immunology, Payload Anomaly Detection

UNIT - V

Attack trees and Correlation of alerts- Autopsy of Worms and Botnets-Malware detection -Obfuscation, polymorphism- Document vectors. Email/IM security issues-Viruses/Spam-From signatures to thumbprints to zero day detection-Insider Threat issues-Taxonomy-Masquerade and Impersonation Traitors, Decoys and Deception-Future: Collaborative Security

TEXT BOOKS:

• 1. Peter Szor, The Art of Computer Virus Research and Defense, Symantec Press ISBN 0-321- 30545-3.
• 2. Markus Jakobsson and Zulfikar Ramzan, Crimeware, Understanding New Attacks and Defenses.

REFERENCE BOOKS:

• 1. Saiful Hasan, Intrusion Detection System, Kindle Edition.
• 2. Ankit Fadia, Intrusion Alert: An Ethical Hacking Guide to Intrusion Detection. Online Websites/Materials:
• 1. https://www.intechopen.com/books/intrusion-detection-systems/ Online Courses:
• 1. https://www.sans.org/course/intrusion-detection-in-depth
• 2. https://www.cybrary.it/skill-certification-course/ids-ips-certification-training-course