Content, progress and pedagogy of the module

Learning objectives

Knowledge

The students must have knowledge about:

• Cybercrime and different kinds of cyberattacks, including the underlying motivations and techniques.
• Different malware types
• systems for detecting, establishing and preventing intrusions (intrusion detection systems and intrusion prevention systems) - including knowledge about relevant monitoring and logging
• Traffic monitoring and analysis
• Using machine learning techniques for intrusion detection 

Skills

Students must be able to:

• Methods for network-based prevention, detection and analysis of network-based cyber-attacks, including analysis of traffic at different layers of the TCP/IP protocol stack.
• configuration and operation of secure test environments.
• applying selected tools for attacking and defending network devices and network infrastructure, including detection and establishing of attacks.

Competences

The students must be able to

• Evaluate which methods and tools for detecting, preventing and analyzing network-based attacks should be used for a specific case/problem

Type of instruction

As descript in §17

Exam

Exams