Topics will include: intrusion/extrusion detection, network security monitoring, and network event reconstruction. Theory will include problems with and strategies for designing an environment conducive to network monitoring and intrusion detection. Practice will include implementing network security monitoring and intrusion detection in a test environment. Students will gain knowledge and experience identifying, interpreting, and reconstructing intrusions, and other security relevant network events.

Note: Open only to students in the Graduate Diploma in Information Assurance, Graduate Diploma in Information Security, Master of Information Systems Assurance Management, or Master of Information System Security Management programs.

Prerequisites: Information Systems Security Management 521
Further information: Course availability and times