INTRODUCTION TO DISTRIBUTED INTRUSION DETECTION

CS595

SYLLABUS

Instructor : Dr. Mostafa G. Mostafa

WebSite : www.wku.edu/~mostafa.mostafa

E-mail : mostafa.mostafa@wku.edu

Office : TCCW Room 113B

Phone : (270) 745-6183

Hours : MW:  9:00 am to 10 am, 11:30 am to 2:30 pm

Fri: 11:15 am to 12:15 pm

Tue, Thu: by Appointment

Course Prerequisite:

CS 450 (Computer Networks).

Course Description:

This course covers a variety of advanced topics in Network Security area. In this course we will know about TCP, intrusion detection, network vulnerability, Intrusion detection and prevention methods, detection vs. prevention, Signature based intrusion detection systems, and anomaly based intrusion detection systems. We will work with a case study on DNP3 protocol with hands on training on snort (the most known intrusion detection system).

Text:

Recommended but not required:

---

Intrusion Detection with Snort By Jack Koziol ............................................... Publisher: Sams Pub Date: May 20, 2003 Print ISBN-10: 1-57870-281-X Print ISBN-13: 978-1-57870-281-7

Network Intrusion Detection, Third Edition By Stephen Northcutt, Judy Novak ............................................... Publisher: New Riders Publishing Pub Date: August 27, 2002 Print ISBN-10: 0-7357-1265-4 Print ISBN-13: 978-0-7357-1265-2

Reading Assignments:

Reading assignments serve as an aid to the class lecture topics.  They will be given in class and are expected to be completed before the next class.  Announced quizzes will be given on reading assignments.

Attending Policy:

Attendance will be recorded during each class meeting. You will miss a lot but your grade will be affected by 5 % of final grade if you absence more than 3 classes without accepted excuse.

Grading Policy:

Assignments and quizzes 25%

Mid Term Exam 20%

Final Exam 25%

Final Project 25%

Participation/Attendence 5%

Note: Arrangements must be made IN ADVANCE if for some valid reason you cannot take an exam at the scheduled time.

90% - 100% A

80% - 89% B

70% - 79% C

60%-69% D

<=60% F

Lab Assignments Policy:

Lab Assignments will involve solving programming problems related to course content. Assignments are due at start of the classes.

Term Project:

To be discussed in class

Cheating Policy

Students are encouraged to work together and learn from each other.  However, cheating in any form on exams, or copying of homework or computer programs will not be tolerated.  Any evidence of cheating will result in a failing grade for the course.

General Policy:

Homework is due at the start of class on the due date. Late homework will only be accepted in extenuating circumstances.

Student Disability Services

In compliance with university policy, students with disabilities who require accommodations (academic adjustments and/or auxiliary aids or services) for this course must contact the Office for Student Disability Services in DUC A-200 of the Student Success Center in Downing University Center.

Please DO NOT request accommodations directly from the professor or instructor without a letter of accommodation from the Office for Student Disability Services.

The Learning Center (TLC)

Located in the Academic Advisng and Retenion Center, DUC-A330
Should you require academic assistance with this course, or any other General Education Course, there are several places that can provide you with help. TLC tutors in most major undergraduate subjects and course levels throughout the week. To make an appointment, or to request a tutor for a specific class, call 745-6254 or stop by DUC A330.  Log on to TLC’s website at www.wku.edu/tlc to find out more. TLC hours: M-Thu. 8am-9pm, Fri. 8am-4pm, Sat.-Closed, and Sundays 4pm-9pm.