CIS 277 - Packet Analysis

5.0 Credits
Detailed analysis of network traffic and detecting and responding to attacks against information systems that utilize a wide variety of protocols. Methodologies for threat hunting will also be covered. Maps to the Packet Analyst and Wireshark Certified Network Analyst certifications.
Prerequisite CIS 274 with a minimum grade of 2.5 or instructor permission.
Course-level Learning Objectives (CLOs)
Upon successful completion of this course, students will be able to:

Describe Ethernet operation.
Utilize various methodologies to perform threat hunting.
Compare and contrast the tools and utilities available for frame capture/creation.
Perform frame level analysis.
Detect ARP spoofing and IP address spoofing.
Recognize and analyze a variety of connectionless and connection-oriented protocols
Describe common TCP/IP vulnerabilities and how to minimize/mitigate attacks.
Implement and practice TCP/IP stack fingerprinting.
Configure and use a variety of tools to detect and decode attacks.