QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Streamline Media's network defense stack, eight layers that traffic climbs from the wire to a validated response: sensors, signatures, anomaly, tuning, prevention, encrypted traffic, correlation and response. On the left, sensors move from easy-to-reach access switches to TAPs at the internet edge and core switch, and dropped mirrored frames fall from 148,213 to zero. On the right, the alert queue is made trustworthy: a three-year-stale ruleset updated, 400 daily false positives scoped out, a 6,000-alert port scan thresholded to one event, and a quiet 58-to-62-second beacon caught, ending in one validated incident handed to IR.
CY-MID-067Mid Level · Intrusion Detection

Intrusion Detection & Prevention — The Network Defense Stack

A hands-on mid-level course that detects and blocks attacks in network traffic. Work the network defense stack - eight layers: Sensors, Signatures, Anomaly, Tuning, Prevention, Encrypted Traffic, Correlation, and Response - deploying IDS/IPS, writing and tuning rules, and cutting false positives with real Suricata and Zeek work. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Place sensors to see the traffic that matters.
  • Write and tune signature and anomaly detection with few false positives.
  • Move safely from detection to inline prevention.
  • Handle encrypted traffic, correlate alerts, and respond.
Price:৳8,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.