Network penetration test and anomaly detection (Lecturer Notes)

The students should have at least some basic knowledge of computer networking (e.g., TCP/IP, network topologies, devices, ports, and protocols). We suggest teaching them the basics of computer networking if they do not have the mentioned knowledge.

Next, you can ask them to use the Security Lab environment (see here) and perform some network security tests and analysis, such as:

Ask them to join small groups and do the following tests and analyses.

• Perform network penetration tests. You can use this guideline.
• Perform the traffic analysis steps mentioned here.
• Generate attack data (pen test) and use Wireshark to detect them.
• Each team presents how they could use Wireshark to detect an attack on other teams.

This practice can be done as a competition. A group does ethical hacking, and the other team detects the attack using the mentioned tools. However, this might need installing more virtual machines.