{"id":141,"date":"2024-02-05T00:18:11","date_gmt":"2024-02-05T00:18:11","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/cyberimpact1\/?page_id=141"},"modified":"2025-08-08T21:47:29","modified_gmt":"2025-08-08T21:47:29","slug":"cyse-300","status":"publish","type":"page","link":"https:\/\/sites.wp.odu.edu\/bbent24\/cyse-300\/","title":{"rendered":"Network Security & Threat Prevention"},"content":{"rendered":"

Skill # 1<\/h1>\n

Introduction<\/strong><\/h3>\n

Network Security & Threat Prevention is at the heart of keeping information safe. Data constantly moves between devices and systems. Without the right protections, it can be stolen, changed, or blocked. In my studies, I have learned how to protect information as it travels across networks, identify weaknesses before they are exploited, and apply security measures to stop attacks before they start.<\/p>\n

This skill combines technical knowledge with strategic thinking. You must understand how networks are built and how attackers try to break into them. You also need to know which defenses will work best in different situations. The artifacts on this page show my ability to design secure network structures, analyze risks, and create defenses that respond to the changing threat landscape.<\/p>\n

Artifact 1: Network Security Plan<\/strong><\/h2>\n

Description:<\/strong>
This project involved creating a detailed security plan for a medium-sized organization\u2019s internal network. I included firewall rules, intrusion detection systems, and access control policies. The plan explained how each security measure protected the network from specific threats such as malware, phishing, and unauthorized access.<\/p>\n

Reflection:<\/strong>
This artifact shows my ability to think about security from the ground up. I had to consider both the technical setup and the human factors. For example, even the best firewall will fail if users are tricked into giving away passwords. I learned to balance hardware, software, and training as part of a complete defense strategy. This experience will help me in real-world jobs where I need to protect networks of different sizes and purposes.<\/p>\n

\"\"
Diagram of a secure network architecture featuring layered defenses, including a firewall, intrusion detection system, VPN, and segmented internal networks to prevent unauthorized access.<\/figcaption><\/figure>\n

Artifact 2: Packet Analysis Report<\/strong><\/h2>\n

Description:<\/strong>
In this lab assignment, I used Wireshark to capture and analyze network traffic. I identified normal patterns as well as suspicious activity that suggested possible attacks. The report explained what the captured data meant and how it could be used to detect and stop threats.<\/p>\n

Reflection:<\/strong>
This artifact shows my skill in monitoring and analyzing network traffic in real time. Packet analysis is a core skill for detecting attacks early. I learned how to filter through large amounts of data to find the pieces that matter. This skill is directly relevant to jobs in Security Operations Centers where quick detection and response can prevent major damage.<\/p>\n

Snippet from the report:<\/b><\/h4>\n

Intro blurb:<\/strong>
This report shows how I captured and analyzed live network traffic to detect suspicious behavior. I used Wireshark to identify normal patterns and then filtered for anomalies such as unusual ports, malformed packets, and repeated authentication failures. The findings show how to separate noise from signal and turn raw packet data into clear security insights.<\/p>\n

At-a-glance:<\/strong><\/p>\n

    \n
  1. Tools:<\/strong> Wireshark, PCAP filters, protocol dissectors<\/li>\n
  2. Focus:<\/strong> HTTP\/S, DNS, TCP handshakes, ARP, and TLS negotiation<\/li>\n
  3. Detections:<\/strong> Repeated SYN packets without ACK, DNS queries to known bad domains, and plaintext credentials in misconfigured test traffic<\/li>\n
  4. Outcome:<\/strong> Alert rules proposed for SOC playbooks and a set of tuned display filters for faster triage<\/li>\n<\/ol>\n

    \u201cFiltering suspicious DNS traffic. Queries to a sinkholed domain clustered within a 2-minute window suggested automated beaconing.\u201d<\/p>\n

    \n

    \u201cPacket captures revealed a burst of DNS queries using randomized subdomains. The pattern and timing aligned with typical C2 beaconing. Blocking the egress domain and adding a detection rule for high-frequency NXDOMAIN responses reduced false negatives in follow-up tests.\u201d<\/p>\n<\/blockquote>\n

    For accessibility:<\/strong>
    \u201cWireshark capture showing DNS requests to a suspicious domain with time-sequence spikes and filter bar highlighting \u2018dns and frame.time_delta > 0.5\u2019.\u201d<\/p>\n

    \"\"<\/p>\n

    Filter Cheatsheet box:<\/strong><\/p>\n

    tcp.flags.syn == 1 and tcp.flags.ack == 0<\/em><\/p>\n

    dns.flags.rcode == 3<\/em><\/p>\n

    http.request.method<\/em><\/p>\n

    tls.handshake.extensions_server_name contains “example.com”<\/em><\/p>\n

    Artifact 3: Simulated Network Defense Project<\/strong><\/h2>\n

    Description:<\/strong>
    This hands-on exercise was part of a cybersecurity lab simulation. I was given a virtual network that was under attack. My task was to identify the vulnerabilities, apply security patches, and strengthen the defenses. The simulation measured how quickly and effectively I could secure the network.<\/p>\n

    Reflection:<\/strong>
    This artifact highlights my ability to respond under pressure. The simulation required quick thinking and knowledge of multiple security tools. I had to patch systems, configure defenses, and test the results while attacks were still happening. This mirrors the real-world situations where time is critical. It showed me that preparation and practice are key to successful threat prevention.<\/p>\n

    \"\"
    Activity diagram of my incident response workflow from IDS alert to recovery and documentation during the simulated attack.<\/figcaption><\/figure>\n

    Closing Reflection<\/strong><\/h3>\n

    Network Security & Threat Prevention is a skill that combines planning, analysis, and quick response. The three artifacts on this page each show a different part of that skill. The Network Security Plan focuses on building strong defenses from the start. The Packet Analysis Report shows the value of constant monitoring. The Simulated Network Defense Project proves the need for rapid action during an attack.<\/p>\n

    These experiences have prepared me to take on real-world challenges in cybersecurity. They have taught me that protecting a network is never a one-time task. It is an ongoing process that requires constant learning and adaptation. This is why I am committed to keeping my skills current and ready for whatever threats may come next.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Skill # 1 Introduction Network Security & Threat Prevention is at the heart of keeping information safe. Data constantly moves between devices and systems. Without the right protections, it can be stolen, changed, or blocked. In my studies, I have learned how to protect information as it travels across networks, identify weaknesses before they are… <\/p>\n

    Read More<\/a><\/div>\n","protected":false},"author":28614,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/bbent24\/wp-json\/wp\/v2\/pages\/141"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/bbent24\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/bbent24\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/bbent24\/wp-json\/wp\/v2\/users\/28614"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/bbent24\/wp-json\/wp\/v2\/comments?post=141"}],"version-history":[{"count":5,"href":"https:\/\/sites.wp.odu.edu\/bbent24\/wp-json\/wp\/v2\/pages\/141\/revisions"}],"predecessor-version":[{"id":444,"href":"https:\/\/sites.wp.odu.edu\/bbent24\/wp-json\/wp\/v2\/pages\/141\/revisions\/444"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/bbent24\/wp-json\/wp\/v2\/media?parent=141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}