网络安全

课程介绍 Course Introduction

学分：3 | 先修课：计算机网络 | 学期：第6学期

网络安全课程深入讲解网络协议的安全机制与攻防技术。内容涵盖TCP/IP协议栈漏洞、防火墙技术、入侵检测与防御系统（IDS/IPS）、VPN与IPSec、SSL/TLS协议、无线网络安全、DDoS攻击防护、网络流量分析等。学生将掌握网络攻击的常见模式与防御策略，能够独立部署企业级网络安全防护体系。

This course provides an in-depth examination of security mechanisms and attack-defense techniques for network protocols. Topics include TCP/IP stack vulnerabilities, firewall technology, intrusion detection and prevention systems (IDS/IPS), VPN and IPSec, SSL/TLS protocols, wireless network security, DDoS attack mitigation, and network traffic analysis. Students master common attack patterns and defense strategies, and can independently deploy enterprise-grade network security systems.

大作业 Final Project

作业标题：企业网络入侵检测系统部署与分析

基于Snort或Suricata搭建入侵检测系统，捕获并分析真实网络流量，识别端口扫描、口令爆破、漏洞利用等攻击行为，编写自定义检测规则，并撰写安全分析报告。

Deploy an intrusion detection system using Snort or Suricata, capture and analyze real network traffic, identify attacks such as port scanning, brute force, and exploitation, write custom detection rules, and submit a security analysis report.