Module/Workshop

Cyber Basics - Module 2: Networking Updated!

4 Lessons

This is the second module in the Cyber Basics course (aka GenCyber). It provides basic definitions related to networking (NIC, LAN, WAN, WAP, internet, etc.) and describes basic network devices. It explains the pros/cons between wired and wireless network topographies. It also gives a brief overview and history of the global internet. It familiarizes the student with layered networking models (TCP/IP & OSI), the client-server networking model, and some basic tools for network defense, specifically firewalls (network and host-based) and intrusion detection/prevention systems. It provides them with a basic understanding of networking concepts for both UNIX/Linux and Windows environments and network services (DNS, web servers, FTP, SSH, etc.). Additionally, it provides some hands-on experience with a network protocol analyzer software tool (Wireshark) and Windows firewall settings and rules. Upon completion of this module, the student will have a rudimentary understanding of how networks work and be familiar with some basic tools to defend them.

Learning Objectives
  • Describe a network (wired/cabled & wireless)
  • Compare cabled/wired and wireless networks
  • Become familiar with network security devices
  • Understand layered network models
  • Understand basic concepts related to networking in Linux and Windows
  • Apply software tools such as Wireshark to examine network traffic
  • Describe the client-server networking model
  • Understand basic network services such as the Domain Name Service, web servers, file transfer protocol (FTP) and secure shell (SSH)
  • Describe basic tools for network defense
  • Apply basic firewall rules
  • Understand purpose and deployment of intrusion detection/prevention systems
Faculty Instructions

The ‘Network Fundamentals’ lesson includes instructions on how to install the network packet analysis tool, Wireshark (www.wireshark.org). If students are using the Virginia Cyber Range Cyber Basics environment, they already have Wireshark installed in their Linux virtual machine and don’t need to install it. Similarly, if they are using a Kali Linux virtual machine they installed on their own system using instructions from the introductory module of this Cyber Basics course, Wireshark comes pre-installed, so they don’t need to install it. If, however, students want to use Wireshark on another system that does not have Wireshark installed, the slide deck shows where they can get it.

Files
Module 2: Networking Description

Log In
to download materials

* NICE Cybersecurity Workforce Framework KSAs Addressed
  • K0001: * Knowledge of computer networking concepts and protocols, and network security methodologies.
  • K0010: Knowledge of communication methods, principles, and concepts (e.g., crypto, dual hubs, time multiplexers) that support the network infrastructure.
  • K0011: Knowledge of capabilities and applications of network equipment including hubs, routers, switches, bridges, servers, transmission media, and related hardware.
  • K0029: Knowledge of organization's LAN/WAN pathways.
  • K0049: Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).
  • K0061: Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
  • K0112: Knowledge of defense-in-depth principles and network security architecture.
  • K0221: Knowledge of OSI model and underlying network protocols (e.g., TCP/IP).
  • K0301: Knowledge of packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
  • K0326: Knowledge of cybersecurity methods, such as firewalls, demilitarized zones, and encryption.
  • K0331: Knowledge of network protocols (e.g., Transmission Critical Protocol (TCP), Internet Protocol (IP), Dynamic Host Configuration Protocol (DHCP)), and directory services (e.g., Domain Name System (DNS)).
  • K0340: Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol (TCP), Internet Protocol (IP), Open System Interconnection Model (OSI)).
  • K0395: Knowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.)
  • K0443: Knowledge of how hubs, switches, routers work together in the design of a network.
  • K0487: Knowledge of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).
  • K0489: Knowledge of network topology.
  • K0515: Knowledge of OSI model and underlying networking protocols (e.g., TCP/IP).
  • K0516: Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.
  • K0555: Knowledge of TCP/IP networking protocols.
  • K0561: Knowledge of the basics of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).
  • S0046: Skill in performing packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
  • S0076: Skill in configuring and utilizing software-based computer protection tools (e.g., software firewalls, anti-virus software, anti-spyware).
  • S0084: Skill in configuring and utilizing network protection components (e.g., Firewalls, VPNs, network intrusion detection systems).
  • S0156: Skill in performing packet-level analysis (e.g., Wireshark, tcpdump, etc.).
  • S0168: Skill in applying cybersecurity methods, such as firewalls, demilitarized zones, and encryption.
* NSA/DHS Center of Excellence (CAE) KUs Addressed
  • Basic Networking
  • Network Defense
  • Intrusion Detection

* Most courseware content maps to NIST NICE Cybersecurity Workforce Framework (NCWF) Knowledge, Skills, and Abilities (KSAs) and/or NSA/DHS CAE Knowledge Units (KUs). For more information on KSAs and KUs, please visit:

KSAs: http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-181.pdf

KUs: https://www.iad.gov/NIETP/documents/Requirements/CAE-CD_2019_Knowledge_Units.pdf