packet capture tool three way hand shake

Therefore, an instructor often faces the challenge – How do I select and design network security contents effectively and economically to optimize student learning of network security with limited time and coverage?Ī. On the other hand, network security is such an important foundation for understanding other areas in security that student mastery of its basic concepts should be one key objective of the course. The time and content coverage that can be devoted to network security may be quite scarce. Thus, managerial and human behavioral topics, the theoretical portion of technical contents, and hands-on exercises all compete for the limited time available in a semester. The instructor may also enhance the conceptual contents with some hands-on labs. INTRODUCTION A typical introductory course in information security includes both (a) the necessary coverage of basic security principles and (b) more technically oriented topics such as network security threats and malware. Index terms – TCP three-way handshake, sniffing, packet capture, port scanning, Wireshark, Nmap, security lab Below, I introduce the handshake briefly and then describe how it plays a role in five subject areas in network security: TCP protocol, sniffing, port scanning, distributed denial of service (DDoS), and network defense. HANDSHAKE AND NETWORK SECURITY The TCP three-way handshake can be utilized as a common theme that runs through the networking portion of an information security course, from the basics of the TCP protocol to network defense mechanisms such as firewalls and intrusion detection systems (IDSes). This paper describes the rationale for so doing and shares examples of some learning tools I created in this respect. I use it as a common theme that runs through various network security topics so that it is easier for students to grasp new concepts while reinforcing old knowledge. In this paper I describe the rationale for using the handshake as a pedagogical tool and provide related examples such as lab exercises and exam questions.Ībstract – The TCP three-way handshake can be used as a pedagogical tool when teaching network security in an introductory course in information security. Leverages the limited time for maximum mastery. TCP Three-way Handshake as a Pedagogical Tool Yu “Andy” Wu, University of North Texas Proceedings of the 14th Colloquium for Information Systems Security Education Baltimore Marriott Inner Harbor Baltimore, Maryland June 7 - 9, 2010

Packet capture tool three way hand shake