Analyzing Network Protocols and Traffic Security

This sequence immerses students in the invisible world of network traffic, focusing on how data moves and how it is intercepted. Students visualize the OSI model layers, analyze packet captures to identify insecure protocols, and explore vulnerabilities like DoS and Man-in-the-Middle attacks.

Packet Anatomy and OSI Layers

Students break down the Open Systems Interconnection (OSI) model to understand how data is encapsulated for transport. They dissect the structure of a data packet, identifying headers, payloads, and trailers used in network communication.

Traffic Analysis and Eavesdropping

Using a safe, simulated environment or captured files, students use tools like Wireshark to inspect network traffic. They observe the difference between cleartext protocols (like Telnet or HTTP) and encrypted traffic, highlighting the risks of eavesdropping.

Handshakes and Floods

Students analyze the SYN-SYN/ACK-ACK handshake process that establishes reliable connections. They then explore how this mechanism can be exploited in SYN Flood attacks to create Denial of Service (DoS) conditions.

The Middleman Menace

This lesson covers how attackers insert themselves between two communicating parties. Students learn the mechanics of ARP spoofing on a local network and discuss strategies for detection and prevention.

Tunnels and Walls

Students explore defensive network technologies, specifically how Virtual Private Networks (VPNs) create encrypted tunnels and how firewalls filter traffic based on rules. They configure a simple firewall rule set to block specific malicious traffic types.