This course focuses on Intrusion Detection, Intrusion Prevention, and Incident Handling. Topics include an analysis of the principles and practices of intrusion detection, intrusion prevention, and incident handling, identifying attack patterns; deployment of resources and responses to handle the incident, surveillance, damage assessment, risk assessment, datamining, attack tracing, system recovery, and continuity of operation.