A one-semester, graduate-level course focuses on computer network defense and countermeasures. It is designed to give students a solid foundation in advanced network security fundamentals. The course covers both the conceptual and practical aspects of network security. It first reviews the threats to network security, the defense-in-depth strategy and technologies, and network security policy design and implementation. The course then explores the three key network defense technologies in depth: firewalls, intrusion detection and prevention systems, and virtual private network. An emphasis on labs and projects will provide students hands-on learning experiences in using popular open-source and “industry-standard” tools and solutions to design and implement a wide spectrum of defense measures to protect computer networks, and to detect, respond to, and recover from intrusion.