หัวข้อหลักในหลักสูตร Network Security
| หมวดหมู่ | หัวข้อย่อย (Topics) |
|---|---|
| Networking Fundamentals | OSI/TCP-IP Model, IP Addressing/Subnetting, Routing (OSPF, BGP), Switching (VLAN, STP), DNS/DHCP, NAT, QoS, Wireless (802.11 a/b/g/n/ac/ax) |
| Security Concepts | CIA Triad, Threat Modeling (STRIDE, PASTA), Risk Management, Security Frameworks (NIST CSF, ISO 27001, CIS Controls), Defense in Depth, Zero Trust |
| Network Security Technologies | Firewall (Stateful, Next-Gen, Cloud), IDS/IPS (Snort, Suricata), VPN (IPsec, SSL, WireGuard), Proxy/SWG, WAF, DDoS Protection, NAC, DNS Security (DNSSEC, DoH/DoT) |
| Cryptography & PKI | Symmetric/Asymmetric Encryption, Hashing, Digital Signatures, Certificates (X.509), PKI, TLS/SSL (1.2/1.3), IPsec, SSH, Certificate Transparency |
| Monitoring & Detection | SIEM (Splunk, Elastic, Sentinel), Log Management, NetFlow/IPFIX, PCAP Analysis (Wireshark, Zeek), NDR, Threat Intelligence, UEBA, MITRE ATT&CK Mapping |
| Incident Response & Forensics | NIST SP 800-61, Kill Chain, Diamond Model, Memory/Disk/Network Forensics, Malware Analysis (Static/Dynamic), Threat Hunting |
| Cloud & Modern Architecture Security | AWS/Azure/GCP Network Security (VPC, SG, NACL, Transit Gateway, Firewall), Container/K8s Security (Cilium, Calico, Istio), Service Mesh, Serverless Security, SASE/SSE |
| Automation & DevSecOps | IaC (Terraform, Ansible), Policy as Code (OPA/Rego), CI/CD Security, SAST/DAST/SCA, Secrets Management, GitOps |
| Compliance & Governance | PCI-DSS, HIPAA, GDPR/PDPA, SOX, Audit Management, Evidence Collection, Continuous Compliance |
หัวข้อน่าสนใจ/Trending (Hot Topics 2024)
- Zero Trust Network Access (ZTNA) แทน VPN แบบเดิม
- SASE / SSE Architecture (Gartner Magic Quadrant Leaders: Zscaler, Netskope, Palo Alto, Cato, Cloudflare)
- eBPF / XDP for Network Security (Cilium, Tetragon, Pixie) - Kernel-level Visibility & Enforcement
- Encrypted Traffic Analysis (ETA) - JA3/JA4, SNI, Certificate Analysis, TLS Fingerprinting
- API Security - OWASP API Top 10, GraphQL Security, API Gateway, Schema Validation
- Software Supply Chain Security - SBOM, SLSA, Sigstore, Cosign, Dependency Confusion
- Post-Quantum Cryptography (PQC) - KYBER, DILITHIUM, NIST Standards, TLS 1.3 Hybrid Key Exchange
- OT/ICS Security - Purdue Model, IEC 62443, IT/OT Convergence, Dragos, Claroty, Nozomi
- Generative AI in Security - Threat Report Generation, Code Analysis, SOC Automation, Adversarial AI
- Identity-first Security - ITDR (Identity Threat Detection & Response), CIEM, PAM Evolution
ใบรับรองมาตรฐานอุตสาหกรรม (Certifications Pathway)
| ระดับ | ใบรับรอง | ผู้ให้ | เน้น |
|---|---|---|---|
| Entry | CompTIA Security+ | CompTIA | Baseline Security Knowledge |
| Entry | CompTIA Network+ | CompTIA | Networking Fundamentals |
| Associate | CCST Networking / Cybersecurity | Cisco | Entry Network/Security |
| Professional | CCNP Security (SCOR + Concentration) | Cisco | Cisco Security Tech (Firepower, ISE, Umbrella) |
| Professional | Palo Alto PCNSE | Palo Alto | Next-Gen Firewall, Panorama, Prisma |
| Professional | Fortinet NSE 4/5/6/7 | Fortinet | FortiGate, Fabric, Cloud Security |
| Professional | Check Point CCSA/CCSE | Check Point | Check Point Firewall, Management |
| Expert | CISSP | (ISC)² | Security Management, Architecture (5 yrs exp) |
| Expert | CCSP | (ISC)² | Cloud Security Architecture |
| Expert | OSCP / OSWE / OSEP | OffSec | Hands-on Pen Testing, Web, Evasion |
| Expert | GIAC (GCIH, GCFA, GNFA, GCED, GDAT) | SANS/GIAC | Specialized: IR, Forensics, Network Forensics, Enterprise Defense |
| Cloud | AWS Security Specialty / Azure Security Engineer / Google Cloud Security Engineer | Cloud Vendors | Cloud-Native Security Services |
แหล่งเรียนรู้แนะนำ
- Labs: TryHackMe (Complete Beginner, Pre-Security, SOC Level 1), Hack The Box (Starting Point, Academy, Pro Labs), RangeForce, CyberDefenders
- Free Courses: Cisco NetAcad, Microsoft Learn, AWS Skill Builder, Google Cloud Skills Boost, Fortinet NSE Training (Free), Palo Alto EDU
- Communities: Reddit r/netsec, r/AskNetsec, r/cybersecurity, Discord (THM, HTB, Vendor-specific), Local OWASP/ISACA/(ISC)² Chapters
- News/Research: The Hacker News, Dark Reading, Krebs on Security, Project Zero, Google Security Blog, Microsoft Threat Intelligence, Vendor Advisories
