This course investigates the many facets of network security and forensics and is a lab based course. Students will examine the areas of ARP related attacks, MAC table related attacks, VLAN related attacks, DNS related attacks, DHCP related attacks, and some concept related to network forensics such as intrusion detection, evidence collection, network auditing, network security policy design and implementation as well as preparation for and defense against attacks. The issues and facilities available to both the intruder and data network administrator will be examined and evaluated with appropriate laboratory exercises to illustrate their effect.