Advanced Network Analysis and Incident Response

Start anytime. Learn at your own pace.

Reveal insights, drive decisions, advance your career.

Man with headphones and microphone having conference call online sitting at home office with two laptops. Working from home during quarantine and self isolation period at pandemic. Manager at online meeting upset with markets falling down

Cybersecurity

Online Self-Paced

20 Hours

500

Instructor: Dr. Jason Crossland

  • Designed and taught by Jason Crossland
  • LIVE monthly seminars and office hours
  • Engaging learning including video walkthroughs and hands-on activities
  • Satisfaction guaranteed. Explore the course with no risk.
  • Save $300 with the Certificate vs. buying courses separately

Advance from routine alert triage to evidence-driven detection engineering in Advanced Network Analysis and Incident Response, the second course in Johns Hopkins Engineering’s Intrusion Detection certificate program.

Over five focused online modules, you will baseline enterprise traffic with graph analytics, apply ROC analysis to fine-tune IDS rulesets, weigh cost-versus-coverage trade-offs between sensor stacks, and script response playbooks that map alerts to business risk. The journey culminates in a packet-forensics capstone where you trace an exfiltration kill chain and deliver an executive-ready report, transforming theory into a portfolio piece you can showcase.

This course follows an industry-standard hacking methodology and builds critical skills across the entire hacking lifecycle—from reconnaissance to exploitation and post-access activities. Each hands-on project—network baselining, anomaly hunting, ROC-based tuning, risk-aligned response design, and the forensic capstone—produces evidence-rich deliverables such as dashboards, analytic briefs, and actionable playbooks. These artifacts drop directly into any SOC workflow, ensuring the skills you gain are immediately transferable and vendor-agnostic. 

Powered by Engineering for Professionals

The #1 Ranked Online Grad Program for Computer Information Technology by U.S. News & World Report

Johns Hopkins Engineering’s Executive and Professional Education delivers executive education courses from the same faculty and support team behind Johns Hopkins Engineering for Professionals, the nation’s #1 online, part-time graduate program in computer information technology. This ranking includes our master’s programs in computer science, artificial intelligence, cybersecurity, information systems engineering, and data science.

Through interactive assignments, guided instruction, reflective essays, and case studies, you will learn from Johns Hopkins expert Jason Crossland, a 23-year cyber-operations veteran and senior cybersecurity engineer at the Johns Hopkins Applied Physics Laboratory. His monthly live seminars bridge classroom concepts with real-world tactics drawn from securing DoD and DHS networks, giving you insider insight and personalized feedback. 

Upon completion, you’ll possess the analytic, evaluative, and communication skills needed to step confidently into detection engineer, threat hunter, or incident-response lead roles—armed with a compelling portfolio that proves your IDS works and your security investments pay off. 

Save $300 and Earn the Full Certificate

Advanced Network Analysis and Incident Response is one of 3 courses in the full

The image is for illustrative purposes only. Actual certificate design subject to change,

Complete this course as well as:

and the capstone project to earn your Johns Hopkins Certificate of Achievement.

Say $300 when you purchase the full Certificate Program in Intrusion Detection instead of paying for each individually.

No Risk: Satisfaction Guaranteed

Feel confident in your learning journey! If the certificate content is too advanced, not advanced enough, or simply doesn’t meet your expectations, we’ve got you covered with our money-back guarantee. Just contact our team within 7 days from purchase to receive a full refund—no questions asked.

Meet Your Instructor

Jason Crossland

Johns Hopkins University, Johns Hopkins Applied Physics Laboratory

Jason Crossland has over 16 years of military commissioned and civilian experience in cyber security engineering, information assurance, information systems, and information technology. He served in the Air Force, where he was assigned to satellites, fiber-optics, and telecommunications networks, systems, and equipment. He currently works at the John Hopkins University Applied Physics Laboratory in the Critical Infrastructure Sector and as an instructor in the Johns Hopkins Engineering for Professionals program.

Jason is Here to Help!

Questions about course content? Looking for insight on intrusion detection? Stop by monthly Zoom office hours to talk with Jason and fellow students about what you’re learning in the course and the theoretical application of intrusion detection.

Prerequisites

The Certificate is designed for cybersecurity professionals and experienced students. A baseline understanding of cybersecurity concepts will be useful, but there are no formal prerequisites

Projects You’ll Build (With Expert Guidance)

Learners gain practical experience through case studies and reflective assignments that discuss and reinforce the concepts presented in each module.

  • Graph Theory for IDS: Study algorithmic approaches to IDS using graph theory to better understand node and edge characteristics.
  • Validating IDS test data results: Learn and apply the concepts for ensuring accuracy and effectiveness of SIEM and endpoint detection and response (EDR) systems.
  • ROC analysis: Use a graphical plot that illustrates and validates how to adjust/tune IDS/IPS to prevent type I and type II errors. 
  • Traffic shaping and Traffic policing: Study the concepts and operational cases for when to apply traffic shaping & policing approaches to your host and network-based IDS and IPS. 
  • Network Packet Analysis: Understand the importance of thorough packet analysis methods in order to establish network baselines and identify security threats.

Course Delivery and Support

The courses are delivered entirely online through the industry-leading Canvas Learning Management System. This system is supported by the same instructional design team behind Johns Hopkins’ renowned Engineering for Professionals program, which serves thousands of online graduate students each year. Upon registration, you will receive an email with instructions to create your Hopkins Canvas account and access the videos, readings, files and quizzes.

Advanced Network Analysis and Incident Response

Cybersecurity

500

Online Self-Paced

20 Hours

2 CEUs

No Risk: Explore the Certificate for 7 Days