Average Rating: 0.00/10
(# Rating Votes: 0 | Rate This Course | Contribute a Review )
Short Description:
Network Attacks and Countermeasures is the ideal course for individuals that have experience in the industry but would like more information regarding how to protect their networks. The course is centered around the paradigm that learning how attacks work will empower the administrator to successfully defend the network.
Full Description:
Course Overview Network Attacks and Countermeasures is the ideal course for individuals that have experience in the industry but would like more information regarding how to protect their networks. The course is centered around the paradigm that learning how attacks work will empower the administrator to successfully defend the network. As common threats are explained and attacks are demonstrated, timely advice is given on how to prevent these attacks and what to look for to determine whether an attack is taking place. A number of hands-on labs are performed during the course so that material can be applied during the class.
Who Should Attend This course is designed for IT administrators, engineers and managers who are responsible for the day-to-day operation and/or protection of their organizations' networked systems. The following professionals benefit best from this course:
Systems Administrators
Web Administrators
Support Analysts
Network Engineers
IT Managers
Prerequisites Students are expected to have a basic understanding of the OSI model, experience with network topologies, and experience with TCP/IP. In addition, experience with Windows NT 4.0 and/or UNIX are necessary prerequisites for this course.
Topics Covered OSI Overview
TCP/IP Overview
TCP/IP Security Problems
Application & OS Security
Web Security
Firewalls
Cryptography
VPNs
PKI
Goals & Objectives By the end of this course, students will have an increased awareness of computer & network security. They will become familiar with various security technologies, common attacks & vulnerabilities, and how to detect and prevent these attacks. Students will also learn how to stay current on the latest vulnerabilities and other security topics.
Course Outline Day 1
Overview
OSI Model
Description of each layer
Communications in the OSI model
The OSI Model & Security
TCP/IP Overview
TCP/IP layers
IP
TCP
UDP
ICMP
SNMP
DNS
TCP/IP Security Problems
Ping
Traceroute
Port scanning
TCP/IP stack fingerprinting
Source routing
ICMP redirects
DNS spoofing
DNS id prediction
RIP attacks
Fragmentation attacks
Denial of Service (DoS) attacks
Distributed Denial of Service (DDoS) attacks
Packet sniffing
IP spoofing
TCP sequence number prediction
Session hijacking
Day 2
Application & OS Security
Trojans
Backdoors
Rootkits
Buffer Overflows
File system permissions
Locking down NT
Locking down UNIX
Tripwire
Web Security
Banner grabbing
CGI Vulnerabilities
Malicious Code
Sendmail vulnerabilities
Webserver vulnerabilities
BIND vulnerabilities
FTP server vulnerabilities
Day 3
Firewall Technologies
Simple packet filters
Stateful packet filters
Application-level proxy
Circuit-level proxy
Firewall architectures
Screening router
Dual-homed host
Screened subnet Perimeter Network (DMZ) Bastion Host Interior Router Exterior Router
Split-Screened Subnet
Independent Screened Subnets
Symmetric Key Cryptography
Substitution cipher
Transposition cipher
Block ciphers
Stream ciphers
Symmetric-Key Algorithms
Asymmetric/Public Key Cryptography
Hybrid systems
Message Integrity
Hash function
One-way hash function
Message Authentication Code
Message Digest Algorithms
Public Key Infrastructure
Definition
Components - Certificate Authorities (CAs), Registration Authorities (RAs), CRL's, Certificate Repository, Digital Certificates
Functions of a PKI - Registration, Initialization, Certification, Key Pair Recovery, Key Generation, Key Update, Cross-Certification, Revocation
CORE PKI Services - Authentication, Integrity, Confidentiality
Other PKI Services - Secure communications, Secure time stamping, Non-repudiation, Privilege management
Storing private keys
Policies & Procedures
Outsourcing the CA
Being your own CA
PKI Implementations
PGP
SSH
SSL
S/MIME
VPNs
IPSec
AH
ESP
SA
SPI
IKE
Conclusions
Putting it all together - anatomy of an attack
How to stay up-to-date and informed
Further reading
Duration:
5 Days
Price:
?
Submitted by: admin Hits: 0 NSEC's Network Attacks & Countermeasures Course Web Page |