“

Lesson 1 – Security Awareness Overview
Security Awareness Overview
What is Security?
Security Risks
How This Affects You
What is Security Awareness?
What does this cover?
The Weakest Link
Reducing Risk
Lesson 1 Review

Lesson 2 – Social Engineering
Social Engineering
What is this?
Why is it Effective?
Primary Methods
Social Engineering Defense
Lesson 2 Review

Lesson 3 – Identity Theft
Identity Theft
What is Identity Theft?
What Follows?
How an Identity is Stolen
Identity Theft Defense
Online Defense
If You Have Been Targeted
If Your Identity Has Been Stolen
Contact Information
Lesson 3 Review

Lesson 4 – Data Classification
Data Classification
Viewing and Sharing Data
Need for Data Classifications
Classification Systems
Other Institutions
Your Role
Consequences
Dumpster Diving
Information Disposal
Lesson 4 Review

Lesson 5 – Backups
Backups
Why Backups are Important
Types of Backups
What to Backup
Where to Store Backups
How to Perform Backups
Windows Backup Utility
Backup Management
Lesson 5 Review

Lesson 6 – Passwords
Passwords
Common Password Policies
Weak Passwords
Strong Passwords
Password Development
Strong Passwords (Cont.)
Multiple Passwords
Beyond the Password
Lesson 6 Review

Lesson 7 – Viruses| Worms| and Trojans
Viruses| Worms| and Trojans
What are these things?
My Computer Caught a Virus?
My Computer has a Worm?
My New Trojan Horse
Spyware
Signs You May Have Spyware
File Attachments
Extension Examples
File Attachments (Cont.)
Antivirus
Manual Scanning
Antivirus Best Practices
Lesson 7 Review

Lesson 8 – Secure Computer Use
Secure Computer Use
Physical Security
Desktop Security
Laptop Security
Screensavers
Encryption
Mobile Phone / PDA Security
Personal Firewalls
Patching and Updates
Electronic Disposals
Lesson 8 Review

Lesson 9 – Secure Internet Use
Secure Internet Use
Email Overview
Email Formats
Email Encryption
SPAM
SPAM Blockers
Email Attachments
Long Filename Examples
Unsafe Files in Outlook
Email Hoaxes and Spoofing
Email Security
Email Virus Found
To Cut Down on SPAM
Web Browsing Overview
Web Sites
Pop-ups
Web Browser Settings
Web Browsing
Instant Messaging
IM Risks
IM Best Practices
Lesson 9 Review

Lesson 10 – Intellectual Property and Software Piracy
Intellectual Property and Software Piracy
Intellectual Property
Copyright
Online Copyright
Software Piracy
Types of Software Piracy
Software Piracy is Theft
Individual Risks
Corporate Risks
Lesson 10 Review

Lesson 11 – Security Policy and Incident Response
Security Policy and Incident Response
Security Policies
Security Policy Contents
Example User Account Statements
Example Internet Access Statements
Example Email Use Statements
Why Policies Matter
Defining an Incident
Responding to an Incident
Incident Response Checklist
Lesson 11 Review

Lesson 12 – Education and Continual Awareness
Education and Continual Awareness
Education is the Key
Education and Continual Awareness (Cont.)
For Individuals
For Organizations
SCP Certifications
For Organizations (Cont..)
Lesson 12 Review

“

Lesson 1 – Network Defense Fundamentals
Network Defense Fundamentals
Five Key Issues of Network Security – Authorization and Availability
Five Key Issues of Network Security – Authentication
Five Key Issues of Network Security – Confidentiality
Five Key Issues of Network Security – Integrity
Five Key Issues of Network Security – Non-Repudiation
Managing the Threats to Security
Defensive Strategies
The Castle Analogy
The Defense Technologies
Analyzing Defense
Objectives of Access Control
Access Control
Authentication
Authentication Token
Example of a Challenge Response Token
Time Based Tokens
Core Defensive Technologies
Define the Concepts of Network Auditing
Concepts of Network Auditing
Security Audits
Independent Audit
Quick Audit Results
Managing Audit Data
Lesson 1 Review

Lesson 2 – Advanced TCP/IP
Advanced TCP/IP
TCP/IP Concepts
TCP/IP Model Layers
OSI Model Layers
OSI Model vs. TCP/IP Model
The TCP/IP Encapsulation Process
RFCs (Requests for Comments)
The Function of IP
IP Address Classes
Address Class Chart
Private IP Address Ranges (RFC1918)
IP Addressing
Hexadecimal IP Addressing
Hexadecimal Conversions
The Subnet Mask
Subnetting Example
Routing
VLSM and CIDR
?Slash? Notation
X-casting
Analyze the 3-Way Handshake
TCP Control Flags
Sequence and Acknowledgment Numbers
Connection Establishment
Connection Termination
Ports
IANA Assignments
Port Numbers and Associated Services
Trojan Associated Port Numbers
Network Monitor
Demo – Using Network Monitor
Wireshark
Demo – Installing and Starting Wireshark
Wireshark Overview
Demo – Using Wireshark
TCP Connections
Demo – Analyzing the Three-way Handshake
Demo – Analyzing the Session Teardown Process
Capture and Identify IP Datagrams
IP Datagram
Demo – Capturing and Identifying IP Datagrams
Capture and Identify ICMP Messages
Demo – Capturing and Identifying ICMP Messages
Capture and Identify TCP Headers
TCP Header
Demo – Capture and Identify TCP Headers
The UDP Header
Demo -Working with UDP Headers
Analyze Packet Fragmentation
MTUs for Various Media
Demo – Analyzing Fragmentation
Analyzing Entire Sessions
Demo – Complete ICMP Session Analysis
Demo – Complete FTP Session Analysis
Lesson 2 Review

Lesson 3 – Routers And Access Control Lists
Routers And Access Control Lists
Fundamental Cisco Security
Modes of Operation
Navigating the Router
Configuring Access Passwords
Other Configuration Options
SSH Overview
SSH Configuration Options
Routing Principles
ARP Broadcast Between Two Nodes
Router Returning the ARP Request
Demo – Performing IP and MAC Analysis
The Routing Process
Routed vs. Routing Protocols
Routing Protocol Metrics
Routing Protocols
Demo – Viewing a RIP Capture
RIPv2
Demo – Viewing a RIPv2 Capture
Removing Protocols and Services
Cisco Discovery Protocol (CDP)
ICMP
Creating Access Control Lists
Access Control List Operation
The Wildcard Mask
Wildcard Mask Bits Defined
Implement Access Control Lists
Standard Access Control List Command Syntax
Extended Access Control List Syntax
ACL Scenarios
Grant and Denial Examples
Defending against Attacks with ACLs
Logging Concepts
Cisco Logging Options
Log Priority
Logging Examples
ACL and VTY Logging
Lesson 3 Review

Lesson 4 – Designing Firewall Systems
Designing Firewall Systems
Examine Firewall Components
Firewall Methodologies
What a Firewall Cannot Do
Implementation Options for Firewalls
A Single Packet Filtering Device
A Screened Host
A Demilitarized Zone
Create a Firewall Policy
Firewall Policy
Rule Sets and Packet Filters
Locations of Packet Filters
The Packet Filter Rules
Considerations for Packet Filtering Devices
Ports and Sockets
Ports in Exchange of a Web Page
Building Rules for the Firewall
The Ack Bit
Stateless and Stateful Packet Inspection
Stateless Packet Filters
Stateful Packet Filters
Stateful Packet Filter Function
Proxy Server
Proxy Process
Proxy Benefits
Proxy Problems
The Bastion Host
Location of a Bastion Host
Creating a Bastion Host to Run as a Firewall
The Honeypot
Honeypot Locations
Goals of the Honeypot
Lesson 4 Review

Lesson 5 – Configuring Firewalls
Configuring Firewalls
Understanding Firewalls
Firewalls and the OSI Model
Common Types of Firewalls
Building Firewall Rules
What a Firewall Cannot Do
Configuring Microsoft ISA Server 2006
ISA Server 2006
ISA Server 2006 Versions
ISA Server 2006 Features
Demo – Preparing for the ISA Server 2006 Install
Demo – Install Microsoft ISA Server 2006
Configuring ISA Server 2006
ISA Server Management Console
Demo – Exploring the Microsoft ISA Server 2006 Interface
Demo – Exporting the Default Configuration
ISA Server 2006 Firewall Policies
Processing Firewall Policies
Demo – Creating a Basic Access Rule
ISA Server 2006 Access Rule Elements
Demo – Creating a Protocol Rule Element
Demo – Creating a User Rule Element
Demo – Creating a Content Group Element
Demo – Creating and Modifying Schedule Rule Elements
Demo – Using Content Types and Schedule Rules
ISA Server 2006 Network Rule Elements
Demo – Creating a Network Rule Element
ISA Server 2006 Publishing Rules
Demo – Configuring a Web Publishing Rule
ISA Server 2006 Caching
Demo – Enabling and Configuring Caching
Demo – Install Second Loopback Adapter
Demo – Configure ISA in a Three-Legged DMZ
Configure ISA Server Monitoring
Demo -Working with Alerts
Demo -Working with Reports
ISA Server 2006 Logging
Demo – Configuring Logging Options
Final ISA Server 2006 Options
Demo – ISA Server 2006 and the Security Configuration Wizard
Demo – Configuring Packet Prioritization
IPTables Concepts
Chain Fundamentals
Process of the Packets
The Flow of the Chains
Configuration Options
Rule Management
Rule Creation
Other Options
Rule Examples
Example: Case Study
Lesson 5 Review

Lesson 6 – Implementing IPSec and VPNs
Implementing IPSec and VPNs
Internet Protocol Security
Modes of Operation
IPSec Policy Management
Demo – Examining the MMC
IPSec Policies
Demo – Identifying Default IPSec Security Policies
Demo – Saving a Customized MMC
Secure Server (Require Security)
Demo – Examining Security Methods
Demo – Examining Policy Rules
IPSec AH Implementation
Demo – Creating the 1_REQUEST_AH(md5)_only Policy
Demo – Editing the 1_REQUEST_AH(md5)_only Policy
Demo – Configuring the Policy Response
Demo – Configuring the Second Computer
Demo – Setting Up the FTP Process
Demo – Implementing the 1_REQUEST_AH(md5)_only Policy
Demo – Analyzing the Request-only Session
Demo – Configuring a Request-and-Respond IPSec Session
Demo – Analyzing the Request-and-Respond Session
Combining AH and ESP in IPSec
Demo – Creating the 5_REQUEST_AH(md5)+ESP(des) IPSec Policy and the Response Policy
Demo – Creating the 5_RESPOND_AH(md5)+ESP(des) IPSec Policy
Demo – Configuring and Analyzing an IPSec Session Using AH and ESP
Demo – Implementing the 7_REQUIRE_AH(sha)+ESP(sha+3des) Policy
Demo – Implementing the 7_RESPOND_AH(sha)+ESP(sha+3des) Policy
Demo – Implementing and Analyzing an AH(sha) and ESP(sha+3des) IPSec Session
VPN Fundamentals
VPN Elements
IPSec and Tunneling Protocols
Authentication Header (AH)
Encapsulating Security Payload (ESP)
Security Association (SA)
IPSec Tunnel Mode
VPN Security
VPN Implementations and Firewalls
VPN Authentication
Configuring a VPN
Demo – Configuring the VPN Server
Demo – Configuring VPN Clients
Lesson 6 Review

Lesson 7 – Designing an IDS
Designing an IDS
The Goals of an Intrusion Detection System (IDS)
IDS Abilities
Some Intrusion Detection Definitions
The IDS Matrix
The Components of an Intrusion Detection System
Realistic Goals of IDS
Technologies and Techniques of Intrusion Detection
Resources on the Network
Acceptable & Unacceptable Use
Information Collection and Analysis
Host-based Intrusion Detection
Centralized Host-based Design
Distributed Host-based Design
Network-based Intrusion Detection
Network-based Design
Traditional Network-based Design
Distributed Network-based Design
The Analysis
Interval Analysis
Real-Time Analysis
How to Analyze
How to Use an IDS
What an Intrusion Detection System (IDS) Cannot Do
Lesson 7 Review

Lesson 8 – Configuring IDS
Configuring IDS
Snort Foundations
Snort Fundamentals
Snort Installation
Snort Commands
Demo – Installing Snort
Demo – Initial Snort Configuration
Demo – Capturing Packets with Snort
Demo – Capturing Packet Data with Snort
Demo – Logging with Snort
Snort as an IDS
Snort Rules
Example Rules Using the Rule Header
Rule Options
Simple Rule Examples| adding Rule Options
Snort Rule IDs (SID)
Demo – Creating a Simple Ruleset
Demo – Testing the Ruleset
Rule Options
Metadata Options
Adding New Options
Content Keyword
Other Keywords
Pre-configured Rules
Demo – Examining Rules
Configuring Snort to Use a Database
Demo – Editing snort.conf
Demo – Installing MySQL
Demo – Creating the Snort Database
Demo – Creating MySQL User Accounts
Demo – Testing the New Configuration
Demo – Configuring Snort as a Service
Running an IDS on Linux
Demo – Installing LAMP Components
Apache and PHP
Demo – Apache and PHP Test
Demo – Configure Snort on Linux
Configuring MySQL for Snort
Demo – Testing Snort Connectivity to the Database
Demo – Downloading AD0db and BASE
Demo – Installing AD0db and BASE
Demo – Configuring BASE
Demo – Configuring the Firewall to Allow HTTP
Demo – Generating Portscan Snort Events
Demo – Generating Web Snort Events
Lesson 8 Review

Lesson 9 – Securing Wireless Networks
Securing Wireless Networks
Wireless Networking Fundamentals
Wireless Media
Radio Wireless Media
IEEE 802.11
WLAN Fundamentals
Ad-hoc Mode
Infrastructure Mode
Configuring an Ad-Hoc WLAN
802.11 Framing
Frame Format: 802.11 MAC Frame
802.11 Frame Details
Address Fields Settings
802.11 Addressing
The Addressing of Two Nodes in an Ad Hoc Network
The Addressing in Infrastructure Mode
The Addressing of Frames in a Wireless Bridge Network
Configuring an Access Point
Configure Infrastructure Clients
WLAN Threats
Wireless Security Solutions
Exclusive OR (XOR)
The Standard Operation of a Stream Cipher
The WEP Encryption Process
The WEP Decryption Process
Example of the Plaintext/Ciphertext Attack on WEP
Configuring WEP
Security Solutions
WEP and WPA Comparison
WPA Process Using an Authentication Server
Configuring WPA2
Wireless Auditing
Demo – Installing OmniPeek Personal
Demo – Viewing OmniPeek Personal Captures
Demo – Live OmniPeek Personal Captures
Demo – Analyze Upper Layer Traffic
Demo – Decrypting WEP
Wireless PKI
Example of how TLS Works between a Client and the Authentication Server
Lesson 9 Review

“

Lesson 1 – Cryptogaphy and Data Security
Cryptogaphy and Data Security
History of Cryptography
The number lock analogy
Cryptography Terminology
Caesar and Character Substitution
Linguistic Patterns: frequency
Polyalphabetic Ciphers
Vigen?re chart| to be used with a keyword
Other Ciphers
Others
Rotor Machines
Lessons learned from cracking Enigma
Introduction to CrypTool
Demo – Installing Cryptool
Demo – Classical Encryption Analysis
Topic 1B: Math and Algorithms
Relatively Prime
Mod Math
Mod Math Examples
Logic Operations
Topic 1C: Private Key Exchange
Keys
Symmetric Keys
DES in CBC mode
Feistel structure
Symmetric Algorithms
Digital Encryption Standard (DES)
DES Modes of Operation
Demo – DES ECB and CBC Analysis
Triple DES
Advanced Encryption Standard: Rijndael
Key Management
Topic 1D: Public Key Exchange
Asymmetric key cryptography
The basic process of asymmetric key cryptography
Public key cryptography requirements
What is ?computationally infeasible??
Asymmetric vs. Symmetric – Comparison
Diffie-Hellman
Diffie-Hellman Example
RSA
RSA Example
RSA Example| encrypt
Demo – Create Your RSA Key Pair
Demo – Creating RSA Keys
Demo – Encrypting and Decrypting with RSA
Demo – Cracking an RSA Encrypted Message
Public Key Management
Topic 1E: Message Authentication
Lesson 1 Review
Lesson 2 – Hardening LINUX
Hardening LINUX
Demo – Navigating in Linux
Demo – Exploring YaST
Topic 2B – Investigate Process Management in Linux
Demo – Viewing System Information
Demo – Modifying Process Behavior
System Startup / Shutdown Security
Demo – Password Protection of Linux Startup
Topic 2B – Investigate Process Management in Linux (Cont.)
Demo – Stopping Unneeded Services
Demo – Modifying Process Runlevels
Topic 2B – Investigate Process Management in Linux (Cont..)
Demo – Mounting a Device
Topic 2B – Investigate Process Management in Linux (Cont?)
Demo – Installing Webmin via RPM
Demo – Installing John the Ripper from Source Code
Topic 2C ? Manage Linux User and Filesystem Security
Demo – Creating and Modifying Users and Groups
Topic 2C ? Manage Linux User and Filesystem Security (Cont.)
Demo – Changing User Contexts With SU
Topic 2C ? Manage Linux User and Filesystem Security (Cont..)
Shadow Password File
Managing Passwords
Demo – Viewing the Password Files
Demo – Managing Passwords
Topic 2C ? Manage Linux User and Filesystem Security (Cont…)
Demo – Viewing File Details
File and Directory Permissions
Five characters in the permission fields
Binary| Octal Numbers| and Permissions
Topic 2C ? Manage Linux User and Filesystem Security (Cont….)
Demo – Creating Object Ownership
Demo – Assigning Permissions
Demo – Verifying Permissions
umask Settings
Demo – Configuring umask Settings
Topic 2C ? Manage Linux User and Filesystem Security (Cont?..)
Demo – Using PAM with vsFTP
Topic 2C – Manage Linux User and Filesystem Security (Cont.?..)
Demo – Logging Recent Login Activity
Topic 2D – Manage Linux Security
Demo – Configuring Network Interfaces
Topic 2D – Manage Linux Security (Cont.)
Demo – Managing Telnet with Xinetd
Topic 2D – Manage Linux Security (Cont..)
Demo – Controlling Access with TCP Wrappers
Topic 2D – Manage Linux Security (Cont…)
Demo – Configuring an SSH Server
Demo – Configuring an SSH Client
Topic 2D – Manage Linux Security (Cont….)
Demo – Using SCP to Securely Transfer Files
Demo – Preventing root SSH logins by Modifying the sshd_config file
Securing Network Services
Demo – Sharing Data with NFS
Topic 2D – Manage Linux Security (Cont…..)
Demo – Verifying Export Permissions
Topic 2D – Manage Linux Security (Cont……)
Demo – Configuring the Samba Server
Topic 2E – Create Scripts for Linux
Demo – I/O Redirection
Shell scripts
Simple script examples
Demo -Writing Simple Shell Scripts
Topic 2F – Harden Linux
Demo – Installing and Exploring Bastille
Topic 2E – Create Scripts for Linux (Cont.)
Lesson 2 Review
Lesson 3 – Hardening Windows
Hardening Windows
Topic 3A ? Examine the concepts of Windows 2003 infrastructure security
Demo – Configuring a Custom MMC and GPO
Demo – Editing a GPO
Topic 3B ? Examine the fundamentals of authentication in Windows 2003
Demo – Configuring NTLMv2 Authentication
Topic 3C ? Implement Windows 2003 security configuration tools
Demo – Securing Administrator Account Access
Demo – Testing Administrative Access
Group Policies
Demo – Verifying Password Requirements
Security Templates
Demo – Analyzing Default Password Settings of Security Templates
Demo – Creating a Custom Security Template
Topic 3C – Implement Windows 2003 security configuration tools (Cont.)
Demo – Investigating the Security Configuration and Analysis Snap-In
Demo – Implementing the Template
Demo – Analyzing the Current Security Settings of the Local System
Topic 3D ? Secure Windows 2003 resources
Demo – Setting Registry Permissions
Demo – Exporting Registry Information
Demo – Blocking Registry Access
Topic 3D ? Secure Windows 2003 resources (Cont.)
Demo – Installing Security Configuration Wizard
Demo – Using the Security Configuration Wizard
Topic 3E ? Configure Windows 2003 auditing and logging
Demo – Enabling Auditing
Demo – Logging SAM Registry Access
Topic 3E ? Configure Windows 2003 auditing and logging (Cont.)
Demo – Viewing the Registry Audit
Topic 3E – Configure Windows 2003 auditing and logging (Cont..)
Demo – Creating Events
Demo – Viewing Event Logs
Topic 3F – Examine and configure EFS on Windows 2003
Demo – Encrypting Files
Topic 3G – Examine the methods of securing networ communications in a Windows 2003 network
Demo – Configuring TCP/IP in the Registry
Topic 3G – Examine the methods of securing network communications in a Windows 2003 network (Cont.)
Demo – Configuring Port and Protocol Filtering
Topic 3G – Examine the methods of securing network communications in a Windows 2003 network (Cont..)
Demo – Enabling Windows Firewall
Demo – Configuring Windows Firewall
Demo – Configure Server 2003
Lesson 3 Review
Lesson 4 – Attack Technique
Attack Techniques
Topic 4A – Network Reconnaissance
Information Learned in the Whois Lookup
Topic 4B – Mapping the Network
Demo – Using Windows Tracing Tools
Using Graphical Tracing Tools
Demo – Using VisualRoute
Topic 4C: Sweeping the Network
Ping Sweep Tools
SuperScan 3.0 in default mode| before a scan begins
Demo – Using Super Scan
Topic 4D: Scanning the Network
Demo – Installing Linux Tools
Demo – Using Nmap
Demo – Using SuperScan
Identifying the Operating System and O/S Version
Demo – Using Nmap to Identify an Operating System
Demo – Using Nmap Front End
Topic 4E – Perform Vulnerability Scanning
Demo – Installing Nessus
Topic 4E – Perform Vulnerability Scanning (Cont.)
Demo – Configuring Nessus Scan
Demo – Custom Nessus Scanning
Demo – Network Scanning
Topic 4F – Viruses| Worms| & Trojan Horses
The Trojan Horse
Famous Trojans
Topic 4G – Gain Control over a Network System
Demo -Windows to Windows Netcat
Demo – Linux to Windows Netcat
Topic 4H – Record Keystrokes
Demo – Using Software Keystroke Logging
Topic 4I – Crack Encrypted Passwords
Topic 8J: Reveal Hidden Passwords
Demo – Revealing Hidden Passwords
Topic 4K: Social Engineering
Topic 4L: Perform a Denial of Service
Demo – Flooding with Udpflood
Lesson 4 Review
Lesson 5 – Security on the Internet and the WWW
Security on the Internet and the WWW
Major Components of the Internet
Weak Points of the Internet
Topic 5B – Secure DNS Servers
Demo – Installing a DNS Server on Windows Server 2003
Topic 5B – Secure DNS Servers (Cont.)
Demo – Creating a Primary Reverse Lookup Zone
Demo – Creating a Primary Forward Lookup Zone
Demo – Creating A and PTR Records in the DNS
Demo – Enabling Zone Transfers
Demo – Reviewing Pollution and Recursion Settings
Demo – Filtering the Interface to Accept Only DNS Traffic
Topic 5B – Secure DNS Servers (Cont..)
Best Practices for DNS Hardening
Topic 5C – Identify attack points on the Internet| and Secure Web Servers
IIS Security
Demo – Installing IIS 6.0
Demo – Implementing a Website
Demo – Starting and Stopping the Web Server
Topic 5C – Identify attack points on the Internet| and Secure Web Servers (Cont.)
Demo – Investigating IIS Security
Demo – Controlling Performance Settings
Topic 5C – Identify attack points on the Internet| and Secure Web Servers (Cont..)
Demo – Install the MBSA and Scan a system for vulnerabilities
Demo – Applying a Patch to Mitigate and IIS 6.0 Vulnerability
Topic 5C – Identify attack points on the Internet| and Secure Web Servers (Cont…)
Demo – Installing Apache 2.x on SuSe Linux 10.0
Demo – Basic Configuration of the Apache Web server
Demo – Securing your Apache Web Server – Disabling Modules
Apache Best Practices
Topic 5D – Secure Internet Users
Demo – Installing Internet Explorer 7.0
Demo – Viewing the General Settings for Your Browser
Demo – Viewing the Advanced Settings
Default Security Settings
Demo – Examine Security Levels for Zones
Demo – Adding Sites to a Zone
Other Features
Email Security
Demo – Basic Security Settings to Take Care of With Your Email Client
Lesson 5 Review

Lesson 6 – Risk Analysis
Risk Analysis
Topic 6A – Concepts of Risk Analysis
Predicting Risk
Quantifying Risk
Minimize or Mitigate Risk
Costs Versus Protection
What is at Risk?
What is a Threat?
Vulnerability Analysis
Likelihood of Occurrence
Common Threats
Topic 6B – Methods of Risk Analysis
Qualitative Risk Analysis
Facilitated Risk Analysis Process (FRAP)
Vulnerability Levels
Impact Levels
Replacement Models
Topic 6C: The Process of Risk Analysis
Stage One: Inventory
Stage Two: Threat Assessment
Stage Three: Evaluation of Control
Stage Four: Management
Stage Five: Monitoring
An Alternative Method
General Techniques to Minimize Risk
General Techniques
Specific Minimization Techniques
Topic 6E – Continual Risk Analysis
Continuous Risk Assessment Process
Security Technology Management
Vulnerability Management
Exploitation Management
Systems Availability
Lesson 6 Review
Lesson 7 – Security Policy
Security Policy
Topic 7A – Concepts of Security Policies
Policy Benefits
How to Start
A Question of Trust
Policy Committee
Are Policies Political?
Topic 7B – The Policy Design
Policy Standards
10 Sections
Topic 7C – Policy Contents
The Acceptable Use Policy
The User Account Policy
The Remote Access Policy
The Information Protection Policy
The Network Connection Policy
The Strategic Partner Policy
The Privileged Access Policy
The Password Policy
The Internet Access Policy
The Internet Policy
Miscellaneous Policies
Topic 7D – An Example Policy
Samples
Topic 7E – Incident Handling and Escalation Procedures
Sample Escalation Procedures for Security Incidents
Incident Handling
Topic 7F – Partner Policies
Sample Partner Connection Policy
Lesson 7 Review

Lesson 8 – Analyzing Packet Signatures
Analyzing Packet Signatures
Topic 8A – Describe the Concepts of Signature Analysis
Common Vulnerabilities and Exposures (CVE)
CVE Classification
Signatures
Come Common Exploits
Some Common Reconnaissance Scans
Some Common DoS Attacks
Topic 8D – Normal Traffic Signatures
Ping Signatures
Demo – Ping Signatures
Web Signatures
FTP Signatures
Telnet Signature
Topic 8E – Abnormal Traffic Signatures
Ping Sweep
Port Scan
Backdoor Signatures
Demo – Trojan Scans
Nmap Scans
Demo – Nmap scans
Lesson 8 Review
Course Closure

“

Topic A: Core System Maintenance
Primary Causes for Compromised Security
The Goal – CIA
Technology Weaknesses
Configuration Weaknesses
Human Error and Malice
Securing the Operating System
Microsoft Update
Demo – Windows Update
Windows Update Categories
Update History List
Service Packs
Demo – Installing Service Pack
BIOS Version
BIOS Update
Windows Firewall
Demo – BIOS and Firewall
Tasks Requiring Administrative Privileges
User Account Control Consent
User Account Control Credential

Topic B: Virus and Spyware Management
Viruses
Worms
Trojan Horses
Antivirus Software
Demo – Antivirus
Spyware
Windows Defender
Demo – Spyware
Spybot Search & Destroy
Network AV & Spyware
Demo – Securing Mail

Topic C: Browser Security
Pop-ups
Demo – Managing Pop-ups
Cookies
Cookie Vulnerabilities
Cookie Safeguards
Demo – Managing Cookies
Web Application Security Threats
JavaScript
Simple JavaScript Code
JavaScript Security Holes
ActiveX
ActiveX Vulnerabilities and Safeguards
Java Applets
Signed and Unsigned Applets
CGI
Form Submission
CGI Vulnerabilities and Safeguards
Cross-site Scripting
Buffer Overflow Attacks
Preventing Input Attacks
Demo – Script Weaknesses

Topic D: Social Engineering Threats
Social Engineering
Dumpster Diving
Online Attacks
Social Engineering Countermeasures
Phishing
Domain Kiting
Unit 01 Review

Unit 02 – Cryptography

Topic A: Symmetric Cryptography
Cryptography
Alice| Bob| and Eve
ROT13 Cipher
Keys
Symmetric Encryption in Action
Common Symmetric Ciphers
Demo – Encrypting and Decrypting Data
Hashes
Hashing Example
Uses for Hashes
MD5 Hash Algorithm
SHA Algorithm
Hash Vulnerabilities
Steganography
Demo – Steganography

Topic B: Public Key Cryptography
Public Key Cryptography
Asymmetric Encryption in Action
Common Asymmetric Ciphers
Demo – Public Key Encryption
Digital Signatures
Signature Process
Features of Signatures
Digital Certificates
Certificate Types
Demo – Examining Certificates
Public Key Infrastructure
Certificate Policy
Certificate Practice Statement
Trust Models
Single Authority Trust Model
Hierarchical Trust Model
Web of Trust Model
Single- and Dual-key Certificates
Unit 02 Review

Unit 03 – Authentication Systems

Topic A: Authentication
3 Steps to Secure Resources
Usernames and Passwords
Password Protection
Strong Passwords
Multiple passwords
Run As Administrator
Demo – Identifying Components of Authentication
Authentication Factors
One-factor Authentication
Two-factor Authentication
Three-factor Authentication
Network Monitor Data
Demo – Network Monitor
Active Directory Services and Features
Demo – Installing Active Directory
Demo – Joining a Domain

Topic B: Hashing
Authentication Protocols
Encryption
Weak Keys
Mathematical Attacks
Birthday Attack
Password Guessing
SAM and System Files
Demo – Password Cracking

Topic C: Authentication Systems
Preventing Impersonation
Identity Proofing
Single Sign-on
Kerberos
Kerberos System Composed Of
Kerberos Data Types
Kerberos Authentication Process
Cross-realm Authentication
Kerberos Security Weaknesses
CHAP
PAP
EAP
Mutual Authentication
Unit 03 Review

Unit 04 – Messaging Security

Topic A: E-mail Security
E-mail Vulnerabilities
Spam
Hoaxes and Chain Letters
Hoax – Company Reputation Issue
Phishing
Hoax Countermeasures
SMTP Open Relays
E-mail Server Security
Demo – Configure Security on Email Server
Secure E-mail
Encryption
Hash Function
PGP Symmetric Encryption Methods
PGP Certificates
S/MIME
X.509 Certificates
X.509 Certificate Content
S/MIME Trust Model
PGP and S/MIME Differences
To Install and Configure PGP
Restricting Permissions to Messages
Sending Restricted Messages
Digitally Signed Message
Demo – Digital Signatures
Encrypting Messages

Topic B: Messaging and Peer-to-peer Security
Instant Messaging
IM Risks
Cell Phone SMS
Blocking IM
Corporate IM
Intrusion Detection
Packet Sniffing
Additional IM Features
IM Client Security
Legal Issues
Demo – Configure IM Client Security
Unit 04 Review

Unit 05 – User and Role Based Security

Topic A: Security Policies
Group Policy Settings
Local GPO Types
GPO Editor
Local Computer GPO Nodes
Policy Properties Dialog Box
Demo – Creating Console to Manage Local Security Policies
Container Types
Types of Domain GPOs
GPOs Applied in this Order
Demo – GPMC
Windows Applications Configured with Group Policies might Include
Device Installation Policy Settings
Internet Explorer 7 Policy Settings
IE8 Features
Demo – Implementing GPOs
Security Templates
Windows Vista Security Guide Templates
Demo – Analyzing Windows Vista Computer Security

Topic B: Securing File and Print Resources
File and Print Security
Groups
Demo – Groups
File System Security
Permissions
Demo – Permissions
Access Control Models
Printer Permissions
Demo – Securing Printer Resources
Unit 05 Review

Unit 06 – Public Key Infrastructure

Topic A: Key Management and Life Cycle
Management
Setup and Initialization Phase
Administration Phase
Cancellation and History Phase
Administrative Responsibilities

Topic B: Setting up a Certificate Server
Microsoft Certificate Services
AD Integration Options
CA Role
Demo – Installing Stand Alone Root Certificate Authority
Demo – Installing Enterprise Subordinate CA
Demo – Implementing File Based Requests
Demo – Managing Your Certificate Server
User Certificates
Demo – Requesting User Certificate
Certificate Revocation
Demo – Revoking a Certificate
Key Escrow and Recovery
Key Recovery Agents
Demo – Enabling EFS Recovery Agent Template
Demo – Enrolling Recovery Agent Certificate
Demo – Enabling Key Archival
Demo – Re-enrolling All Certificates

Topic C: Web Server Security with PKI
Secure Web Servers
Commercial Certificate
Demo – Requesting and Installing Web Server Certificate
Demo – Enabling SSL for Certificate Server Web Site
HTTPS Connections
Demo – Certificate Requests over the Web
Unit 06 Review

Unit 07 – Access Security

Topic A: Biometric Systems
Biometric Devices

Topic B: Physical Access Security
Physical Access Security Protects
Protection
Locks
Other Physical Security Measures
Surveillance
Logging

Topic C: Peripheral and Component Security
Vulnerable Peripherals
Securing Peripherals
Demo – Mitigating Security Risks of Peripherals

Topic D: Storage Device Security
File Encryption
Demo – File Encryption
Whole Disk Encryption
BitLocker Hardware Requirements
BitLocker Authentication Modes
BitLocker Life Cycle
BitLocker Recovery
Unit 07 Review

Unit 08 – Ports and Protocols

Topic A: TCP/IP Review
Internet Protocol Suite
IPv4 Classes
IP Classes by Binary
IPv4 Header
CIDR and NAT
IPv6 Header
IPv6 Scopes
IPv6 Address Types
Demo – Looking at Addressing

Topic B: Protocol-based Attacks
DoS Attacks
TCP 3-way Handshake
SYN Flood Defense
Smurf Attack
Ping of Death Attacks
Demo – Syn Flood Protect
DDoS Attacks
DDoS Attack Protection
Man-in-the-middle Attacks
Spoofing
IP Address Spoofing
Demo – Port Scanning
ARP Poisoning
Demo – Checking the Arp Cache
Spoofing Attacks
Replay Attacks
TCP/IP Hijacking
Unit 08 Review

Unit 09 – Network Security

Topic A: Common Network Devices
OSI Reference Model
Repeaters| Hubs| Switches
Switch Security
Routers
Route Selection
Router State Management
NAT/PAT
Port Address Translation
Firewalls and Proxies
Firewall Categories
Security Issues
Overcoming Weaknesses

Topic B: Secure Network Topologies
Security Zones
Intranet Zone
Perimeter Network
DMZ Options
Screened Host
Bastion Host
Three-homed Firewall
Back-to-back Firewall
Dead Zone
Traffic Filtering
IPSec Encryption

Topic C: Browser-related Network Security
Browser Security
Phishing Filter
Security Zones
Levels Per Zone
Custom Security Settings
Security Settings
Cookies
Demo – IE Configuration

Topic D: Virtualization
Virtual Computers
Citrix XenServer
Unit 09 Review

Unit 10 – Wireless Security

Topic A: Wi-Fi Network Security
802.11 Standard
802.11 Family
802.11 Networking
Wireless Security
Wireless Vulnerabilities
Wi-Fi Scanners
Warchalking Symbols
Router Software
Configuration Options
Transmission Encryption
Demo – WAP

Topic B: Non-PC Wireless Devices
Mobile Device Security
Infrastructure Issues
Unit 10 Review

Unit 11 – Remote Access Security

Topic A: Remote Access
AAA
RADIUS
RADIUS Authentication
Realms
RADIUS Security
RADIUS Benefits
Diameter
Diameter Improvements
LDAP and Remote Access
LDAP Security
LDAP Authentication/Authorization
TACACS+
TACACS+ versus RADIUS
802.1x
Network Policy Server (NPS)
Demo – Installing Network Policy and Access Services
Demo – Configuring an NPS Network Policy
Demo – Configuring NPS Accounting

Topic B: Virtual Private Networks
Virtual Private Networks
VPN Technologies
VPN Security Models
VPN Protocols
PPTP versus L2TP
IPsec Protocols
Encryption Modes
Secure Shell (SSH)
VPN Solutions
Demo – Installing Routing and Remote Access Services
Demo – Enabling VPN
Demo – Configuring NPS to Provide RADIUS Authentication
Service Provider Tunneling
Demo – Making a VPN Connection
Unit 11 Review

Unit 12 – Auditing| Logging| and Monitoring

Topic A: System Logging
Event Viewer
Windows Server 2008 Event Viewer
Events
Event Types
Event Details
Demo – Viewing Event Logs
Device and Application Logging

Topic B: Server Monitoring
Monitoring
Reliability and Performance
Performance Monitor
Counters and Objects
Demo – Performance Monitor
Data Collector Sets
Viewing DCS Reports
Demo – Data Collector Sets
Auditing
Policies and Human Factors
Unit 12 Review

Unit 13 – Vulnerability Testing

Topic A: Risk and Vulnerability Assessment
Risk Analysis
OS Hardening
MBSA
Demo – MBSA
Vulnerability Scanners
Penetration Testing
OVAL
OVAL Scan Report
Demo – OVAL
Nessus
Nessus Scan Report
Demo – Nessus

Topic B: IDS and IPS
Intrusion Detection
Events
NIDS
IDScenter for Snort
Example Snort Rule
Demo – Installing and Monitoring with Snort IDS
HIDS
HIDS Advantages over NIDS
Honeypots
Honeypot Examples
Honeypot Deployment

Topic C: Forensics
Computer Forensics
Evidence Gathering Principles
Chain of Custody
Unit 13 Review

Unit 14 – Organizational Security

Topic A: Organizational Policies
Security Policy Content
Acceptable Use
Due Care
Privacy
Separation of Duties
Need to Know
Password Management
Service Level Agreements
Disposal and Destruction
Human Resource Policies
Hiring
Employee Review and Maintenance
Post-employment
Code of Ethics
Incident Response Policy
Incident Response Policy Includes
Preparation
Detection
Containment
Eradication
Recovery
Follow-up
Change Management
Change Documentation

Topic B: Education and Training
Education
Communication
User Awareness
Types of Training

Topic C: Disposal and Destruction
Disposal of Electronics
Disposal of Computer Equipment
Data Security and Destruction
Unit 14 Review

Unit 15 – Business Continuity

Topic A: Redundancy Planning
RAID Levels
Nested RAID
Utility Services
Alternate Sites
Disaster or Service Failure
Disaster Recovery Plan Documents
Threats
Disaster Recovery Team
Business Impact Assessment
Contingency Plan
Documentation

Topic B: Backups
Backup Frequency
Backup Tools
Backup Types
Backup Media
Backup Storage
Data Restoration
Demo – Backup
Windows Recovery Environment
Grandfather Method
Tower of Hanoi
Incremented Media Backup
Backup Storage

Topic C: Environmental Controls
Fire Extinguisher Classes
Fire Extinguisher Contents
Extinguisher Label
Safety Guidelines
Unit 15 Review
Course Closure

More on Online Training
 

PACKAGE INCLUDES

70-270 Windows XP Professional Training
70-290 Managing and Maintaining Windows Server 2003
70-291 Implementing and Maintaining Windows 2003 Infrastructure
70-293 Planning and Maintaining Windows 2003 Infrastructure
70-294 Planning and Implementing Windows 2003 Active Directory
70-298 Designing Security for Windows 2003 Network
70-299 Implementing Security in Windows 2003 Network
CompTIA Security+ 2008

...PLUS FREE: MCITP Server 2008 Administrator Training

 •  10 Multimedia Training DVD-ROMs featuring live instructor-led classroom sessions
        with full audio| video and demonstration components
 •  Covers MCSE 2003 Security certification exams 70-270| 70-290| 70-291| 70-293|
        70-294| 70-298| 70-299 & Security+ 2007
 •  8 Microsoft Authorized MeasureUp ExamSims Click for Details
 •  Hands-on Lab Simulations with detailed instructions.
 •  Testing Modules to insure that you fully understand the subject matter.
 •  Printable Courseware in PDF Format.
 •  Exclusive LearningZone Live Mentor Click for Details
        Help whenever you need it! - Why wait for email support?
        Chat Live with our Certified Instructors anytime around the clock (24x7)
 •  Interactive chat sessions and course assignments
 •  Proven technique - Actual Exam Secrets Review

Special Offer: Purchase any MCSE Training programs and you will receive our latest release of MCITP : Server Administrator  Limited Time Offer!


 

COURSE INTRODUCTION

Schedule our instructor led classroom training at your convenience and never misses another lecture or fall behind. You are in complete control. We invited the Best Microsoft and Cisco Certified Trainers in the industry to help us develop the ultimate training and certification program which includes everything you will need to fully prepare for and pass your certification exams.

Earn the Microsoft Certified Systems Engineer (MCSE) certification. Prove your expertise in designing and implementing the infrastructure for business solutions. Training is based on the Microsoft Windows 2003 platform and Microsoft Windows Server System.


 

How to Earn Your MCSE Security on Microsoft
Windows Server 2003 Certification

Candidates of MCSE Security on Windows 2003 must complete
their certifications with:

 •  Four Windows 2003 Core Networking Operating System Exams
 •  One MCSE Client System Exam
 •  One MCSE Elective Exam
 •  Two Core Security Exams

COURSE OUTLINE

The following Courses are included in our MCSE 2003 Messaging Certification Training Course. Please click on the Individual Courses below for more information on contents| course outlines and individual course prices
 

 •  Core Exams: Networking Systems (Four Exams Required)

• Exam 70-290: Managing and Maintaining a Microsoft Windows Server 2003 Environment - 5 Interactive CD-ROMs| Microsoft Authorized MeasureUp ExamSim| Printable Courseware & more.
   
• Exam 70-291: Implementing| Managing| and Maintaining a Microsoft Windows Server 2003 Network Infrastructure - 5 Interactive CD-ROMs| Microsoft Authorized MeasureUp ExamSim| Printable Courseware & more.
   
• Exam 70-293: Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure - 5 Interactive CD-ROMs| Microsoft Authorized MeasureUp ExamSim| Printable Courseware & more.
   
• Exam 70-294: Planning| Implementing| and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure - 5 Interactive CD-ROMs| Microsoft Authorized MeasureUp ExamSim| Printable Courseware & more.

 •  MCSE Client Operating System Exam (One Exam Required)

• Exam 70-270: Installing| Configuring| and Administering Microsoft Windows XP Professional - 5 Interactive CD-ROMs| Microsoft Authorized MeasureUp ExamSim| Printable Courseware & more.

 •   MCSE Design Exam (One Exam Required)

• Exam 70-297: Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure - 3 Interactive CD-ROMs| Microsoft Authorized MeasureUp ExamSim| Printable Courseware & more.

 •   MCSE Security Exams (Two Exam Required)

• Exam 70-299: Implementing and Administering Security in a Microsoft Windows Server 2003 Network - 5 Interactive CD-ROMs| Microsoft Authorized MeasureUp ExamSim| Printable Courseware & more.
   
• CompTIA Security+ 2008: - 5 Interactive CD-ROMs| Microsoft Authorized MeasureUp ExamSim| Printable Courseware & more.

SPECIAL FEATURES OF OUR TRAINING COURSES

	Comprehensive Menu Structure  Move through hours of in-depth content - quickly and easily with the time saving Main Menu and Sub-Menu structure. Search for a specific topic or go through the course step by step. The choice is yours.
	Player Controls Move forward or back| repeat entire topics or just a section. A progress bar illuminates as you advance through the video tutorials and exercises. Play| pause rewind| fast forward or stop at any time
	Continue Where You Left Off  All courses are resumed to where you left off last session allowing you to learn when it is convenient for you without the hassle of remembering where you were.
	Full Motion Video and Audio  All courses feature full-motion videos of instructors teaching the information as if they are speaking directly to you. Our unique delivery simulates a one-on-one classroom environment creating a more personal lesson and learning experience.
	Printable Study Guides Printable study guides for the entire course are included. This allows all material to be viewed| reviewed| and printed for viewing at a later date.
	Review Exercises Each section has a review quiz to aid in the learning process by validating the comprehension of the material covered before moving on to a new section.
	24/7 Online Tutor Support Train around the clock| around the world. Our certified online instructors are located at global support centers in the U.S.| U.K.| Australia| and Singapore to provide real-time answers to technology- and soft-skill-related questions 24x7. This means access to a live subject matter expert no matter where you are - day or night. This level of student/instructor interaction provides real-time training specific support and extends training beyond content and instructor-led solutions by providing flexibility to accommodate individual needs and schedules.
	Authorised Practice Exams We include an Online Subscription to Authorised Practice Exams from Certified Practice Test Providers to fully prepare you for the certification exams. Take the Practice Exams as many times as needed until you are 100% confident of passing the Certification Exam.
	Live Demonstrations Demonstrations are a way for the instructor to show and tell the user how to perform a task by actually doing it on screen in front of them. In this format it gives the user the power to see things done by a professional in the intended environment as many times as they would like.
	Interactive Labs This course features cutting-edge| interactive labs| which provide a hands-on learning experience. This environment allows you to interact with the software without the need for purchasing it or having it installed on your computer.
	PowerPoint Presentations  Utilizing PowerPoint presentations enhances the delivery by displaying a variety of visual information to the user. This type of representation allows the user to better interpret the material through charts| definitions| graphs| and more...
	Multi-User Licencing  All of our courses can be purchased with a standard Single User Licence| Multi User Library Licence or a Network Licence. Please contact us for more information and prices.
	Certificate of Completion  Our Training Courses are recognized worldwide for their technology-based IT training curriculums. Upon successful completion of our program| you will be receiving a CareerVision Distance Education Certificate of Completion.

“

“