Difference between revisions of "GainCloud Advanced Security Training"

<div style="width: 160px; padding-left: 20px; text-align: center;"><a style="text-decoration: none;" href="https://www.gaincloud.com/share/viewshare.do?mainsharecode=MS6021021"> <img src="https://www.gaincloud.com/my/htdocs/images/folder_blue_stuffed.png" alt="Cloud based Secure Online Private Share Folder For Software" /> <br /><strong>Training Material eShare</strong></a></div>

<p><span style="font-size: small;"><br /><span style="text-decoration: underline;"><strong>Total Instruction Hours:</strong></span><br />21 hours of Classroom Instructions<br />30 hours of Hands-on Lab<br />9 hours of Testing (in 9 separate Tests)<br />===============================================<br />Net total is 60 hours of curriculum<br />===============================================</span></p>

<p>&nbsp;</p>

<p><span style="font-size: small;">(3 Hour) [CLASS] Introduction to networks security<br />&nbsp;&nbsp;&nbsp; &nbsp;- Network Concepts <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; IPV4, Device ID, Network cards - hard/soft<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Authentication Factors <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Authentication &amp; Authorization<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; New Authentication Systems <br /><br />(3 Hour) [CLASS] Infrastructure Security<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Context Aware Firewalls (ASA)<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Policy Management <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Object Definition and ACL Management (ASA)<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Infrastructure &amp; Security Protocols<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Enterprise Security Products (PDF and Notes)<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Perimeter Security<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; In-Network Security<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; DNS Security is Corporate #1 Priority<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Identity Management <br /></span></p>

<p><span style="font-size: small;"><br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - LDAP and Directory Management<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Traditional data storage Vs. Tree structure<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Caching Vs Searching<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Profiling Vs Tabulation<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Active Directory and other common LDAP vendors<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Virtual and Meta<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />===================================================================================================================================<br />&nbsp;&nbsp;&nbsp; <br /><span style="font-size: small;">(3 Hour) </span>[CLASS] Security Management<br /></span></p>

<p><span style="font-size: small;"><span style="font-size: small;">&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Intrusion Prevention<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - All are based on behaviour analysis<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Detection<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - VPN - <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; IPSec Vs SSL<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; RADIUS<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Site-to-Site VPNs<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Wireless Security <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; WEP Vs WPA Vs WPA2<br /></span>&nbsp;&nbsp;&nbsp; <span style="font-size: small;">&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Vulnerability Analysis<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Using existing tools<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Without using any software tools</span></span></p>

<p><span style="font-size: small;"><span style="font-size: small;">&nbsp;</span><br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Security Policies<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Corporate Security Policies<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Hackers Hat - breaking corporate security code<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Endpoint Assessments<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Enabling Intrusion Prevention System (IPS)<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Best Practices - Cyber-Security<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Traditional Hacking Techniques<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Monitor telemetry data<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Event Coorelation for alarms<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Risk Analysis and Mitigation<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Review malware signatures<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Viruses &amp; Worms<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Network Trace gathering and analysis<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Review common hacking techniques and kits<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Backdoor<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Botnets<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; DoS and DDoS<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Tunnel Attacks<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br /><span style="font-size: small;">(3 Hour) </span>[CLASS] Leading Companies and Leading Products - how-to-use, why-to-use, where-to-apply<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Top 3 Products - in-depth<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; 1: - QQ<br /><br /><span style="font-size: small;">(3 Hour) </span>Identification:<br />&nbsp;&nbsp;&nbsp; &gt; 3-[CLASS] Network analysis and deep-dives<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Identify Compromised System<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Isolate Zombie<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Stopping malware<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br /><span style="font-size: small;">(3 Hour) </span>-[CLASS] Intrusion signatures &amp; footprints<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Signature Analysis<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - P32/PDOM screenshots<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - RootKits<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; 1: - QQ<br /><br /><span style="font-size: small;">(3 Hour) </span>[LAB] Prevention - Perimeter Security<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Introduction<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - PKI - Create cert, sign them, install them, trust them and external providers<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br /><span style="font-size: small;">(3 Hour) </span>[CLASS] Firewalls &amp; Rulesets<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - ACE, ACL, ACI<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - LDAP and Directory Infrastructure<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; 1: - QQ<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br /><span style="font-size: small;">(3 Hour) </span>[LAB] Adaptive Security<br />&nbsp;&nbsp;&nbsp;&nbsp; &gt;&gt; Introduction to Software based security:<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt; Clamscan, Bayes Algo, Other softwares<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt; IPtables<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt; Software firewal of Linux<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt; Hardening Kernel and Linux services<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; 1: - QQ<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br /><span style="font-size: small;">(3 Hour)&nbsp; </span>Hardware based security<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt; IPS<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt; Firewall<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt; Shun Hosts<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; 1: - QQ<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;<br /><br /><span style="font-size: small;">(3 Hour) </span>[CLASS] <span style="font-size: small;">Offensive Network Design: </span>Network<br />&nbsp;&nbsp;&nbsp; - Review existing network<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Interview Customer - questions to ask - checklist<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Checklist for Table Of Obervation - recording<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Security checklist for implementation<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Master Checklist for design analysis<br />&nbsp;&nbsp;&nbsp; - Review current architecture<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; First create your proposed topology and artifacts<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Peer review of topo<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Oversight review &amp; Risk Assessment<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; DR and BCP requirements<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt;&gt; Customer Approval &amp; Signoff<br />&nbsp;&nbsp;&nbsp; 1: - QQ<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; <br /><span style="font-size: small;"><span style="font-size: small;">(9 Hour)&nbsp; </span></span>[LAB] Appliance Setup <br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1: - Prereq's - Before you begin<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2: - Juniper entry point appliance - SS5<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2: - Cisco entry point appliance - ASA 5505<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2: - Netgear entry point appliance - FVS 318<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2: - IPSec VPN end-to-end setup and configuration<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1: - QQ<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br /><span style="font-size: small;"><span style="font-size: small;"><span style="font-size: small;">(3 Hour) </span></span></span>[LAB] Active Monitoing Setup<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; - Introduction to Netflow Vs. SNMP<br />&nbsp;&nbsp;&nbsp; - Monitoring Web Servers<br />&nbsp;&nbsp;&nbsp; - Monitoring DNS Servers<br />&nbsp;&nbsp;&nbsp; - Monitoring IMAP Servers (Dovecot)<br />&nbsp;&nbsp;&nbsp; - Monitoring Email Gateway (Postfix)<br />&nbsp;&nbsp;&nbsp; - Monitoring from external service providers - pingdom<br />&nbsp;&nbsp;&nbsp; 1: - QQ<br /><br /><span style="font-size: small;"><span style="font-size: small;"><span style="font-size: small;"><span style="font-size: small;">(4 Hour) </span></span></span></span>[LAB] Active Response Management<br />&nbsp;&nbsp;&nbsp; - Firewall based Block Rules<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt; Single IP<br />&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &gt; Entire Subnet<br />&nbsp;&nbsp;&nbsp; - Reporting Abusive Originating IPs<br />&nbsp;&nbsp;&nbsp; - Blacklist and Backscatterers<br />&nbsp;&nbsp;&nbsp; - Load Balancing Services<br />&nbsp;&nbsp;&nbsp; - Failover Services<br />&nbsp;&nbsp;&nbsp; 1: - QQ<br /><br />========================================================================<br /><br /><br /></span></p>