ASPE Technology Training Information: Hands-On Network Security Administration

Find IT training and SDLC training by State

click the map, enter a zip,
or course keyword to find
our current public sessions


	About ASPE Technology \| Get Credit \| Contact Us \| Testimonials \| Client List


	For real-time information or assistance with classes, call us toll-free at 877-800-5221 or email us at customerservice@aspetech.com.



	COURSE 625 \| 2-DAY SESSION Hands-On Network Security Administration Course Outline Section 1: Threats, Risks, and Vulnerabilities Learn what you should be concerned about and what should be highest priority. In security, it’s a balance between the value of what you’re trying to protect and the cost of protecting it. You’ll learn how security is as much risk mitigation and strategic planning as it is the deployment of security technology. Organizational threats Natural (ie flood, fire, and storms) Man-made Hackers, crackers, and malicious users What's at risk? Confidentiality Integrity Availability Network and system vulnerabilities Insecure applications Down-level software Buffer overflows DoS Poorly protected systems Section 2: Authentication, Authorization, and Accountability Administering a Triple A solution is a critical part of your security plan. You must understand why authentication, authorization and accountability are vital. Building Strong Authentication Something you know Something you have Something you are Authorization and its Failures Default settings Weak passwords Hijacking ARP and DNS poisoning Authorization and Authentication Systems Kerberos TACACS RADIUS Accountability What to log Where to log How long to keep logs Importance of log review Section 3: Security Assessments Assessments can be a paper-based analysis of your systems and the cost/benefit of protecting those systems or they can be penetration tests utilizing ethical hacking tools and techniques. There is a time and a place for both types. Learn how to properly plan, execute and report on Security Assessments. Who Poses the Largest Threat? Insiders Outsiders What to Protect High Value Data (HVD) Assessment Types Policy review Vulnerability scans Ethical hacking Legal issues Who should approve the assessment? Due diligence Federal law Who to contact in case of attack Other issues Timing Network impact Frequency Section 4: Security Policy Your security policy is the foundation upon which all security solutions are built. Security policies have a tendency to focus on possibilities instead of the realities of an existing environment. Understand how to develop your policy, and how to make it work. Policies, procedures, guidelines Policy design Deny all/allow all Employee controls Separation of duties, dual controls, job rotation Policy lifecycle Common services to consider Security controls Firewalls IDS systems Incident response planning Procedures Process Response Section 5: Firewalls Firewall administration is a critical element of security. It’s currently the number one tool companies use to protect themselves from unauthorized access. There are many types of firewall applications and configurations, as well as multiple-solution strategies. Get real-world experience deploying and administering firewalls in different network topologies. Description and types Packet filters Proxy servers Stateful inspection Deployment strategies Bastion host DMZ Multilayer Content filtering Firewall products Dragon, PIX, etc. Section 6: Intrusion Detection Did someone enter your network? Where did they come from? What did they get to? These are some of the questions an IDS capability answers. Get experience setting up, configuring and managing IDS systems. Description and types Signature-based systems Anomaly-based systems IDS deployment options Host-based IDS Network-based IDS IDS operation IDS rule sets Section 7: Cryptography Using any standard protocol analyzer, messages sent cleartext can easily be picked off and the entire contents viewed. Cryptography enables electronic messages to be encrypted in transport, making it impossible to view contents without breaking the encryption algorithm. 128Bit has become the standard. Get hands-on experience working with PGP, and learn how to deploy VPNs, SSL, and IPSec. Why Cryptography Symmetric Encryption Asymmetric Encryption Digital Signatures Hashing PKI Cryptographic Solutions PGP SSL IPSec VPNs Section 8: Current Concerns, Exploits, & Controls With exploits increasing exponentially and new technologies such as VoIP and Wireless rolling out faster every year, it’s crucial to have the most current information available. That’s what this continually-updated final section is all about. Current concerns and exploits Spyware Viruses Worms Wireless hacks and attacks Assessing vulnerabilities Wireless network defense Internet hacks VoIP Controls Patch management HANDS-ON LABS You must bring your laptop to participate in the labs. Lab 1: Hacker tools and techniques - Students will practice hacker methodology to find and identify potential targets. Use scanning tools such as NMap & Superscan and identify vulnerable ports and protocols. Learn NetCat grab banners and enumerate hosts. Lab 2: AAA - Students explore password cracking to learn how attackers easily exploit weak passwords. Instructor will demo advanced biometric authentication devices used for network security. Lab 3: Security assessment - Students will use the latest vulnerability assessment tools to learn how to scan their networks and pinpoint potential weaknesses. Lab 4: Security policy - This lab introduces design of security policy. Students will identify what services, protocols, and applications to use to build their policy. Lab 5: Firewalls - Explore open-source firewalls and learn how you can successfully deploy a firewall to secure your network. Lab 6: IDS - Students will identify the proper placement of IDS devices and install, configure, and test Snort IDS on Linux or Windows computers. Lab 7: Cryptography - Students install PGP, learn to lock files, encrypt email, and digitally sign messages.