ASM Educational Center (ASM) Est Authorized SCNP Security Certified Network Professional Boot Camp

Size: px

Start display at page:

Download "ASM Educational Center (ASM) Est Authorized SCNP Security Certified Network Professional Boot Camp"

Nickolas Davidson
5 years ago
Views:

1 ASM Educatinal Center (ASM) Est Rckville Pike, Suite 220 Rckville, MD Phne: Fax: Web: Authrized SCNP Security Certified Netwrk Prfessinal Bt Camp Curse Outline LESSON 1: CRYPTOGRAPHY AND DATA SECURITY Histry f Cryptgraphy Math and Algrithms Private Key Exchange Public Key Exchange Message Authenticatin Linux Filesystem and Navigatin General Secure System Management User and Filesystem Security Administratin Netwrk Interface Cnfiguratin Security Scripting Useful Linux Security Tls Using Histrical Crypt Systems Plybius Cryptgraphy Installatin f CrypTl Classical Encryptin Analysis DES ECB and CBC Analysis Private Key Exchange Finding Diffie-Hellman Public Keys Perfrming RSA Encryptin and Decryptin Create Yur RSA Key Pair Creating RSA Keys Encrypting and Decrypting with RSA Cracking an RSA Encrypted Message Encryptin as Authenticatin LESSON 2: HARDENING LINUX COMPUTERS Linux Filesystem and Navigatin General Secure System Management User and Filesystem Security Administratin Netwrk Interface Cnfiguratin Security Scripting Useful Linux Security Tls Prepared by ASM Educatinal Center (ASM). All Rights Reserved. Page 1 f 6

2 ASM Educatinal Center (ASM) Est Rckville Pike, Suite 220 Rckville, MD Phne: Fax: Web: Navigating in Linux Explring Man Pages Explring YaST Viewing System Infrmatin Mdifying Prcess Behavir Passwrd Prtectin f Linux Startup Stpping Unneeded Services Mdifying Prcess Runlevels Munting a Device Installing Webmin with RPM Installing Jhn the Ripper frm Surce Cde Archive Updating yur system with YOU (Yast Online Update) Tl Creating and Mdifying Users and Grups Changing User Cntexts with su Viewing the Passwrd Files Managing Passwrds Viewing File Details Creating Object Ownerships Assigning Permissins Verifying Permissins Cnfiguring umask Settings Using PAM with vsftpd Lgging Recent Lgin Activity Cnfiguring netwrk interfaces Managing Telnet with Xinetd Cntrlling Access with TCP Wrappers Demnstratin f the Vulnerabilities f FTP and Telnet Cnfiguring an SSH Server Cnfiguring an SSH Client Preventing rt SSH lgins by Mdifying the sshd_cnfig File Using SCP t Securely Transfer Files Sharing Data with NFS Verifying Exprt Permissins Cnfiguring the Samba Server I/O Redirectin Demnstratin f vi and emacs Writing simple shell scripts Installing and Explring Bastille Starting Tripwire LESSON 3: HARDENING WINDOWS SERVER 2003 Windws 2003 Infrastructure Security Windws 2003 Authenticatin Windws 2003 Security Cnfiguratin Tls Windws 2003 Resurce Security Windws 2003 Auditing and Lgging Windws 2003 EFS Windws 2003 Netwrk Security Cnfiguring a Custm MMC and GPO Editing a GPO Prepared by ASM Educatinal Center (ASM). All Rights Reserved. Page 2 f 6

3 ASM Educatinal Center (ASM) Est Rckville Pike, Suite 220 Rckville, MD Phne: Fax: Web: Implementing Multiple GPOs Cnfiguring NTLMv2 Authenticatin Securing Administratr Accunt Access Testing Administrative Access Verifying Passwrd Requirements Analyzing Default Passwrd Settings f Security Templates Creating a Custm Security Template Investigating the Security Cnfiguratin and Analysis Snap-In Implementing the Template Analyzing the Current Security Settings f the Lcal System Cmprmising NTFS Security Setting Registry Permissins Exprting Registry Infrmatin Blcking Registry Access Installing Security Cnfiguratin Wizard Using the Security Cnfiguratin Wizard Enabling Auditing Lgging SAM Registry Access Viewing the Registry Audit Creating Events Viewing Event Lgs Encrypting Files Investigating Printer Spler Security Cnfiguring TCP/IP in the Registry Cnfiguring Prt and Prtcl Filtering Enabling Windws Firewall Cnfiguring Windws Firewall Cnfigure Server 2003 LESSON 4: ATTACK TECHNIQUES Netwrk Recnnaissance Mapping the Netwrk Sweeping the Netwrk Scanning the Netwrk Vulnerability Scanning Viruses, Wrms, and Trjan Hrses Gaining Cntrl Over the System Recrding Keystrkes Cracking Encrypted Passwrds Revealing Hidden Passwrds Scial Engineering Gaining Unauthrized Access Hiding Evidence f an Attack Perfrming a Denial f Service Using Windws Tracing Tls Using VisualRute Using SuperScan Installing Linux Tls Using Nmap Using SuperScan Prepared by ASM Educatinal Center (ASM). All Rights Reserved. Page 3 f 6

4 ASM Educatinal Center (ASM) Est Rckville Pike, Suite 220 Rckville, MD Phne: Fax: Web: Using nmap t Identify an Operating System Using nmap Frnt End Installing Nessus Cnfiguring Nessus Scan Custm Nessus Scanning Netwrk Scanning Windws t Windws Netcat Linux t Windws Netcat Using Sftware Keystrke Lgging Using a Keystrke-lgging Keybard Installing LCP Creating User Accunts Cracking Passwrds With LCP Revealing Hidden Passwrds Discussing Scial Engineering Examples Reviewing the Scial Engineering Case Study Flding with Udpfld LESSON 5: SECURITY ON THE INTERNET AND THE WWW Describing the Majr Cmpnents f the Internet Securing DNS Services Describing Web Hacking Techniques Defining Internet Cmpnents Identifying Weak Pints f the Internet Famus Majr Disruptins Installing a DNS Server n Windws Server 2003 Creating a Primary Reverse Lkup Znes Creating a Primary Frward Lkup Zne Creating A and PTR Recrds in the DNS Enabling Zne Transfers Reviewing Pllutin and Recursin Settings Creating Secndary Znes Filtering the Interface t Accept Only DNS Traffic Creating an Active Directry Integrated Zne Setting up a Stub Zne Identifying Web Hacking Techniques Installing IIS 6.0 Implementing a Website Starting and Stpping the Web Server Investigating IIS Security Cntrlling Perfrmance Settings Cntrlling the Hme Directry Settings Cntrlling Access Settings Installing the MBSA Scanning a System Lking fr Vulnerabilities Applying a Patch t Mitigate an IIS 6.0 Vulnerability Installing Apache 2.x n Suse Linux 10.0 Basic Cnfiguring f the Apache Web Server Securing yur Apache Web Server Installing Patches Securing yur Apache Web Server Disabling Mdules Prepared by ASM Educatinal Center (ASM). All Rights Reserved. Page 4 f 6

5 ASM Educatinal Center (ASM) Est Rckville Pike, Suite 220 Rckville, MD Phne: Fax: Web: Identifying User Vulnerabilities and Internet Security Installing Internet Explrer 7 Viewing the General Settings fr Yur Brwser Viewing the Advanced Settings fr Yur Brwser Viewing the Zne Settings fr Yur Brwser Implementing Default Security Levels fr Znes Viewing Detailed Settings fr the Security Level Lw Viewing Detailed Settings fr the Security Level High Adding Sites t a Zne Viewing Ckie Handling Settings Viewing Cntent Ratings Prperties f the Certificates Sectin Viewing the Handling f Persnal Infrmatin by a Brwser Dealing with Pp-ups Basic Security Settings t Take Care f With Yur Client LESSON 6: PERFORMING A RISK ANALYSIS Cncepts f Risk Analysis Methds f Risk Analysis The Prcess f Risk Analysis Techniques t Minimize Risk Cntinuus Risk Assessment Defining Risks and Threats fr ABC, Inc Perfrming Risk Analysis fr ABC, Inc. Defining Risk Analysis Rles fr ABC, Inc Minimizing the Risk f ABC, Inc Investigating Cntinual Risk Assessment fr ABC, Inc LESSON 7: CREATING A SECURITY POLICY Cncepts f Security Plicies Plicy Design Plicy Cntents An Example Plicy Incident Handling and Escalatin Prcedures Partner Plicies Task 7A-1 Defining the Benefits f a Security Plicy fr ABC, Inc Designing a Security Plicy fr ABC, Inc Creating a Physical Security Plicy fr ABC, Inc Creating an Acceptable Use Statement fr ABC, Inc Describing Escalatin Prcedures fr ABC, Inc Creating the ABC, Inc. Partner Plicy LESSON 8: ANALYZING PACKET SIGNATURES Signature Analysis Cmmn Vulnerabilities and Expsures (CVE) Signatures Nrmal Traffic Signatures Abnrmal Traffic Signatures Prepared by ASM Educatinal Center (ASM). All Rights Reserved. Page 5 f 6

6 ASM Educatinal Center (ASM) Est Rckville Pike, Suite 220 Rckville, MD Phne: Fax: Web: Investigating CVE Benefits Discussing IP Spfing Analyzing FTP Signatures Analyzing a Trjan Hrse Scan Prepared by ASM Educatinal Center (ASM). All Rights Reserved. Page 6 f 6

Strategic Infrastructure Security

Strategic Infrastructure Security Course Number: SCPSIS Length: Certification Exam There are no exams currently associated with this course. Course Overview This course picks up right where Tactical Perimeter