Syllabus: The syllabus is broadly structured as follows:

Syllabus: The syllabus is broadly structured as follows:

SR. NO. TOPICS SUBTOPICS 1 Foundations of Network Security Principles of Network Security Network Security Terminologies Network Security and Data Availability Components of Network Security Network Security Policies 2 Advanced TCP/IP TCP/IP Concepts Subnet Masks Variable Length Subnet Masks Unicast,Broadcast and Multiple Concepts The Three way Handshake The Process of DHCP and APIPA Internet Protocol version 6 3 IP Packet Structure and Analysis Capture and Identify IP Datagrams Capture and Identify ICMP Messages Capture and Identify TCP Headers Capture and Identify UDP Headers Packet Fragmentation The Three way Handshake 4 Routing and Access Control Lists Arp Process Cisco Routing Modes Routing Process Routing Tables Access Control Lists Implement Access Control Lists Limitations DNS and Its Role 5 Securing Windows Windows NT 4.0 Fundamental Security

Windows NT Resource Security Windows 2000 Infrastructure Windows 2000 Authentication Windows 2000 User and Group Security Windows 2000 Resource Security Windows 2000 Network Security 6 Securing Linux Key Concepts Linux Administration and Security Key Linux Network Files Key Linux Network Process Key Linux Network Commands Hardening Linux Network File System and Linux Network Information Service and Linux 7 Security on the Internet and Wor ld Wide Web Components of Internet Weak Points of Internet Techniques of Web Hacking Methods of Attacking Users 8 Attack Techniques Network Reconnaissance Mapping and sweeping the Network Scanning the Network Viruses, Worms and Trojan Horses Gaining Control on Systems Record Keystrokes Crack Encrypted Passwords Reveal Hidden Passwords

Case Study Social Engineering Gain Unauthorised Access Hide evidence of Attack Perform a Denial of Service attack 9 Network Defense Fundamentals Concepts, & Key Issues Identify Defensive Technologies Objectives of Access Control Identify Impact of Defense Concepts of Network Auditing 10 Designing and Configuring Firew all Systems Firewall Components Creating a FW Policy Rule Sets and Packet Filters Proxy Server Bastion Host and Honey pot FW Implementation Practices Installing and Configuring FW Monitor FW Installing and configuring ISA Server 2000 Monitor ISA Server IP Chains Concepts Implementing FW Technologies 11 Configuring VPN s VPN Fundamentals IP Security Protocol VPN Design and Architecture VPN Security Configuring a VPN

12 Designing an IDS Definition and Components of IDS Technologies and Techniques Host Based IDS Network Based IDS Basics of Analysis How to Use an IDS Limitations of IDS 13 Configuring an IDS Snort Foundations Installing Snort Snort as an IDS IDS center Configuring ISS Scanners 14 Analyzing Intrusion Signatures Concepts of Signature Analysis Common Vulnerabilities and Exposures Signatures Normal Traffic Signatures Abnormal Traffic Signatures 15 Performing a Risk Analysis Concepts of Risk Analysis Methods of Risk Analysis The Process of Risk Analysis Techniques of Minimize Risk Continual Risk Analysis 16 Creating a Security Policy Concepts of Security Policy Policy Design & Standards i.e. BS 7799 Various Policies Sample Policy

Incident Handling and Escalation Procedures Partner Policies FW Implementation Practices Installing and Configuring FW Monitor FW Installing and configuring ISA Server 2000 Monitor ISA Server IP Chains Concepts Implementing FW Technologies 17 Cryptography Fundamentals What is Cryptography? History of Encryption Symmetric versus Asymmetric Combined Solutions Private Key versus Public Key Data Encryption Standard (DES) Advanced Encryption Standard (AES) RSA, Diffie-Hellman MD4, MD5, SHA-1 18 Strong Authentication Authentication Fundamentals Identification versus Verification Two Factor Authentication Strong Authentication Smart Cards and Tokens Authentication interoperating with Biometrics 19 Digital Signatures Definition and Characteristics

How Digital Signatures function Message Digest Functions Digital Signatures with Message Digest E-Signature Law and Legal Issues Key Length (56, 112, and 128 bit) RSA and DSS Signature Standards 20 PKI Standards Definition of X.509 Functions of S/MIME Integration of LDAP Implementation of IPSec Identify and Implement Kerberos IETF PKI Standards (PKIX) PCKS (1 through 5) 21 PKI Fundamentals Terminology and Definition Core Services Digital Certificates Certificate Authority Key Distribution and Management PKI Policies Certificate Revocation Lists LDAP and Enterprise Data Repository 22 Biometrics Fundamentals Fingerprint Scanning Facial Scanning Iris Scanning Hand Scanning Retina Scanning

DNA Analysis Voice Recognition 23 Sign-On Solutions Secure Login to Desktop Inactivity Control Encryption of Network Traffic Credential Storage Smart Cards Virtual Cards 24 Secure E-Mail Implementation Secure use of Netscape Messenger Secure use of Microsoft Outlook Secure use of Microsoft Outlook Express PGP Implementation Sending Signed E-Mail Messages E-Mail encryption and Decryption Methods 25 File Encryption Solutions Automatic File Encryption Microsoft Encrypted File System (EFS) Creating Protective Folders Group Encryption Key Recovery and Management of Keys 26 PKI Solutions and Applications Secure E-Mail Solutions Secure SSL Applications Secure VPN Solutions Secure Document Transfer Certificate Revocation

27 Legal Issues of Network Security Laws on Licensing, Intellectual Properties, Liability, and T rans-border Data Flow. Legal Organizations HIPAA (Health Insurance Portability and Accountability Act) Civil Litigations / Tort Law Ethics and the Internet (RFC 1087) 28 Network Forensics Sector-Level Disk Analysis Incident Response Procedures Computer-Based Evidence Computer Forensics Examination Computer Crime Legislation Data Storage Practices Data Recovery Techniques 29 Physical Security Facility Requirements Technical Controls Environment/Life Safety Physical Security Threats Elements of Physical Security 30 Business Continuity Planning (BC P) and Disaster Recovery Plannin g (DRP) Business Impact Assessments Recovery Stratergy Recovery Paln Development Implementations and Recovery Techniques Elements pf BCP and BCP/DRP events 31 Law, Investigations and Ethics Laws and its categories Investigations Processes and Techniques

Computer Crimes Incident Handling Ethics