N205

N205: Networking Security & Internet Firewalls - 4 Days

Who Should Attend:

System support consultants, system/network administrators, software engineers, programmers, computer science students, and other IT professionals who wish to use and understand the working and use a secure computer environment, implement a security measures and handle threats.

Prerequisites:

A strong background in TCP/IP and Linux or Windows Network administration knowledge is expected.

Objectives:

This module is intended to provide participants with an understanding of security issues in a networked environment and the Internet, and with a guide to obtaining freely available security tools and references. It points out the inadequacies of existing products in keeping out intruders, and enables participants to better estimate their own security requirements, risks, and advantages.

It covers issues related to Internet security and networking, including World Wide Web security, wrapper and proxy programs, integrity management tools, secure programming, and how to use secure TCP/IP services such as FTP, SMTP, and DNS.

It also covers security issues on systems such as Unix and Windows NT such as passwords, file system, cryptography, backups, logging, physical security, telephone security, firewalls, and dealing with break-ins.

Contents:

Overview of Computer Network Architectures: Network Architectures; Network Goals; Communications Subnet Designs; Network Architectures; TCP/IP Protocol; Address Resolution Protocol Booting and Configuring TCP/IP.

Computer Security Basics: Planning Your Security Needs; Approach to Security Policy; Risk Analysis; Cost-Benefit Analysis, Security Through Obscurity; Security Levels; Identifying Proper Use of Resource; Handling Security Policy Violations; Identifying and Preventing Security Problems; Recovery Procedures.

Unix Host Security: Users and Groups; Password; Groups; Vandalism; Network Equivalency; File and Directory Permissions.

Cryptography: Cryptography; Encryption; Cryptographic Algorithms; Message Digests; Digital Signatures; Data Encryption Standard (DES); Kerberos Authentication.

Network and Internet Security: Modem Security; TCP/IP Networks; Network File System (NFS)

Packet Filtering and Screening Routers: Zones of Risk; Screening Routers and Firewalls in TCP/IP Model; Packet Filtering; Screening Router Configurations; PC Packet Filtering.

Firewall Architecture and Theory: Components of a Firewall; Multi-Homed Host;, Disabling Routing in a Dual-Homed Firewall, Bastion Hosts, Off-Loading Packet Filtering to the IAP.

Routing: Why Routing; Subverting a Screening Router; Bastion Hosts with Both Network Interfaces Configured, Demilitarized Zone, Uses of Two Bastion Hosts and Two DMZs; Screened Subnets; Application Level Gateways.

Case Studies: Modern Firewalls, Latest Attack Types for secure sites and their Firewalls , Creation and maintenance of a Firewall.

--------

Contact Us Today for enquiries on courses