Call : (+91) 968636 4243
Mail : info@EncartaLabs.com
EncartaLabs

Intrusion Detection, Attacks and CounterMeasures

( Duration: 2 Days )

The Intrusion Detection, Attacks and CounterMeasures training course provides skills to recognize the various stages of attacks and intrusions: scanning, exploits, elevation of privilege, trojans and backdoors. Every attack is different. The source of an attack might be an automated tool, a script kiddy, or a security expert working for a foreign government, and the source strongly effects the style and timing of the attack.

By attending Intrusion Detection, Attacks and CounterMeasures workshop, delegates will:

  • Identify vulnerable targets on your system
  • Mitigate security risks
  • Recognize common and unusual attack patterns
  • Create effective filters, honeypots, and firewalls
  • Know and disable your enemies
  • Recognize real detects versus false alarms, and know when to report them
  • Set up your system to avoid false detects
  • Evaluate ID systems and third-party tools
  • Learn about automated response and manual response in relation to real-time analysis
  • Propose and justify ID expenditures to management

This Intrusion Detection, Attacks and CounterMeasures class is iseal for Intermediate to advanced, UNIX and Windows system and network administrators, incident handling team members, information security and audit professionals, IP network managers.

COURSE AGENDA

1

What Is Security?

  • Defining Security
2

Applied Encryption

  • Symmetric-Key Encryption
  • Asymmetric-Key Encryption
3

Types of Attacks

  • Specific Attacks
4

General Security Principles

  • Be Suspicious of All Network Activity
  • You Must Have a Security Policy
5

Firewalls Roles and Types

  • The Role of a Firewall
  • Firewall Terminology
  • Firewall Configuration Defaults
6

Firewall Topologies and Virtual Private Networks

  • Design Principles
  • Types of Bastion Hosts
  • Common Firewall Designs
  • ICMP and Firewalls
  • Remote Access and Virtual Private Networks (VPNs)
  • Public-Key Infrastructure (PKI)
7

Detecting and Distracting Hackers

  • Proactive Detection
  • Distracting the Hacker
  • Punishing the Hacker
  • Creating an Attack-Response Plan
8

Operating System Security

  • Windows 2000 Security Components
  • Linux Security Architecture
  • Account Security in Windows 2000 and Linux
  • Removing Accounts
  • Renaming Default Accounts
9

File System Security

  • Windows 2000 File System Security
  • Remote File Access Control
  • Combined Local and Remote Permissions
  • Linux File System Security
10

Assessing and Reducing Risk

  • Reducing Risks in Windows 2000
  • Reducing Risks in Unix Systems
11

The Auditing Process

  • What Is an Auditor?
  • Auditing Steps and Stages
  • Discovery Tools and Methods
  • Vulnerability Scanners
  • Additional Auditing Strategies
12

Auditing Penetration and Control Strategies

  • Compromising Network Elements
  • Control Phase
  • Auditing and the Control Phase
13

Intrusion Detection

  • Understanding Intrusion Detection
  • Intrusion-Detection Architectures
  • Creating Rules for an IDS Application
  • IDS Concerns
  • Purchasing an IDS
14

Auditing and Log Analysis

  • Baseline Creation
  • Analyzing Log Files
  • Filtering Information
  • Securing Log Files
  • Third-Party Logging
15

Recommending Solutions and Generating Reports

  • Recommending Solutions
  • Generating Reports

Encarta Labs Advantage

  • One Stop Corporate Training Solution Providers for over 6,000 various courses on a variety of subjects
  • All courses are delivered by Industry Veterans
  • Get jumpstarted from newbie to production ready in a matter of few days
  • Trained more than 50,000 Corporate executives across the Globe
  • All our trainings are conducted in workshop mode with more focus on hands-on sessions

View our other course offerings by visiting https://www.encartalabs.com/course-catalogue-all.php

Contact us for delivering this course as a public/open-house workshop/online training for a group of 10+ candidates.

Top
Notice
X