SCNP Hardening the Infrastructure Training Class

Lesson 1: Advanced TCP/IP

TCP/IP Concepts
Subnet Masks (VLSM)
IP Datagrams
ICMP Messages
TCP Headers
UDP Headers
Packet Fragmentation
IPv6

Lesson 2: IPSec

IPSec Concepts
Encryption, Authentication and IPSec
IPSec Implementation
IPSec Transport Mode
IPSec Tunnel Mode
Identify AH & ESP captures in NetMon
IPv6 Security Features, and use of IPSec

Lesson 3: Hardening Linux Computers

Linux Administration
Open Source Issues/Concerns
Linux Security Basics
Bastille
Hardening Linux
Linux User Authentication
Hardening NFS
Hardening NIS
Logging
Tripwire

Lesson 4: Hardening Windows Computers

Windows 2000 Infrastructure Security
Windows 2000 Authentication
Windows 2000 User and Group Security
Windows 2000 Resource Security
Windows 2000 Auditing and Logging
Windows 2000 EFS
Windows 2000 Network Security
Windows XP User and Resource Security
Windows Client Firewalls

Lesson 5: Hardening Routers and using Access Control Lists

Describe the ARP and Routing Processes
Routing Protocol Security
Routing Tables
Fundamental Router Hardening
Access and Authentication Control
Auditing/Logging
Access Control List Creation
Access Control List Implementation

Lesson 6: Contingency Planning

Contingency Planning Requirements
Backup systems (Tape/RAID/Clusters)
Backup Media Storage and Security
Electrical Systems and Controls
Generators
Backup and Recovery Policy
Plan Testing and Implementation

Lesson 7: Security on the Internet and the WWW

Components of the Internet
The Weak Points of the Internet
DNS
The Techniques of Web Hacking
Securing IIS
Securing Apache
Securing Internet Explorer
Securing Outlook (Outlook Express)
Viruses, Worms, and Trojan Horses
Email Attacks
Methods of Attacking Users
DOS/DDOS

Lesson 8: Executing Attack Techniques

Network Reconnaissance
Mapping the Network
Sweeping the Network
Scanning the Network
Trojan Horse Use
Gaining Control over the System
Record Keystrokes
Gain and Crack Encrypted Passwords
Reveal Hidden Passwords
Social Engineering
Gain Unauthorized Access
Hide Evidence of an Attack
Breakdown of Mitnick Attack
Perform a Denial of Service
Compromise a Network