Cyber Security Boot Camp

ASPE-IT offers a full line of hands-on SharePoint training for complete implementation, management and usability for all key functions in your enterprise.

ASPE-IT offers real-world, independent training on Windows technologies giving you unbiased hands-on knowledge of the products.

Implemented correctly, virtualization technologies have the potential to create vast improvements in the utilization of IT resources.

See All Courses

ASPE-IT offers networking courses that focus on skills and knowledge of application development. The course you take will dissect the technology, and teaching you the protocols.

ASPE-IT provides premier hands-on Linux skills and certification training through its partnership with Red Hat.

Organizing & managing a company's vital information is one of the most extreme challenges in the IT sector today. We'll give you the knowledge and skills to find actionable data.

See All Courses

Protecting a company's vital information is one of the most important responsibility of today's IT Department. Get skills to fight todays most common attacks.

See All Courses

ITIL V3 Foundation Exam
Preparation Boot Camp

ITIL's best practices in IT Service Management enhance the cost-effectiveness of IT organizations, improve reliability and alignment with the needs of each business.

COURSE 62100 \| 4-DAY SESSION Cyber Security Boot Camp Course Outline Course Overview Course Outline Who Should Attend Cities & Dates

Course Outline I. Introduction to the Current Landscape By the Numbers – an enumeration of the prevalence of common threats Size and Scope of recently documented Botnets Annual cost malware represents to the average business Chain of events – real world examples of actions, start to finish, that attackers have used to compromise a network Hacking goals- data mining, the selling of private financial information in bulk The top ten cyber security threats today II. The Hacking Cycle –Enumeration Public Information Sources that reveal too much Websites Social Networking Sites Job Boards SEC financial Reports Credit Reports DNS Registrations – Making your registrations generic and keeping them private Google and other search engines Cached Web Sites Lab – Using a browser, search and compile basic information about yourself garnered from public sources Lab – Use Whois and other utilities to view a public and private DNS Registrations Passive Network Reconnaissance IP address blocks ISP/Service Provider Information – is your service provider secure? Software Vendors and Suppliers – limiting the amount and type of information available to those you do business with Visual Cues – what can be discerned about your network just from looking at your employees? Lab – Group discussion; identifying social engineering attempts and user training to prevent Reconnaissance from being successful Network Scanning Ping Scanners and what they reveal How to detect a ping scan in progress TCP Port Scanning types TCP Full and Partial Handshakes Stealth Scans – The use of malformed packets and illegal flag Combinations What ports to close and why UDP Scans and what they reveal What ports to close and why ICMP Message quoting Windows indicators Linux and Unix indicators Mac/Apple indicators Lab – Deploy and observe a network scanner, capture the scan in Wireshark and analyze scanning behavior OS fingerprinting 4 most common clues used by attackers to identify your OS Ports and services used by Windows TTL values Defaults ICMP Messages Traceroute in a local network to identify Unix/Linux Lab – Use Netstat and other utilities to determine running services on a host. Discuss ways to disable unneeded services III. TCP/IP Common Protocols and Their Exploitation IP IPv4 Header field Review IPv4 Header field Manipulation Header Length TTL Fragmentation Flags and Offset field IPv6 Header Review Lab – Capture and examine legal and malformed IP Packets, learn to distinguish the difference. TCP TCP Open – session establishment TCP flags – proper use and manipulation Connection-Oriented Data transfer and retransmission TCP Close and Reset UDP Connectionless Datagram delivery Lab – Capture and examine the three phase of a TCP session. Examine UDP datagram exchange. DNS DNS Queries and Responses Client DNS Resolver function – hosts file and DNS Cache Local DNS Servers Caching Servers Forwarding Servers DNS Zone files and Zone Transfers DNSSec Lab – Capture and analyze a DNS query and Response. Examine the local host's hosts file and DNS cache. Lab – Observe a DNS Zone file, Record types, Zone Transfer and DNSSec. DHCP DHCP Discover, Offer, Request and Acknowledgement DHCP Options common options VOIP options Rogue DHCP Servers – use and detection Lab – Configure a DHCP scope. Record and analyze the DHCP process. ICMP Echo Request and Reply – ping, traceroute and pathping Redirection Destination Unreachable Lab – Capture and analyze ICMP messages. IV. Common Malware, Prevention and Mitigation Virus Types Armored Stealth Polymorphic Retro Macro Multipartite Worms Trojans Rootkits Illicit Servers Spyware Keyloggers Screen capture Cookie Grabbing The Evercookie Temporary data storage locations Antivirus Software Disk Scanning and Definitions Memory-Resident Scanners Heuristics and execution prevention Boot-time Scanning Lab – Install and configure anti-virus software Lab – Scan an infected system using definition based, memory-resident based and boot-time scan based anti-virus. Lab – Capture and observe an attempt to disable anti-virus. Host Based Intrusion Detection Inoculation Behavior Based and Heuristic Detection Spyware Detection Anti-Spyware Private browsing Private Data Deletion V. Defense in Depth Edge/Ingress Router – the first line of defense Layer 3 filters Source and Target IP Address Fragmentation Flags & Offset Protocol ID Field TOS/DSCP IP Options Layer 4 filters TCP Flags TCP Options Source and Target Ports Access Control Lists Syntax 5 Rules that all ACL's should contain What the packet filtering router can miss Lab – Write ACL's to meet a security policy's requirements for packet filtering. Capture and inspect crafted packets that evade the ACL. The Stateful Firewall Reflexive ACL's Content inspection and the canonical form Syn-Flood Mitigation Maintenance – Definitions, Application support and Firmware Lab – Configure and deploy a personal firewall. Lab – Read log reports of a Stateful firewall. Application Layer Proxy Content filtering Pattern matching Anti-virus Caching NAT Lab – Configure and test pattern matching in an application layer proxy. Lab – Read and interpret log reports of a proxy server. Intrusion Detection/Prevention Devices Packet capture and analysis Definitions, Behavior, Anomaly and Heuristics Active vs. Passive responses Location and protection Lab – Configure and deploy an IDS. Read and interpret IDS alerts. Honey Pots VI. Access Control Physical controls Perimeter defense Barriers – types, use and location Surveillance Lab – Group discussion of common physical access controls and measures attackers use to defeat them. Access Control models Mandatory Rule-Based Role-Based Discretionary Authentication Factors Something you Know Passwords – strength Password policy Password Cracking methods Brute Force Dictionary Rainbow Tables Lab – Use a password cracking tool to reveal weak passwords. Calculate Password strength Something you Have Smart Cards Tokens Something you Are – Biometrics Common Biometric Authentication types Methods used to defeat Biometrics Error Rates Authentication Protocols PAP, CHAP and EAP Process and common uses Vulnerabilities Securing EAP Lab – Capture and analyze a CHAP and an EAP exchange. Kerberos Elements of Kerberos Steps in authentication and service access RADIUS and TACACS+ Compare and contrast the protocols Common uses in a remote access network Vulnerabilities VII. Encryption, Certificates and The Public Key Infrastructure Confidentiality, Integrity, Authentication and Non-repudiation Symmetric and Asymmetric Ciphers US Export Restricted - DES, DES3 and AES International, Open or not Patented – CAST, Twofish, IDEA Key Exchange – Diffee-Hellman and RSA Mobile Computing – ECC PGP – El Gamal Lab – Capture and inspect encrypted messages. Hashing Algorithms MD-5, SHA-1 and SHA-2 Hashing in Password Storage Hashing in Digital Signatures Lab – Hash a file using MD-5 and SHA-1. Compare hash outputs. X.509v3 Certificates Certificate Types and Format Use, storage and retrieval The PKI Certificate Authorities Certificate Validation PGP Software Key Generation and Distribution Lab – Examine an X.509 v3 Certificate. View built-in Root CA certificates in FireFox and Internet Explorer. Lab – Create a PGP certificate. Sign, encrypt, receive and validate a secure email using PGP. VIII. VPN's and IP Security Protocols L2TP and PPTP Layer 2 Encapsulation Message Format Compatibility Issues IPSec Three most common access models Transport Mode vs. Tunnel Mode Encapsulated Security Payload Authentication Header Security Associations, IKE and ISAKMP SSL/TLS Versions of SSL and TLS Secure Handshake The Digital Envelope and Session Key Exchange The Role of the CA in Secure Session Establishment Vulnerabilities of SSL in the public Internet Lab – Capture and analyze an SSL session establishment. SSH Message Encryption Forward and Reverse Tunnels Lab – Create SSH tunnels for secure message exchange.