Securing UNIX systems training course description This course teaches you everything you need to know to build a safe Linux environment. The first section handles cryptography and authentication with certificates, openssl, mod_ssl, DNSSEC and filesystem encryption. Then Host security and hardening is covered with intrusion detection, and also user management and authentication. Filesystem Access control is then covered. Finally network security is covered with network hardening, packet filtering and VPNs. What will you learn Secure UNIX accounts. Secure UNIX file systems. Secure UNIX access through the network. Securing UNIX systems course details Who will benefit: Linux technical staff needing to secure their systems. Prerequisites: Linux system administration (LPIC-1) Duration 5 days Securing UNIX systems course contents Cryptography Certificates and Public Key Infrastructures X.509 certificates, lifecycle, fields and certificate extensions. Trust chains and PKI. openssl. Public and private keys. Certification authority. Manage server and client certificates. Revoke certificates and CAs. Encryption, signing and authentication SSL, TLS, protocol versions. Transport layer security threats, e.g. MITM. Apache HTTPD with mod_ssl for HTTPS service, including SNI and HSTS. HTTPD with mod_ssl to authenticate users using certificates. HTTPD with mod_ssl to provide OCSP stapling. Use OpenSSL for SSL/TLS client and server tests. Encrypted File Systems Block device and file system encryption. dm-crypt with LUKS to encrypt block devices. eCryptfs to encrypt file systems, including home directories and, PAM integration, plain dm-crypt and EncFS. DNS and cryptography DNSSEC and DANE. BIND as an authoritative name server serving DNSSEC secured zones. BIND as an recursive name server that performs DNSSEC validation, KSK, ZSK, Key Tag, Key generation, key storage, key management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG. Host Security Host Hardening BIOS and boot loader (GRUB 2) security. Disable useless software and services, sysctl for security related kernel configuration, particularly ASLR, Exec-Shield and IP / ICMP configuration, Exec-Shield and IP / ICMP configuration, Limit resource usage. Work with chroot environments, Security advantages of virtualization. Host Intrusion Detection The Linux Audit system, chkrootkit, rkhunter, including updates, Linux Malware Detect, Automate host scans using cron, AIDE, including rule management, OpenSCAP. User Management and Authentication NSS and PAM, Enforce password policies. Lock accounts automatically after failed login attempts, SSSD, Configure NSS and PAM for use with SSSD, SSSD authentication against Active Directory, IPA, LDAP, Kerberos and local domains, Kerberos and local domains, Kerberos tickets. FreeIPA Installation and Samba Integration FreeIPA, architecture and components. Install and manage a FreeIPA server and domain, Active Directory replication and Kerberos cross-realm trusts, sudo, autofs, SSH and SELinux integration in FreeIPA. Access Control Discretionary Access Control File ownership and permissions, SUID, SGID. Access control lists, extended attributes and attribute classes. Mandatory Access Control TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack. etwork File Systems NFSv4 security issues and improvements, NFSv4 server and clients, NFSv4 authentication mechanisms (LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system, NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS security modes (NTLM, Kerberos), mapping and handling of CIFS ACLs and SIDs in a Linux system. Network Security Network Hardening FreeRADIUS, nmap, scan methods. Wireshark, filters and statistics. Rogue router advertisements and DHCP messages. Network Intrusion Detection ntop, Cacti, bandwidth usage monitoring, Snort, rule management, OpenVAS, NASL. Packet Filtering Firewall architectures, DMZ, netfilter, iptables and ip6tables, standard modules, tests and targets. IPv4 and IPv6 packet filtering. Connection tracking, NAT. IP sets and netfilter rules, nftables and nft. ebtables. conntrackd Virtual Private Networks OpenVPN server and clients for both bridged and routed VPN networks. IPsec server and clients for routed VPN networks using IPsec-Tools / racoon. L2TP.
The Level 3 Award in Emergency First Aid at Work (RQF) is a regulated and nationally recognised qualification, specifically designed for those wishing to act as an emergency first aider in their workplace. Throughout this 1 day course, learners will develop the skills and knowledge needed to deal with a range of emergency first aid situations, including administering CPR, using a defibrillator, dealing with wounds and bleeding, minor injuries and more.
We will come to you, your school or learning institute to help you achieve 32 UCAS Points in less than a week! You will learn first aid, mental health first aid, paediatric first aid and risk assessing qualifications all in one week from our expert instructors and include virtual reality elements
Overview This course examines the major tools, techniques, and principles aimed at improving quality and productivity in the public sector. To provide students with practical methods for improving public organizations, this course will cover accountability systems, performance measurement, pay-for-performance reward systems, contracting out, and organizational assessment
Overview TQM is a completely structured, comprehensive, and organization-wide approach taken towards organisational structuring and management that continuously seeks to improve the quality rendered by the products, services belted out by the organization and the productivity of the resources handling the product. The aim is to continuously induce quality at each and every step of the organisational workflow in a bid to refine and fine- tune the processes and receive continuous feedback as per customers' norms to refine still further.
Overview An ineffective audit can mean severe consequences; resulting in process failure, customer dissatisfaction and regulatory noncompliance. Optimize your generic auditing skills with this Internal Auditing training course not aimed at any specific ISO management systems standard or Process. Boost your internal audit capabilities by gaining confidence in planning and performing an effective audit and reporting and taking corrective action where necessary. This course develops the necessary skills to assess and report on the conformance and implementation of processes based on management systems. You'll learn how to initiate an audit, prepare and conduct audit activities, compile and distribute audit reports and complete follow-up activities
Overview The course provides fundamentals of business contracts and changes that took place in business contracts. It will train you with the skills to avoid contract drawbacks and understand the documents, agreements or letters of intent and carefully review them before you enter into a contract. It will also train you with the skills required to secure clauses in the contracts to protect your business and to draft effective contracts or even to negotiate amendments with the ultimate aim of protecting your business.
Overview It will provide the necessary skills to develop efficient strategic planning, forecasting and budgeting processes. The main aim of the training is to enable the participants to understand the framework that builds strategies for annual budgets targeting efficient management and organisational performance. Our course will explain financial terms and budgeting tools in such a way that a financial professional or even a non-financial profession will be able to understand and relate to them in their working environment. It will include a lot of examples, a budgeting format and case studies.