Name: Security+
Price: 2797 GBP
Availability: InStock

Redhill

<h3><b>Cyber Security training course description</b></h3> 
				<p>The reliance of the world on the Internet and computer systems means the protection of information systems is vitally important. This is even more important smart devices and the Internet of Things increase the number of devices. This Cyber Security provides a concise overview on the threats and attacks that can happen along with the counter measures that can be taken.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
        <li>Recognise the different types of attack.</li>
					<li>Describe the attacks that can be made against information systems.</li>
                    <li>Describe the counter measures available.</li>
                  </ul>
       
        <h5>
        <b>Cyber Security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Non-technical staff working with computers.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>None.</p>
              
							<li><b>Duration</b></li>
							
              <p>1 day
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Cyber Security training course contents</b></h3>
      <ul>
				<li>What is Cyber Security?</li><p>
Computer security,
Policies,
Types of security breach,
denial of service,
data manipulation,
data theft,
data destruction,
security checklists,
incident response.
</p><li>Attacks</li><p>
Physical access,
Social engineering,
Privilege escalation,
Malware, Trojans, worms, viruses,
rootkits, Backdoors,
Denial of Service (DOS), Distributed DOS,
Eavesdropping,
Spoofing,
Man the middle tampering.
</p><li>Countermeasures</li><p>
Prevention, detection, response.
Physical, user accounts, Firewalls, IDS, AAA,
authentication, cryptography, encryption, data
integrity.
				</p><li>Cyber security standards</li><p>
ETSI,
ISO 27001,
27002,
NIST,
ISA/IEC 62443.

</p>
      </ul>

Cyber Security training course description
The reliance of the world on the Internet and computer systems means the protection of information systems is vitally important. This is even more important smart devices and the Internet of Things increase the number of devices. This Cyber Security provides a concise overview on the threats and attacks that can happen along with the counter measures that can be taken.
What will you learn
Recognise the different types of attack.
Describe the attacks that can be made against information systems.
Describe the counter measures available.
Cyber Security training course details
Who will benefit:
Non-technical staff working with computers.
Prerequisites:
None.
Duration
1 day 
Cyber Security training course contents
What is Cyber Security?

Computer security,
Policies,
Types of security breach,
denial of service,
data manipulation,
data theft,
data destruction,
security checklists,
incident response.

Attacks

Physical access,
Social engineering,
Privilege escalation,
Malware, Trojans, worms, viruses,
rootkits, Backdoors,
Denial of Service (DOS), Distributed DOS,
Eavesdropping,
Spoofing,
Man the middle tampering.

Countermeasures

Prevention, detection, response.
Physical, user accounts, Firewalls, IDS, AAA,
authentication, cryptography, encryption, data
integrity. 
Cyber security standards

ETSI,
ISO 27001,
27002,
NIST,
ISA/IEC 62443. 

Systems & Network Training

Network & Security

Network Engineer

Cyber Security demystified

General Admission

<h4>Overview</h4>
						<hr />
						<div></div>
							<p>
							</p><p>Cyber Security plays an important role in every business as it encompasses everything that relates to protecting sensitive data, personal information, intellectual property, data, and governmental and industry information systems from theft and damage attempted by criminals and adversaries.</p>

<p>This course is designed to understand and gain practical skills to plan, deliver and monitor IT/cyber security to internal and external clients understanding a complete, knowledge in the areas of IT policies, Security-Operational-Run-Book, security/penetration testing, ethical hacking and black hat hacking including understanding the basics of Kali Operating System and its tools and techniques.</p>

<p>It will also cover WiFi security, Website security, human factors, cyber forensics, and cyber security team management, including all other areas in relation to Cyber Security.</p>
<p>
							
							</p><div>
						
					</div>

Overview



 
Cyber Security plays an important role in every business as it encompasses everything that relates to protecting sensitive data, personal information, intellectual property, data, and governmental and industry information systems from theft and damage attempted by criminals and adversaries.
This course is designed to understand and gain practical skills to plan, deliver and monitor IT/cyber security to internal and external clients understanding a complete, knowledge in the areas of IT policies, Security-Operational-Run-Book, security/penetration testing, ethical hacking and black hat hacking including understanding the basics of Kali Operating System and its tools and techniques.
It will also cover WiFi security, Website security, human factors, cyber forensics, and cyber security team management, including all other areas in relation to Cyber Security.
 

GBA Corporate

Principles and Practices of Cyber Security

Online

On Site

<h3><b>Cyber security training course description</b></h3>
        <p>
      This cyber security course focusses on the network
side of security. Technologies rather than specific
products are studied focussing around the protection of
networks using firewalls and VPNs.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Describe: <br />
                    
                    	- Basic security attacks<br />
                   		- RADIUS<br />
                   		- SSL<br />
                   		- VPNs<br />
                         </li>
                         <li>Deploy firewalls and secure networks</li>
                          <li>Explain how the various technologies involved in an
IP VPN work.</li>
                           <li>Describe and implement:<br />
                            
                         
					- L2TP<br />
					- IPsec<br />
                    - SSL<br />
                   - MPLS, L3, VPNs.</li>
                  </ul>
        <h5>
        <b>Cyber security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone working in the security field.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Cyber security training course contents</b></h3>
				<ul>	<li>Security review </li><p>
Denial of service, DDOS, data manipulation, data theft, data destruction, security checklists, incident response.

</p><li>Security exploits </li><p>
IP spoofing, SYN attacks, hijacking, reflectors and amplification, keeping up to date with new threats.
<br /><span>Hands on</span> port scanning, use a 'hacking' tool.

</p><li>Client and Server security </li><p>
Windows, Linux, Log files, syslogd, accounts, data security.
<br /><span>Hands on</span> Server hardening.

</p><li>Firewall introduction </li><p>
What is a firewall? Firewall benefits, concepts.
<br /><span>HAnds on</span> launching various attacks on a target.

</p><li>Firewall types </li><p>
Packet filtering, SPI, Proxy, Personal. Software firewalls, hardware firewalls. Firewall products.
<br /><span>Hands on</span> Simple personal firewall configuration.

</p><li>Packet filtering firewalls </li><p>
Things to filter in the IP header, stateless vs. stateful filtering. ACLs. Advantages of packet filtering.
<br /><span>Hands on</span> Configuring packet filtering firewalls.

</p><li>Stateful packet filtering </li><p>
Stateful algorithms, packet-by-packet inspection, application content filtering, tracks, special handling (fragments, IP options), sessions with TCP and UDP. Firewall hacking detection: SYN attacks, SSL, SSH interception.
<br /><span>Hands on</span> SPI firewalls.

</p><li>Proxy firewalls </li><p>
Circuit level, application level, SOCKS. Proxy firewall plusses and minuses.
<br /><span>Hands on</span> Proxy firewalls.

</p><li>Firewall architectures </li><p>
Small office, enterprise, service provider, what is a DMZ? DMZ architectures, bastion hosts, multi DMZ. Virtual firewalls, transparent firewalls. Dual firewall design, high availability, load balancing, VRRP.
<br /><span>Hands on</span> Resilient firewall architecture.

</p><li>Testing firewalls </li><p>
Configuration checklist, testing procedure, monitoring firewalls, logging, syslog.
<br /><span>Hands on</span> Testing firewalls.

</p><li>Encryption </li><p>
Encryption keys, Encryption strengths, Secret key vs Public key, algorithms, systems, SSL, SSH, Public Key Infrastructures.
<br /><span>Hands on</span> Password cracking.

</p><li>Authentication </li><p>
Types of authentication, Securid, Biometrics, PGP, Digital certificates, X.509 v3, Certificate authorities, CRLs, RADIUS.
<br /><span>Hands on</span> Using certificates.

</p><li>VPN overview </li><p>
What is a VPN? What is an IP VPN? VPNs vs. Private Data Networks, Internet VPNs, Intranet VPNs, Remote access VPNs, Site to site VPNs, VPN benefits and disadvantages.

</p><li>VPN Tunnelling </li><p>
VPN components, VPN tunnels, tunnel sources, tunnel end points, tunnelling topologies, tunnelling protocols, which tunnelling protocol? Requirements of tunnels.

</p><li>L2TP </li><p>
Overview, components, how it works, security, packet authentication, L2TP/IPsec, L2TP/PPP, L2 vs L3 tunnelling.
<br /><span>Hands on</span> Implementing a L2TP tunnel.

</p><li>IPsec </li><p>
AH, HMAC, ESP, transport and tunnel modes, Security Association, encryption and authentication algorithms, manual vs automated key exchange, NAT and other issues.
<br /><span>Hands on</span> Implementing an IPsec VPN.

</p><li>SSL VPNs </li><p>
Layer 4 VPNs, advantages, disadvantages. SSL. TLS. TLS negotiation, TLS authentication. TLS and certificates.
<br /><span>Hands on</span> Implementing a SSL VPN.

</p><li>MPLS VPNs </li><p>
Introduction to MPLS, why use MPLS, Headers, architecture, label switching, LDP, MPLS VPNs, L2 versus L3 VPNs. Point to point versus multipoint MPLS VPNs. MBGP and VRFs and their use in MPLS VPNs.
<br /><span>Hands on</span> Implementing a MPLS L3 VPN.

</p><li>Penetration testing </li><p>
Hacking webservers, web applications, Wireless networks and mobile platforms. Concepts, threats, methodology.
<br /><span>Hands on</span> Hacking tools and countermeasures.

</p>
				</ul>

Cyber security training course description
 This cyber security course focusses on the network
side of security. Technologies rather than specific
products are studied focussing around the protection of
networks using firewalls and VPNs.
What will you learn
Describe: 
 - Basic security attacks
 - RADIUS
 - SSL
 - VPNs
Deploy firewalls and secure networks
Explain how the various technologies involved in an
IP VPN work.
Describe and implement:
 - L2TP
 - IPsec
 - SSL
 - MPLS, L3, VPNs.
Cyber security training course details
Who will benefit:
Anyone working in the security field.
Prerequisites:
TCP/IP foundation for engineers
Duration
5 days
Cyber security training course contents
Security review

Denial of service, DDOS, data manipulation, data theft, data destruction, security checklists, incident response. 
Security exploits

IP spoofing, SYN attacks, hijacking, reflectors and amplification, keeping up to date with new threats.

Hands on port scanning, use a 'hacking' tool. 
Client and Server security

Windows, Linux, Log files, syslogd, accounts, data security.

Hands on Server hardening. 
Firewall introduction

What is a firewall? Firewall benefits, concepts.

HAnds on launching various attacks on a target. 
Firewall types

Packet filtering, SPI, Proxy, Personal. Software firewalls, hardware firewalls. Firewall products.

Hands on Simple personal firewall configuration. 
Packet filtering firewalls

Things to filter in the IP header, stateless vs. stateful filtering. ACLs. Advantages of packet filtering.

Hands on Configuring packet filtering firewalls. 
Stateful packet filtering

Stateful algorithms, packet-by-packet inspection, application content filtering, tracks, special handling (fragments, IP options), sessions with TCP and UDP. Firewall hacking detection: SYN attacks, SSL, SSH interception.

Hands on SPI firewalls. 
Proxy firewalls

Circuit level, application level, SOCKS. Proxy firewall plusses and minuses.

Hands on Proxy firewalls. 
Firewall architectures

Small office, enterprise, service provider, what is a DMZ? DMZ architectures, bastion hosts, multi DMZ. Virtual firewalls, transparent firewalls. Dual firewall design, high availability, load balancing, VRRP.

Hands on Resilient firewall architecture. 
Testing firewalls

Configuration checklist, testing procedure, monitoring firewalls, logging, syslog.

Hands on Testing firewalls. 
Encryption

Encryption keys, Encryption strengths, Secret key vs Public key, algorithms, systems, SSL, SSH, Public Key Infrastructures.

Hands on Password cracking. 
Authentication

Types of authentication, Securid, Biometrics, PGP, Digital certificates, X.509 v3, Certificate authorities, CRLs, RADIUS.

Hands on Using certificates. 
VPN overview

What is a VPN? What is an IP VPN? VPNs vs. Private Data Networks, Internet VPNs, Intranet VPNs, Remote access VPNs, Site to site VPNs, VPN benefits and disadvantages. 
VPN Tunnelling

VPN components, VPN tunnels, tunnel sources, tunnel end points, tunnelling topologies, tunnelling protocols, which tunnelling protocol? Requirements of tunnels. 
L2TP

Overview, components, how it works, security, packet authentication, L2TP/IPsec, L2TP/PPP, L2 vs L3 tunnelling.

Hands on Implementing a L2TP tunnel. 
IPsec

AH, HMAC, ESP, transport and tunnel modes, Security Association, encryption and authentication algorithms, manual vs automated key exchange, NAT and other issues.

Hands on Implementing an IPsec VPN. 
SSL VPNs

Layer 4 VPNs, advantages, disadvantages. SSL. TLS. TLS negotiation, TLS authentication. TLS and certificates.

Hands on Implementing a SSL VPN. 
MPLS VPNs

Introduction to MPLS, why use MPLS, Headers, architecture, label switching, LDP, MPLS VPNs, L2 versus L3 VPNs. Point to point versus multipoint MPLS VPNs. MBGP and VRFs and their use in MPLS VPNs.

Hands on Implementing a MPLS L3 VPN. 
Penetration testing

Hacking webservers, web applications, Wireless networks and mobile platforms. Concepts, threats, methodology.

Hands on Hacking tools and countermeasures. 

Cyber security for engineers

<div>
</div>
<section>
<div>
<h2><strong>About this Virtual Instructor Led Training (VILT)</strong></h2>
<p><span>This 3 half-day Virtual Instructor Led Training (VILT) course will help participants grasp the idea of real-world risk management and how this relates to the cyber world. The VILT course will cover topics surrounding identifying cyber risks and vulnerabilities, guidance on applying administrative actions, and comprehensive solutions to ensure your organization is adequately secure and protected.</span></p>
<p><span>The VILT course will guide participants on how to conduct a security risk assessment for their organization, and equip them with the skills to develop a risk compliance assessment plan as well as methods to develop risk management strategies which can improve their organization's security posture. The VILT course has at least a 30% hands-on approach through the use of Table Top Exercises.</span></p>
<p><span>The VILT course will cover the following modules:</span></p>
<ol>
<li><span>Introduction to Risk Assessments (RA)</span></li>
<li><span>Threat Actors and Their Motivations</span></li>
<li><span>Threat and Risk Assessment</span></li>
<li><span>Critical Controls Identification</span></li>
<li><span>Maturity Assessment</span></li>
<li><span>Treated Cyber Risk Profile</span></li>
<li><span>Target Cyber Risk Profile and Strategy</span></li>
</ol>
<p>
</p></div>
</section>
<section>
<div id="accordion">
<div>
<div>

Target Audience 

</div>
<div id="collapseTwo">
<div>
<p><span>The VILT course is intended for professionals responsible for organizational information and security system and those involved in operating and maintenance of critical information and IT network &amp; sotware systems. Professionals who are designated as the Single Point of Accountability (SPoA) as well as system auditors will find this course useful.</span></p>
</div>
</div>
</div>
<div>
<div>

Course Level 

</div>
<div id="collapsecl">
<div>
<ul>
<li>Basic or Foundation</li>
</ul>
</div>
</div>
</div>
<div>
<div>

Training Methods 

</div>
<div id="collapseThree">
<div>
<p><span>The VILT course will be delivered online in 3 half-day sessions comprising 4 hours per day, with 2 x 10 minutes break per day, including time for lectures, discussion, quizzes and short classroom exercises.</span></p>
<p><span>Course Duration: 3 half-day sessions, 4 hours per session (12 hours in total).</span></p>
<p><span>This VILT course is delivered in partnership with ENGIE Laborelec.</span></p>
<p></p>
</div>
</div>
</div>
<div>
<div>

Trainer

</div>
<div id="collapseFive">
<div>
<p><span>Your expert course leader is a is specialized in cybersecurity risk management. Before joining ENGIE, she worked for The National Cybersecurity Agency of France (ANSSI) based in Paris (France) and for Deloitte Belgium located in Zaventem (Belgium).</span></p>
<p><span>She has been involved in cybersecurity projects focusing on the principle of protecting critical infrastructures.</span></p>
<p><span>Her different experiences in Cyber Security, Anti-Money Laundering and Global Trade Compliance (including Export Control and Customs) gave her the opportunity to use methodologies tackling strategic, operational and financial control issues at all levels of an organization: people, business processes, IT applications and infrastructure, legal and regulatory compliance.</span></p>
<p><span>She was an EBIOS Risk Manager (RM) trainer while she worked for the French government; EBIOS RM is the French method for assessing and treating digital risks. She also had the opportunity to represent France towards European institutions and other relevant stakeholders for topics related to cybersecurity risk management.</span></p>
</div>
</div>
</div>
<div>
<div>

POST TRAINING COACHING SUPPORT (OPTIONAL)

</div>
<div id="collapseCS">
<div>
<p>To further optimise your learning experience from our courses, we also offer individualized 'One to One' coaching support for 2 hours post training. We can help improve your competence in your chosen area of interest, based on your learning needs and available hours. This is a great opportunity to improve your capability and confidence in a particular area of expertise. It will be delivered over a secure video conference call by one of our senior trainers. They will work with you to create a tailor-made coaching program that will help you achieve your goals faster.<br />
Request for further information about post training coaching support and fees applicable for this.</p>
</div>
</div>
</div>
<div>
<div>

Accreditions And Affliations

</div>
<div id="collapseSeven">
<div>
               </div>
</div>
</div>
</div>
</section>

About this Virtual Instructor Led Training (VILT)
This 3 half-day Virtual Instructor Led Training (VILT) course will help participants grasp the idea of real-world risk management and how this relates to the cyber world. The VILT course will cover topics surrounding identifying cyber risks and vulnerabilities, guidance on applying administrative actions, and comprehensive solutions to ensure your organization is adequately secure and protected.
The VILT course will guide participants on how to conduct a security risk assessment for their organization, and equip them with the skills to develop a risk compliance assessment plan as well as methods to develop risk management strategies which can improve their organization's security posture. The VILT course has at least a 30% hands-on approach through the use of Table Top Exercises.
The VILT course will cover the following modules:
Introduction to Risk Assessments (RA)
Threat Actors and Their Motivations
Threat and Risk Assessment
Critical Controls Identification
Maturity Assessment
Treated Cyber Risk Profile
Target Cyber Risk Profile and Strategy


Target Audience
The VILT course is intended for professionals responsible for organizational information and security system and those involved in operating and maintenance of critical information and IT network & sotware systems. Professionals who are designated as the Single Point of Accountability (SPoA) as well as system auditors will find this course useful.
Course Level
Basic or Foundation
Training Methods
The VILT course will be delivered online in 3 half-day sessions comprising 4 hours per day, with 2 x 10 minutes break per day, including time for lectures, discussion, quizzes and short classroom exercises.
Course Duration: 3 half-day sessions, 4 hours per session (12 hours in total).
This VILT course is delivered in partnership with ENGIE Laborelec.

Trainer
Your expert course leader is a is specialized in cybersecurity risk management. Before joining ENGIE, she worked for The National Cybersecurity Agency of France (ANSSI) based in Paris (France) and for Deloitte Belgium located in Zaventem (Belgium).
She has been involved in cybersecurity projects focusing on the principle of protecting critical infrastructures.
Her different experiences in Cyber Security, Anti-Money Laundering and Global Trade Compliance (including Export Control and Customs) gave her the opportunity to use methodologies tackling strategic, operational and financial control issues at all levels of an organization: people, business processes, IT applications and infrastructure, legal and regulatory compliance.
She was an EBIOS Risk Manager (RM) trainer while she worked for the French government; EBIOS RM is the French method for assessing and treating digital risks. She also had the opportunity to represent France towards European institutions and other relevant stakeholders for topics related to cybersecurity risk management.
POST TRAINING COACHING SUPPORT (OPTIONAL)
To further optimise your learning experience from our courses, we also offer individualized 'One to One' coaching support for 2 hours post training. We can help improve your competence in your chosen area of interest, based on your learning needs and available hours. This is a great opportunity to improve your capability and confidence in a particular area of expertise. It will be delivered over a secure video conference call by one of our senior trainers. They will work with you to create a tailor-made coaching program that will help you achieve your goals faster.

Request for further information about post training coaching support and fees applicable for this.
Accreditions And Affliations

EnergyEdge - Training for a Sustainable Energy Future

Renewable Energy

Oil & Gas

Assessing and Managing Cyber Security Risks for Essential Services Operators

Team of 10, pp

Normal Fee, pp

Boost your cyber security skills with Edoxi's Cyber Security courses in Dubai. Learn how to safeguard networks and data from cyber threats. With Edoxi’s cyber security courses upskill your knowledge in the areas such as Security Engineering, System Security, Software Security, cyberattacks, Security Software, Software Testing, and more.





Edoxi Training Institute

Cyber security courses in Dubai

Upgrade your cyber security skills with Time Training Center’s Cyber Security courses in Abu Dhabi. Learn how to safeguard networks and data from cyber threats. With our cyber security courses you will  Learn the latest penetration testing techniques,various types of cyber threats,ways to tackle cyber threats and many more.



Enroll now!
Call us: 97126713828
Mail : info@timetraining.ae
Learn more:https://www.timetraining.ae/course_category/cyber-security-courses-in-abu-dhabi
Address: Office 203, ADCP Tower - B,Behind City Seasons, Electra Street, Abu Dhabi United Arab Emirates



Time Training Center

Cyber Security Courses In Abu Dhabi

<h3><b>Penetration testing training course description</b></h3>
        <p>
      An advanced technical hands on course focusing on hacking and counter hacking. The course revolves around a series of exercises based on "hacking" into a network (pen testing the network) and then defending against the hacks.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
 <li>Perform penetration tests.</li>
					<li>Explain the technical workings of various penetration tests.</li>
                    <li>Produce reports on results of penetration tests.</li>
					<li>Defend against hackers.  </li>
                  </ul>
				
        <h5><b>Penetration testing training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical support staff, auditors and security
professionals. <br />Staff who are responsible for network
infrastructure integrity.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>IP Security<br />
                    IP VPNs</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Penetration testing training course contents</b></h3>
				<ul>	<li>Introduction</li><p>
Hacking concepts, phases, types of attacks, 'White
hacking', What is penetration testing? Why use
pen testing, black box vs. white box testing,
equipment and tools, security lifecycles, counter
hacking, pen testing reports, methodologies, legal
issues.
					</p><li>Physical security and social engineering</li><p>
Testing access controls, perimeter reviews,
location reviews, alarm response testing. Request
testing, guided suggestions, trust testing. Social
engineering concepts, techniques, counter
measures, Identity theft, Impersonation on social
media, Footprints through social engineering
</p><li>Reconnaissance (discovery)</li><p>
Footprinting methodologies, concepts, threats and
countermeasures, WHOIS footprinting, Gaining
contacts and addresses, DNS queries, NIC
queries, ICMP ping sweeping, system and server
trails from the target network, information leaks,
competitive intelligence. Scanning pen testing.
</p><li>Gaining access</li><p>
Getting past passwords, password grinding,
spoofed tokens, replays, remaining anonymous.
</p><li>Scanning (enumeration)</li><p>
Gaining OS info, platform info, open port info,
application info. Routes used, proxies, firewalking,
Port scanning, stealth port scanning, vulnerability
scanning, FIN scanning, Xmas tree scanning, Null
scanning, spoofed scanning, Scanning beyond
IDS. Enumeration concepts, counter measures and
enumeration pen testing.
</p><li>Hacking</li><p>
Hacking webservers, web applications, Wireless
networks and mobile platforms. Concepts, threats,
methodology, hacking tools and countermeasures.
</p><li>Trojan, Backdoors, Sniffers, Viruses and Worms</li><p>
Detection, concepts, countermeasures, Pen
testing Trojans, backdoors, sniffers and viruses.
MAC attacks, DHCP attacks, ARP poisoning, DNS
poisoning Anti-Trojan software, Malware analysis
Sniffing tools.
</p><li>Exploiting (testing) vulnerabilities</li><p>
Buffer overflows,, simple exploits, brute force
methods, UNIX based, Windows based, specific
application vulnerabilities.
</p><li>DoS/DDoS</li><p>
Concepts, techniques, attack tools, Botnet,
countermeasures, protection tools, DoS attack pen
testing.
</p><li>SQL Injection</li><p>
Types and testing, Blind SQL Injection, Injection
tools, evasion and countermeasures.
</p><li>Securing networks</li><p>
'Hurdles', firewalls, DMZ, stopping port scans,
IDS, Honeypots, Router testing, firewall testing,
IDS testing, Buffer Overflow.
</p><li>Cryptography</li><p>
PKI, Encryption algorithms, tools, Email and Disk
Encryption.
</p><li>Information security</li><p>
Document grinding, privacy.
</p>
				</ul>

Penetration testing training course description
 An advanced technical hands on course focusing on hacking and counter hacking. The course revolves around a series of exercises based on "hacking" into a network (pen testing the network) and then defending against the hacks.
What will you learn
Perform penetration tests.
Explain the technical workings of various penetration tests.
Produce reports on results of penetration tests.
Defend against hackers.
Penetration testing training course details
Who will benefit:
Technical support staff, auditors and security
professionals. 
Staff who are responsible for network
infrastructure integrity.
Prerequisites:
IP Security
 IP VPNs
Duration
5 days
Penetration testing training course contents
Introduction

Hacking concepts, phases, types of attacks, 'White
hacking', What is penetration testing? Why use
pen testing, black box vs. white box testing,
equipment and tools, security lifecycles, counter
hacking, pen testing reports, methodologies, legal
issues. 
Physical security and social engineering

Testing access controls, perimeter reviews,
location reviews, alarm response testing. Request
testing, guided suggestions, trust testing. Social
engineering concepts, techniques, counter
measures, Identity theft, Impersonation on social
media, Footprints through social engineering

Reconnaissance (discovery)

Footprinting methodologies, concepts, threats and
countermeasures, WHOIS footprinting, Gaining
contacts and addresses, DNS queries, NIC
queries, ICMP ping sweeping, system and server
trails from the target network, information leaks,
competitive intelligence. Scanning pen testing.

Gaining access

Getting past passwords, password grinding,
spoofed tokens, replays, remaining anonymous.

Scanning (enumeration)

Gaining OS info, platform info, open port info,
application info. Routes used, proxies, firewalking,
Port scanning, stealth port scanning, vulnerability
scanning, FIN scanning, Xmas tree scanning, Null
scanning, spoofed scanning, Scanning beyond
IDS. Enumeration concepts, counter measures and
enumeration pen testing.

Hacking

Hacking webservers, web applications, Wireless
networks and mobile platforms. Concepts, threats,
methodology, hacking tools and countermeasures.

Trojan, Backdoors, Sniffers, Viruses and Worms

Detection, concepts, countermeasures, Pen
testing Trojans, backdoors, sniffers and viruses.
MAC attacks, DHCP attacks, ARP poisoning, DNS
poisoning Anti-Trojan software, Malware analysis
Sniffing tools.

Exploiting (testing) vulnerabilities

Buffer overflows,, simple exploits, brute force
methods, UNIX based, Windows based, specific
application vulnerabilities.

DoS/DDoS

Concepts, techniques, attack tools, Botnet,
countermeasures, protection tools, DoS attack pen
testing.

SQL Injection

Types and testing, Blind SQL Injection, Injection
tools, evasion and countermeasures.

Securing networks

'Hurdles', firewalls, DMZ, stopping port scans,
IDS, Honeypots, Router testing, firewall testing,
IDS testing, Buffer Overflow.

Cryptography

PKI, Encryption algorithms, tools, Email and Disk
Encryption.

Information security

Document grinding, privacy.


Penetration testing and Ethical Hacking

<h3><b>Securing Linux systems training course description</b></h3>
      <p>This course teaches you everything you need to know
to build a safe Linux environment. The first section
handles cryptography and authentication with
certificates, openssl, mod_ssl, DNSSEC and filesystem
encryption. Then Host security and hardening is
covered with intrusion detection, and also user
management and authentication. Filesystem Access
control is then covered. Finally network security is
covered with network hardening, packet filtering and
VPNs. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
      <li>Secure Linux accounts.</li>
					              <li>Secure Linux file systems.</li>
                   <li>Secure Linux access through the network.</li>
                  </ul>
                  
       
        <h5>
        <b>Securing Linux systems training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Linux technical staff needing to secure their systems.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>Linux system administration (LPIC-1)</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days
						</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Securing Linux systems training course contents</b></h3>
      <ul>
				<li><span>Cryptography</span></li><p>
</p><li>Certificates and Public Key Infrastructures</li><p>
				X.509 certificates, lifecycle, fields and certificate
extensions. Trust chains and PKI. openssl. Public and
private keys. Certification authority. Manage server and
client certificates. Revoke certificates and CAs.
</p><li>Encryption, signing and authentication</li><p>
SSL, TLS, protocol versions. Transport layer security
threats, e.g. MITM. Apache HTTPD with mod_ssl for
HTTPS service, including SNI and HSTS. HTTPD with
mod_ssl to authenticate users using certificates. HTTPD
with mod_ssl to provide OCSP stapling. Use OpenSSL
for SSL/TLS client and server tests.
</p><li>Encrypted File Systems</li><p>
Block device and file system encryption. dm-crypt with
LUKS to encrypt block devices. eCryptfs to encrypt file
systems, including home directories and, PAM
integration, plain dm-crypt and EncFS.
</p><li>DNS and cryptography</li><p>
DNSSEC and DANE. BIND as an authoritative name
server serving DNSSEC secured zones. BIND as an
recursive name server that performs DNSSEC validation,
KSK, ZSK, Key Tag, Key generation, key storage, key
management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG.
				</p><li><span>Host Security</span></li><p>
</p><li>Host Hardening</li><p>
BIOS and boot loader (GRUB 2) security. Disable
useless software and services, sysctl for security related
kernel configuration, particularly ASLR, Exec-Shield and
IP / ICMP configuration, Exec-Shield and IP / ICMP
configuration, Limit resource usage. Work with chroot
environments, Security advantages of virtualization.
</p><li>Host Intrusion Detection</li><p>
The Linux Audit system, chkrootkit, rkhunter, including
updates, Linux Malware Detect, Automate host scans
using cron, AIDE, including rule management,
OpenSCAP.
</p><li>User Management and Authentication</li><p>
NSS and PAM, Enforce password policies. Lock
accounts automatically after failed login attempts,
SSSD, Configure NSS and PAM for use with SSSD,
SSSD authentication against Active Directory, IPA,
LDAP, Kerberos and local domains, Kerberos and local
domains, Kerberos tickets.
</p><li>FreeIPA Installation and Samba Integration</li><p>
FreeIPA, architecture and components. Install and
manage a FreeIPA server and domain, Active Directory
replication and Kerberos cross-realm trusts, sudo,
autofs, SSH and SELinux integration in FreeIPA.
				</p><li><span>Access Control</span></li><p>
</p><li>Discretionary Access Control</li><p>
File ownership and permissions, SUID, SGID. Access
control lists, extended attributes and attribute classes.
</p><li>Mandatory Access Control</li><p>
TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack.
</p><li>etwork File Systems</li><p>
NFSv4 security issues and improvements, NFSv4
server and clients, NFSv4 authentication mechanisms
(LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system,
NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS
security modes (NTLM, Kerberos), mapping and
handling of CIFS ACLs and SIDs in a Linux system.<br />
				</p><li><span>Network Security</span></li><p>
</p><li>Network Hardening</li><p>
FreeRADIUS, nmap, scan methods. Wireshark, filters
and statistics. Rogue router advertisements and DHCP
messages.
</p><li>Network Intrusion Detection</li><p>
ntop, Cacti, bandwidth usage monitoring, Snort, rule
management, OpenVAS, NASL.
</p><li>Packet Filtering</li><p>
Firewall architectures, DMZ, netfilter, iptables and
ip6tables, standard modules, tests and targets. IPv4 and
IPv6 packet filtering. Connection tracking, NAT. IP sets
and netfilter rules, nftables and nft. ebtables. conntrackd
</p><li>Virtual Private Networks</li><p>
OpenVPN server and clients for both bridged and routed
VPN networks. IPsec server and clients for routed VPN
networks using IPsec-Tools / racoon. L2TP.
</p>
      </ul>

Securing Linux systems training course description
This course teaches you everything you need to know
to build a safe Linux environment. The first section
handles cryptography and authentication with
certificates, openssl, mod_ssl, DNSSEC and filesystem
encryption. Then Host security and hardening is
covered with intrusion detection, and also user
management and authentication. Filesystem Access
control is then covered. Finally network security is
covered with network hardening, packet filtering and
VPNs. 
What will you learn
Secure Linux accounts.
Secure Linux file systems.
Secure Linux access through the network.
Securing Linux systems training course details
Who will benefit:
Linux technical staff needing to secure their systems.
Prerequisites:
Linux system administration (LPIC-1)
Duration
5 days 
Securing Linux systems training course contents
Cryptography


Certificates and Public Key Infrastructures
 X.509 certificates, lifecycle, fields and certificate
extensions. Trust chains and PKI. openssl. Public and
private keys. Certification authority. Manage server and
client certificates. Revoke certificates and CAs.

Encryption, signing and authentication

SSL, TLS, protocol versions. Transport layer security
threats, e.g. MITM. Apache HTTPD with mod_ssl for
HTTPS service, including SNI and HSTS. HTTPD with
mod_ssl to authenticate users using certificates. HTTPD
with mod_ssl to provide OCSP stapling. Use OpenSSL
for SSL/TLS client and server tests.

Encrypted File Systems

Block device and file system encryption. dm-crypt with
LUKS to encrypt block devices. eCryptfs to encrypt file
systems, including home directories and, PAM
integration, plain dm-crypt and EncFS.

DNS and cryptography

DNSSEC and DANE. BIND as an authoritative name
server serving DNSSEC secured zones. BIND as an
recursive name server that performs DNSSEC validation,
KSK, ZSK, Key Tag, Key generation, key storage, key
management and key rollover, Maintenance and resigning of zones, Use DANE. TSIG. 
Host Security


Host Hardening

BIOS and boot loader (GRUB 2) security. Disable
useless software and services, sysctl for security related
kernel configuration, particularly ASLR, Exec-Shield and
IP / ICMP configuration, Exec-Shield and IP / ICMP
configuration, Limit resource usage. Work with chroot
environments, Security advantages of virtualization.

Host Intrusion Detection

The Linux Audit system, chkrootkit, rkhunter, including
updates, Linux Malware Detect, Automate host scans
using cron, AIDE, including rule management,
OpenSCAP.

User Management and Authentication

NSS and PAM, Enforce password policies. Lock
accounts automatically after failed login attempts,
SSSD, Configure NSS and PAM for use with SSSD,
SSSD authentication against Active Directory, IPA,
LDAP, Kerberos and local domains, Kerberos and local
domains, Kerberos tickets.

FreeIPA Installation and Samba Integration

FreeIPA, architecture and components. Install and
manage a FreeIPA server and domain, Active Directory
replication and Kerberos cross-realm trusts, sudo,
autofs, SSH and SELinux integration in FreeIPA. 
Access Control


Discretionary Access Control

File ownership and permissions, SUID, SGID. Access
control lists, extended attributes and attribute classes.

Mandatory Access Control

TE, RBAC, MAC, DAC. SELinux, AppArmor and Smack.

etwork File Systems

NFSv4 security issues and improvements, NFSv4
server and clients, NFSv4 authentication mechanisms
(LIPKEY, SPKM, Kerberos), NFSv4 pseudo file system,
NFSv4 ACLs. CIFS clients, CIFS Unix Extensions, CIFS
security modes (NTLM, Kerberos), mapping and
handling of CIFS ACLs and SIDs in a Linux system.
 
Network Security


Network Hardening

FreeRADIUS, nmap, scan methods. Wireshark, filters
and statistics. Rogue router advertisements and DHCP
messages.

Network Intrusion Detection

ntop, Cacti, bandwidth usage monitoring, Snort, rule
management, OpenVAS, NASL.

Packet Filtering

Firewall architectures, DMZ, netfilter, iptables and
ip6tables, standard modules, tests and targets. IPv4 and
IPv6 packet filtering. Connection tracking, NAT. IP sets
and netfilter rules, nftables and nft. ebtables. conntrackd

Virtual Private Networks

OpenVPN server and clients for both bridged and routed
VPN networks. IPsec server and clients for routed VPN
networks using IPsec-Tools / racoon. L2TP.


Securing Linux systems

<h3><b>CWSP training course description</b></h3>
        <p>A hands-on training course concentrating solely on WiFi security with an emphasis on the delegates learning the necessary knowledge and skills to pass the CWSP exam. The course progresses from simple authentication, encryption and key management onto in depth coverage of 802.X and EAP along with many other security solutions such as access control, intrusion prevention and secure roaming.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
          
              							    <li>Demonstrate the threats to WiFi networks.</li>
              <li>Secure WiFi networks.</li>
              <li>Configure:
                <br />
                  WPA2<br />
                  RADIUS<br />
                  802.1x<br />
                  EAP<br />
               
					</li>
              <li>Pass the CWSP exam.</li>
      </ul>
     
        <h5>
        <b>CWSP training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical network staff.<br />
         Technical security staff. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>
                 Certified Wireless Network Associate.</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>CWSP training course contents</b></h3>
      <ul>
				<li>WLAN Security overview</li><p>
Standards, security basics, AAA, 802.11 security
history. <br /><span>Hands on</span> WLAN connectivity.
				</p><li>Legacy 802.11 security</li><p>
Authentication: Open system, shared key. WEP.
VPNs. MAC filters. SSID segmentation, SSID
cloaking. <br /><span>Hands on</span> Analysing 802.11 frame
exchanges, viewing hidden SSIDs.
</p><li>Encryption</li><p>
Basics, AES, TKIP, CCMP, WPA, WPA2. <br /><span>Hands on</span> Decrypting 802.11 data frames.
</p><li>802.11 layer 2 authentication</li><p>
802.1X: Supplicant, Authenticator, Authentication
server. Credentials. Legacy authentication. EAP,
Weak EAP protocols, Strong EAP protocols: EAP
-PEAP, EAP-TTLS, EAP-TLS, EAP-FAST. <br /><span>Hands on</span> Analysing 802.1X/EAP frames.
</p><li>802.11 layer 2 dynamic key generation</li><p>
Robust Security Network. <br /><span>Hands on</span>
Authentication and key management.
</p><li>SOHO 802.11 security</li><p>
WPA/WPA2 personal, Preshared Keys, WiFi
Protected Setup (WPS). <br /><span>Hands on</span> PSK
mapping.
</p><li>WLAN security infrastructure</li><p>
DS, Autonomous APs, WLAN controllers, split
MAC, mesh, bridging, location based access
control. Resilience. Wireless network
management system. RADIUS/LDAP servers,
PKI, RBAC. <br /><span>Hands on</span> 802.1X/EAP
configuration. RADIUS configuration.
</p><li>802.11 Fast secure roaming</li><p>
History, RSNA, OKC, Fast BSS transition,
802.11k. <br /><span>Hands on</span> Roaming.
</p><li>Wireless security risks</li><p>
Rogue devices, rogue prevention.
Eavesdropping, DOS attacks. Public access and
hotspots. <br /><span>Hands on</span> Backtrack.
</p><li>WiFi security auditing</li><p>
Layer 1 audit, layer 2 audit, pen testing. WLAN
security auditing tools.
</p><li>WiFi security monitoring</li><p>
Wireless Intrusion Detection and Prevention
Systems. Device classification, WIDS/WIPS
analysis. Monitoring. 802.11w. <br /><span>Hands on</span> Laptop
spectrum analysers.
</p><li>VPNs, remote access, guest access</li><p>
Role of VPNs in 802.11, remote access,
hotspots, captive portal.
</p><li>Wireless security policies</li><p>
General policy, functional policy,
recommendations.
 </p>

      </ul>

CWSP training course description
A hands-on training course concentrating solely on WiFi security with an emphasis on the delegates learning the necessary knowledge and skills to pass the CWSP exam. The course progresses from simple authentication, encryption and key management onto in depth coverage of 802.X and EAP along with many other security solutions such as access control, intrusion prevention and secure roaming.
What will you learn
Demonstrate the threats to WiFi networks.
Secure WiFi networks.
Configure: 
 WPA2
 RADIUS
 802.1x
 EAP
Pass the CWSP exam.
CWSP training course details
Who will benefit:
Technical network staff.
 Technical security staff. 
Prerequisites:
 Certified Wireless Network Associate.
Duration
5 days
CWSP training course contents
WLAN Security overview

Standards, security basics, AAA, 802.11 security
history. 
Hands on WLAN connectivity. 
Legacy 802.11 security

Authentication: Open system, shared key. WEP.
VPNs. MAC filters. SSID segmentation, SSID
cloaking. 
Hands on Analysing 802.11 frame
exchanges, viewing hidden SSIDs.

Encryption

Basics, AES, TKIP, CCMP, WPA, WPA2. 
Hands on Decrypting 802.11 data frames.

802.11 layer 2 authentication

802.1X: Supplicant, Authenticator, Authentication
server. Credentials. Legacy authentication. EAP,
Weak EAP protocols, Strong EAP protocols: EAP
-PEAP, EAP-TTLS, EAP-TLS, EAP-FAST. 
Hands on Analysing 802.1X/EAP frames.

802.11 layer 2 dynamic key generation

Robust Security Network. 
Hands on
Authentication and key management.

SOHO 802.11 security

WPA/WPA2 personal, Preshared Keys, WiFi
Protected Setup (WPS). 
Hands on PSK
mapping.

WLAN security infrastructure

DS, Autonomous APs, WLAN controllers, split
MAC, mesh, bridging, location based access
control. Resilience. Wireless network
management system. RADIUS/LDAP servers,
PKI, RBAC. 
Hands on 802.1X/EAP
configuration. RADIUS configuration.

802.11 Fast secure roaming

History, RSNA, OKC, Fast BSS transition,
802.11k. 
Hands on Roaming.

Wireless security risks

Rogue devices, rogue prevention.
Eavesdropping, DOS attacks. Public access and
hotspots. 
Hands on Backtrack.

WiFi security auditing

Layer 1 audit, layer 2 audit, pen testing. WLAN
security auditing tools.

WiFi security monitoring

Wireless Intrusion Detection and Prevention
Systems. Device classification, WIDS/WIPS
analysis. Monitoring. 802.11w. 
Hands on Laptop
spectrum analysers.

VPNs, remote access, guest access

Role of VPNs in 802.11, remote access,
hotspots, captive portal.

Wireless security policies

General policy, functional policy,
recommendations. 

Certified Wireless Security Professional

<h3><b>Security+ training course description</b></h3>
        <p>
   A hands on course aimed at getting delegates successfully through the CompTia Security+ examination. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Explain general security concepts.</li>
					<li>Describe the security concepts in communications.</li>
					<li>Describe how to secure an infrastructure.</li>
                    <li>Recognise the role of cryptography.</li>
					<li>Describe operational/organisational security.</li>
                  </ul>
        <h5>
        <b>Security+ training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Those wishing to pass the Security+ exam.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Security+ training course contents</b></h3>
				<ul>	<li>General security concepts</li><p>
Non-essential services and protocols. Access
control: MAC, DAC, RBAC. Security attacks: DOS,
DDOS, back doors, spoofing, man in the middle,
replay, hijacking, weak keys, social engineering,
mathematical, password guessing, brute force,
dictionary, software exploitation. Authentication:
Kerberos, CHAP, certificates, usernames/
passwords, tokens, biometrics. Malicious code:
Viruses, trojan horses, logic bombs, worms.
Auditing, logging, scanning.
					</p><li>Communication security</li><p>
Remote access: 802.1x, VPNs, L2TP, PPTP,
IPsec, RADIUS, TACACS, SSH. Email: S/MIME,
PGP, spam, hoaxes. Internet: SSL, TLS, HTTPS,
IM, packet sniffing, privacy, Javascript, ActiveX,
buffer overflows, cookies, signed applets, CGI,
SMTP relay. LDAP. sftp, anon ftp, file sharing,
sniffing, 8.3 names. Wireless: WTLS, 802.11,
802.11x, WEP/WAP.
	</p><li>Infrastructure security</li><p>
Firewalls, routers, switches, wireless, modems,
RAS, PBX, VPN, IDS, networking monitoring,
workstations, servers, mobile devices. Media
security: Coax, UTP, STP, fibre. Removable
media. Topologies: Security zones, DMZ, Intranet,
Extranet, VLANs, NAT, Tunnelling. IDS: Active/
passive, network/host based, honey pots, incident
response. Security baselines: Hardening OS/NOS,
networks and applications.
	</p><li>Cryptography basics</li><p>
Integrity, confidentiality, access control,
authentication, non-repudiation. Standards and
protocols. Hashing, symmetric, asymmetric. PKI:
Certificates, policies, practice statements,
revocation, trust models. Key management and
certificate lifecycles. Storage: h/w, s/w, private key
protection. Escrow, expiration, revocation,
suspension, recovery, destruction, key usage.
	</p><li>Operational/Organisation security</li><p>
Physical security: Access control, social
engineering, environment. Disaster recovery:
Backups, secure disaster recovery plans.
Business continuity: Utilities, high availability,
backups. Security policies: AU, due care, privacy,
separation of duties, need to know, password
management, SLAs, disposal, destruction, HR
policies. Incident response policy. Privilege
management: Users, groups, roles, single sign
on, centralised/decentralised. Auditing. Forensics:
Chain of custody, preserving and collecting
evidence. Identifying risks: Assets, risks, threats,
vulnerabilities. Role of education/training. Security
documentation. 
</p>
				</ul>

Security+ training course description
 A hands on course aimed at getting delegates successfully through the CompTia Security+ examination. 
What will you learn
Explain general security concepts.
Describe the security concepts in communications.
Describe how to secure an infrastructure.
Recognise the role of cryptography.
Describe operational/organisational security.
Security+ training course details
Who will benefit:
Those wishing to pass the Security+ exam.
Prerequisites:
TCP/IP foundation for engineers
Duration
5 days
Security+ training course contents
General security concepts

Non-essential services and protocols. Access
control: MAC, DAC, RBAC. Security attacks: DOS,
DDOS, back doors, spoofing, man in the middle,
replay, hijacking, weak keys, social engineering,
mathematical, password guessing, brute force,
dictionary, software exploitation. Authentication:
Kerberos, CHAP, certificates, usernames/
passwords, tokens, biometrics. Malicious code:
Viruses, trojan horses, logic bombs, worms.
Auditing, logging, scanning. 
Communication security

Remote access: 802.1x, VPNs, L2TP, PPTP,
IPsec, RADIUS, TACACS, SSH. Email: S/MIME,
PGP, spam, hoaxes. Internet: SSL, TLS, HTTPS,
IM, packet sniffing, privacy, Javascript, ActiveX,
buffer overflows, cookies, signed applets, CGI,
SMTP relay. LDAP. sftp, anon ftp, file sharing,
sniffing, 8.3 names. Wireless: WTLS, 802.11,
802.11x, WEP/WAP. 
Infrastructure security

Firewalls, routers, switches, wireless, modems,
RAS, PBX, VPN, IDS, networking monitoring,
workstations, servers, mobile devices. Media
security: Coax, UTP, STP, fibre. Removable
media. Topologies: Security zones, DMZ, Intranet,
Extranet, VLANs, NAT, Tunnelling. IDS: Active/
passive, network/host based, honey pots, incident
response. Security baselines: Hardening OS/NOS,
networks and applications. 
Cryptography basics

Integrity, confidentiality, access control,
authentication, non-repudiation. Standards and
protocols. Hashing, symmetric, asymmetric. PKI:
Certificates, policies, practice statements,
revocation, trust models. Key management and
certificate lifecycles. Storage: h/w, s/w, private key
protection. Escrow, expiration, revocation,
suspension, recovery, destruction, key usage. 
Operational/Organisation security

Physical security: Access control, social
engineering, environment. Disaster recovery:
Backups, secure disaster recovery plans.
Business continuity: Utilities, high availability,
backups. Security policies: AU, due care, privacy,
separation of duties, need to know, password
management, SLAs, disposal, destruction, HR
policies. Incident response policy. Privilege
management: Users, groups, roles, single sign
on, centralised/decentralised. Auditing. Forensics:
Chain of custody, preserving and collecting
evidence. Identifying risks: Assets, risks, threats,
vulnerabilities. Role of education/training. Security
documentation. 

Educators providing Cyber Security courses in Royston, South Yorkshire

Search By Location