Redhill

<h3><b>Security+ training course description</b></h3>
        <p>
   A hands on course aimed at getting delegates successfully through the CompTia Security+ examination. </p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Explain general security concepts.</li>
					<li>Describe the security concepts in communications.</li>
					<li>Describe how to secure an infrastructure.</li>
                    <li>Recognise the role of cryptography.</li>
					<li>Describe operational/organisational security.</li>
                  </ul>
        <h5>
        <b>Security+ training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Those wishing to pass the Security+ exam.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Security+ training course contents</b></h3>
				<ul>	<li>General security concepts</li><p>
Non-essential services and protocols. Access
control: MAC, DAC, RBAC. Security attacks: DOS,
DDOS, back doors, spoofing, man in the middle,
replay, hijacking, weak keys, social engineering,
mathematical, password guessing, brute force,
dictionary, software exploitation. Authentication:
Kerberos, CHAP, certificates, usernames/
passwords, tokens, biometrics. Malicious code:
Viruses, trojan horses, logic bombs, worms.
Auditing, logging, scanning.
					</p><li>Communication security</li><p>
Remote access: 802.1x, VPNs, L2TP, PPTP,
IPsec, RADIUS, TACACS, SSH. Email: S/MIME,
PGP, spam, hoaxes. Internet: SSL, TLS, HTTPS,
IM, packet sniffing, privacy, Javascript, ActiveX,
buffer overflows, cookies, signed applets, CGI,
SMTP relay. LDAP. sftp, anon ftp, file sharing,
sniffing, 8.3 names. Wireless: WTLS, 802.11,
802.11x, WEP/WAP.
	</p><li>Infrastructure security</li><p>
Firewalls, routers, switches, wireless, modems,
RAS, PBX, VPN, IDS, networking monitoring,
workstations, servers, mobile devices. Media
security: Coax, UTP, STP, fibre. Removable
media. Topologies: Security zones, DMZ, Intranet,
Extranet, VLANs, NAT, Tunnelling. IDS: Active/
passive, network/host based, honey pots, incident
response. Security baselines: Hardening OS/NOS,
networks and applications.
	</p><li>Cryptography basics</li><p>
Integrity, confidentiality, access control,
authentication, non-repudiation. Standards and
protocols. Hashing, symmetric, asymmetric. PKI:
Certificates, policies, practice statements,
revocation, trust models. Key management and
certificate lifecycles. Storage: h/w, s/w, private key
protection. Escrow, expiration, revocation,
suspension, recovery, destruction, key usage.
	</p><li>Operational/Organisation security</li><p>
Physical security: Access control, social
engineering, environment. Disaster recovery:
Backups, secure disaster recovery plans.
Business continuity: Utilities, high availability,
backups. Security policies: AU, due care, privacy,
separation of duties, need to know, password
management, SLAs, disposal, destruction, HR
policies. Incident response policy. Privilege
management: Users, groups, roles, single sign
on, centralised/decentralised. Auditing. Forensics:
Chain of custody, preserving and collecting
evidence. Identifying risks: Assets, risks, threats,
vulnerabilities. Role of education/training. Security
documentation. 
</p>
				</ul>

Systems & Network Training

Network & Security

Network Engineer

Security+

General Admission

<h3><b>Network forensics training course description</b></h3>
        <p>
   This course studies network forensics-monitoring and
analysis of network traffic for information gathering,
intrusion detection and legal evidence. We focus on the
technical aspects of network forensics rather than other
skills such as incident response procedures etc.. Hands
on sessions follow all the major sections.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
    <li>Recognise network forensic data sources.</li>
	<li>Perform network forensics using:<br />
		Wireshark<br />
                    NetFlow<br />
			Log analysis<br />
		
		
</li>
           <li>Describe issues such as encryption.</li>         
                  </ul>
        <h5>
        <b>Network forensics training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Technical network and/or security staff. </p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers.</p>
              
							<li><b>Duration</b></li>
							
              <p>3 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Network forensics training course contents</b></h3>
	<ul>				
					
<li>What is network forensics?</li><p>
What it is, host vs network forensics, purposes,
legal implications, network devices, network data
sources, investigation tools. <br /><span> Hands on </span> whois, DNS
queries.
					
</p><li>Host side network forensics</li><p>
Services, connections tools. <br /><span>Hands on</span> Windows
services, Linux daemons, netstat, ifoconfig/ipconfig,
ps and Process explorer, ntop, arp, resource
monitor.
</p><li>Packet capture and analysis</li><p>
Network forensics with Wireshark, Taps,
NetworkMiner. <br /><span>Hands on</span> Performing Network
Traffic Analysis using NetworkMiner and Wireshark.
</p><li>Attacks</li><p>
DOS attacks, SYN floods, vulnerability exploits,
ARP and DNS poisoning, application attacks, DNS
ANY requests, buffer overflow attacks, SQL
injection attack, attack evasion with fragmentation.
<br /><span>Hands on</span> Detecting scans, using nmap, identifying
attack tools.
</p><li>Calculating location</li><p>
Timezones, whois, traceroute, geolocation. Wifi
positioning. <br /><span>Hands on</span> Wireshark with GeoIP
lookup.
</p><li>Data collection</li><p>
NetFlow, sflow, logging, splunk, splunk patterns,
GRR. HTTP proxies. <br /><span>Hands on</span> NetFlow
configuration, NetFlow analysis.
</p><li>The role of IDS, firewalls and logs</li><p>
Host based vs network based, IDS detection styles,
IDS architectures, alerting. Snort. syslog-ng.
Microsoft log parser. <br /><span>Hands on</span> syslog, Windows
Event viewer.
</p><li>Correlation</li><p>
Time synchronisation, capture times, log
aggregation and management, timelines. <br /><span>Hands on</span>
Wireshark conversations.
</p><li>Other considerations</li><p>
Tunnelling, encryption, cloud computing, TOR.
<br /><span>Hands on</span> TLS handshake in Wireshark.
</p>
	</ul>

Cyber Security demystified

<h3><b>IP security training course description</b></h3>
        <p>
       Connection to the Internet is becoming an essential business tool. This course looks at firewalls, digital certificates, encryption and other essential topics for e-commerce sites. A generic course that looks at firewalls and VPNs. Hands on sessions include using hacking tools and configuring firewalls.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
  <li>Describe: <br />
                    
                    	Basic security attacks<br />
                   		RADIUS<br />
                   		 SSL<br />
                   		IPSec<br />
		VPNs</li>
                        
					<li>Implement digital certificates</li>
					<li>Deploy firewalls to protect Web servers and users.</li>
                    <li>Secure Web servers and clients. </li>
                  </ul>
				
        <h5><b>IP security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Network administrators.<br />
                    Network operators.<br />
                  Security auditors</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>2 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>IP security training course contents</b></h3>
				<ul>	<li>TCP/IP review</li><p>
Brief overview of the relevant headers. <br /><span>Hands on</span>
Download software for course, use analyser to
capture passwords on the wire.
					</p><li>Security review</li><p>
Policies, Types of security breach, denial of
service, data manipulation, data theft, data
destruction, security checklists, incident response.
</p><li>Security exploits</li><p>
The Internet worm, IP spoofing, SYN attack,
hijacking, Ping o' Deathâ¦ keeping up to date with
new threats. <br /><span>Hands on</span> Use a port scanning tool,
use a 'hacking' tool.
</p><li>Firewalls</li><p>
Products, Packet filtering, DMZ, content filtering,
stateful packet inspection, Proxies, firewall
architectures, Intrusion Detection Systems,
Viruses. <br /><span>Hands on</span> Set up a firewall and prevent
attacks.
</p><li>NAT</li><p>
NAT and PAT, Why use NAT, NAT-ALG, RSIP.
</p><li>Encryption</li><p>
Encryption keys, Encryption strengths, Secret key
vs Public key, algorithms, systems, SSL, SSH,
Public Key Infrastructures. <br /><span>Hands on</span> Run a
password-cracking program.
</p><li>Authentication</li><p>
Types of authentication, Securid, Biometrics,
PGP, Digital certificates, X.509 v3, Certificate
authorities, CRLs, PPP authentication, RADIUS.
<br /><span>Hands on</span> Using certificates.
</p><li>Web client and server security</li><p>
Cookies, browser certificates, censorship, PICS.
Operating system security, Web server user
authentication, Restricting access, Logging,
Securing CGI scripts. <br /><span>Hands on</span> Browser security.
</p><li>VPNs and IPSec</li><p>
What is a VPN, tunnelling, L2F, PPTP, L2TP,
IPSec, AH, ESP, transport mode, tunnel mode. 


</p>
				</ul>

IP security foundation for engineers

<h3><b>Cyber security training course description</b></h3>
        <p>
      This cyber security course focusses on the network
side of security. Technologies rather than specific
products are studied focussing around the protection of
networks using firewalls and VPNs.</p>
        
				<h5><b>What will you learn</b></h5>
				<ul>
				 
   <li>Describe: <br />
                    
                    	- Basic security attacks<br />
                   		- RADIUS<br />
                   		- SSL<br />
                   		- VPNs<br />
                         </li>
                         <li>Deploy firewalls and secure networks</li>
                          <li>Explain how the various technologies involved in an
IP VPN work.</li>
                           <li>Describe and implement:<br />
                            
                         
					- L2TP<br />
					- IPsec<br />
                    - SSL<br />
                   - MPLS, L3, VPNs.</li>
                  </ul>
        <h5>
        <b>Cyber security training course details</b> </h5>
				<div>
					<div>
						<ul>
							<li><b> Who will benefit:</b> </li>
							
              <p>Anyone working in the security field.</p>
              
							<li><b>Prerequisites:</b></li>
							
              <p>TCP/IP foundation for engineers</p>
              
							<li><b>Duration</b></li>
							
              <p>5 days</p>
              
							
              
              
						</ul>
					</div>
				</div>
      <h3><b>Cyber security training course contents</b></h3>
				<ul>	<li>Security review </li><p>
Denial of service, DDOS, data manipulation, data theft, data destruction, security checklists, incident response.

</p><li>Security exploits </li><p>
IP spoofing, SYN attacks, hijacking, reflectors and amplification, keeping up to date with new threats.
<br /><span>Hands on</span> port scanning, use a 'hacking' tool.

</p><li>Client and Server security </li><p>
Windows, Linux, Log files, syslogd, accounts, data security.
<br /><span>Hands on</span> Server hardening.

</p><li>Firewall introduction </li><p>
What is a firewall? Firewall benefits, concepts.
<br /><span>HAnds on</span> launching various attacks on a target.

</p><li>Firewall types </li><p>
Packet filtering, SPI, Proxy, Personal. Software firewalls, hardware firewalls. Firewall products.
<br /><span>Hands on</span> Simple personal firewall configuration.

</p><li>Packet filtering firewalls </li><p>
Things to filter in the IP header, stateless vs. stateful filtering. ACLs. Advantages of packet filtering.
<br /><span>Hands on</span> Configuring packet filtering firewalls.

</p><li>Stateful packet filtering </li><p>
Stateful algorithms, packet-by-packet inspection, application content filtering, tracks, special handling (fragments, IP options), sessions with TCP and UDP. Firewall hacking detection: SYN attacks, SSL, SSH interception.
<br /><span>Hands on</span> SPI firewalls.

</p><li>Proxy firewalls </li><p>
Circuit level, application level, SOCKS. Proxy firewall plusses and minuses.
<br /><span>Hands on</span> Proxy firewalls.

</p><li>Firewall architectures </li><p>
Small office, enterprise, service provider, what is a DMZ? DMZ architectures, bastion hosts, multi DMZ. Virtual firewalls, transparent firewalls. Dual firewall design, high availability, load balancing, VRRP.
<br /><span>Hands on</span> Resilient firewall architecture.

</p><li>Testing firewalls </li><p>
Configuration checklist, testing procedure, monitoring firewalls, logging, syslog.
<br /><span>Hands on</span> Testing firewalls.

</p><li>Encryption </li><p>
Encryption keys, Encryption strengths, Secret key vs Public key, algorithms, systems, SSL, SSH, Public Key Infrastructures.
<br /><span>Hands on</span> Password cracking.

</p><li>Authentication </li><p>
Types of authentication, Securid, Biometrics, PGP, Digital certificates, X.509 v3, Certificate authorities, CRLs, RADIUS.
<br /><span>Hands on</span> Using certificates.

</p><li>VPN overview </li><p>
What is a VPN? What is an IP VPN? VPNs vs. Private Data Networks, Internet VPNs, Intranet VPNs, Remote access VPNs, Site to site VPNs, VPN benefits and disadvantages.

</p><li>VPN Tunnelling </li><p>
VPN components, VPN tunnels, tunnel sources, tunnel end points, tunnelling topologies, tunnelling protocols, which tunnelling protocol? Requirements of tunnels.

</p><li>L2TP </li><p>
Overview, components, how it works, security, packet authentication, L2TP/IPsec, L2TP/PPP, L2 vs L3 tunnelling.
<br /><span>Hands on</span> Implementing a L2TP tunnel.

</p><li>IPsec </li><p>
AH, HMAC, ESP, transport and tunnel modes, Security Association, encryption and authentication algorithms, manual vs automated key exchange, NAT and other issues.
<br /><span>Hands on</span> Implementing an IPsec VPN.

</p><li>SSL VPNs </li><p>
Layer 4 VPNs, advantages, disadvantages. SSL. TLS. TLS negotiation, TLS authentication. TLS and certificates.
<br /><span>Hands on</span> Implementing a SSL VPN.

</p><li>MPLS VPNs </li><p>
Introduction to MPLS, why use MPLS, Headers, architecture, label switching, LDP, MPLS VPNs, L2 versus L3 VPNs. Point to point versus multipoint MPLS VPNs. MBGP and VRFs and their use in MPLS VPNs.
<br /><span>Hands on</span> Implementing a MPLS L3 VPN.

</p><li>Penetration testing </li><p>
Hacking webservers, web applications, Wireless networks and mobile platforms. Concepts, threats, methodology.
<br /><span>Hands on</span> Hacking tools and countermeasures.

</p>
				</ul>

Cyber security for engineers

Harpenden

<p>A flexible, modular-based, programme to heighten participants' awareness of ways in which their operations can affect the environment, the principles of environmental management and the practical steps they need to take as individuals and as an organisation to improve environmental performance.</p>Depending on the course modules selected, this programme will give participants:<ul><li>Increased awareness of relevant environmental issues</li><li>A greater understanding of, and commitment to, the organisation's environmental management programme</li><li>Preparation for any responsibilities they may have under an Environmental Management System</li><li>Further benefits according to options chosen</li></ul><section>
                    <h3>1 Environmental awareness</h3><ul><li>Definition of 'the environment'</li><li>Key environmental issues<ul><li>Global warming</li><li>Ozone depletion</li><li>Acid rain</li><li>Air quality</li><li>Water pollution</li><li>Contaminated land</li><li>Land take and green belt shrinkage</li><li>Resource usage</li><li>Habitat destruction and species extinctions.</li></ul></li><li>Option: This module can be used to explain the key environmental issues related to the activities of your own organisation. Diagrams, photos, pictures, examples and statistics relevant to your own organisation are used where possible to illustrate the points being made.</li></ul> <h3>2 Environmental legislation</h3><ul><li>Key elements of environmental legislation affecting the activities of your organisation - including international, European and UK legislation.</li><li>Legislation of particular relevance to your organisation - how it affects the operations of your organisation</li><li>Option: Legislation can be dealt with according to which aspect of the environment it protects (eg, air, water, waste) or which part of your organisation's activities it affects</li><li>Consequences of breaching legislation</li></ul> <h3>3 Environmental management systems</h3><ul><li>Overview of what an environmental management system is<ul><li>How is an Environmental Management System (EMS) designed and put together?</li><li>Key elements (emphasising Plan - Do - Check - Review cycle)</li><li>The need to continually improve</li></ul></li><li>Pros and cons<ul><li>Reasons for having an EMS</li><li>Benefits of an EMS</li><li>Consequences of not managing the environment</li><li>Costs of installing an EMS</li></ul></li><li>Explanation of ISO 14001 and EMAS standards and guidance as applicable to the EMSs of your organisation<ul><li>Overview of your organisation's EMS</li><li>How it was set up / is being developed / operates</li><li>Who is responsible for it</li><li>Key parts of system (eg, environmental policy, objectives and targets) identified and discussed</li><li>EMS documentation - what and where it is.</li></ul></li><li>Workshop option: Brainstorm 'Pros and cons' with the participants, come up with all their ideas for good and bad things about EMS and demonstrate that the 'good' list is longer than the 'bad'</li></ul> <h3>4 Environmental consequences</h3><ul><li>Define what an environmental impact is and discuss how they are determined, with reference to the EMS</li><li>Identify why we want to determine the environmental consequences of operations and activities; how they are used in the EMS for planning, and reducing the impact on the environment</li><li>Establish key environmental consequences of construction and operational activities on the site; discuss significance ranking and the control measures in place in your organisation.</li><li>Workshop option: In small groups, participants are asked to identify the impact on the environment of your organisation's activities or a part of their activities. They are then asked to rank these impacts in terms of their significance, using guidelines provided to help them be aware of the contributing factors (eg, frequency, severity). For a selected number of the impacts, the participants are asked to identify what control measures there are and which of these they play a part in. All stages can be discussed with trainers as a whole group at various stages during the workshop.</li></ul> <h3>5 Protected species, nature conservation and invasive weeds</h3><ul><li>Nature conservation, landscape and visual issues in the planning process - overview of key nature UK wildlife legislation, EIA, appropriate timing of surveys, Hedgerow regulations and landscape and visual impact issues</li><li>Ecological issues - ecological legislation, significant species, hedgerows</li><li>Archaeology in the development process - why archaeology is important, organisation in the UK, legislation and planning guidance</li><li>Construction phase issues and consents - major environmental issues during construction, including water resources and land drainage consents, discharges to land or water, water abstraction, public rights of way, tree protection, waste management, Special waste, noise, good practice pollution control and Environmental Audits</li><li>Identification and management of invasive weeds - including legal position regarding management</li></ul> <h3>6 Chemicals and fuels handling and storage</h3><ul><li>How health and safety management is closely linked to environmental management of materials</li><li>Planning - what mechanisms are in place for planning materials use; legislation, guidance and policies which define how to manage materials</li><li>Materials storage - what are the considerations for storing materials, covering:<ul><li>Labels: what are the different types and what do they tell us?</li><li>Storage facilities: what are the requirements for safe storage of materials (eg, signs, secondary containment, access, segregation, lids/covers)</li><li>Handling: safe handling for protecting the environment, organisational procedures, high risk situations (eg, decanting, deliveries), how to reduce the risks (eg, use of funnels, proper supervision, training)</li><li>COSHH and MSDS: brief explanation of legislation and its role in environmental control of hazardous materials, how to use the information provided by COSHH assessments</li></ul></li><li>Option: These sessions can be illustrated with photographs/pictures and examples of good and bad storage and handling practices</li><li>Workshop Options: Labelling Quiz - quick-fire quiz on what different labels tell us; Build a Storage Facility - participants are asked to consider all the environmental requirements for building a safe storage facility for their organisation</li></ul> <h3>7 On-site control measures</h3><ul><li>Overview of the legislation associated with nuisance issues on site and mitigating problems when they arise</li><li>Examples of bad practice, including fuel storage tanks and mobile equipment - costs involved with prosecution of fuel spills, remediation costs, management costs, legal fees, bad PR coverage</li><li>Identification and management of contaminated land and relevant legislation</li><li>Workshop option: Participants are provided with a site plan containing information on site features, environmental conditions and indications of potential issues</li></ul> <h3>8 Waste management</h3><ul><li>Why worry about waste? - a look at how waste disposal can impact on the environment, illustrated by examples of waste-related incidents, statistics on waste production on national, industry-wide and organisational levels, landfill site space, etc</li><li>Legislation - overview of the relevant legislation, what the main requirements of the regulations are, what penalties there are, and the associated documentation (waste transfer notes)</li><li>Waste classification - a more in-depth look at how waste is classified under legislation according to hazardous properties, referring to Environment Agency guidance</li><li>Handling and storage requirements - what are the requirements of the applicable waste legislation and how are they covered by organisational procedures? Examples of good and bad environmental practice associated with handling and storing waste.</li><li>Workshop option: 'Brown bag' exercise - participants pass round a bag containing tags each with a different waste printed on. They are asked to pick out a tag and identify the classification and the handling, storage and disposal requirements for the waste they select</li><li>Waste minimisation - overview of the waste minimisation 'ladder' and its different options (elimination, reduction, reuse and recycling), benefits of waste minimisation, examples of waste minimisation techniques</li><li>Workshop option: Participants are asked to identify opportunities that actually exist within the organisation for minimising production of waste that are not currently being taken advantage of</li></ul> <h3>9 Auditing</h3><ul><li>Requirements for environmental auditing of operations</li><li>Auditing the EMS</li><li>Types of internal and external audits</li><li>Requirements EMS standards (ISO 14001 and EMAS)</li><li>Carrying out internal audits and being prepared for external audits</li><li>Workshop options:<ul><li>Mock audit 'Brown Bag' - can be used either for trainers to test participants as if they were in an audit situation, or for the participants to test each other and practice their auditing technique. The bag contains tags each with a different topic printed on (eg,<br />waste skips); participants pass the bag round and select a tag; they are then questioned by the trainer or another participant about that topic as if they were in an audit situation. If the participants are auditing each other, they will be provided with a set of guidelines to keep in mind during the workshop.</li><li>Virtual auditing - a more practical workshop where participants review photographs of situations/activities relevant to the organisation's operations. They are asked to identify all the good and bad environmental practices that are occurring in the situations.</li></ul></li></ul> <h3>10 Incident response</h3><ul><li>What should you do when an incident does happen?</li><li>What should be in a spill kit?</li><li>When should you call in the experts?</li><li>When should you inform the Environment Agency or Environmental Health Officer?</li><li>Workshop option: The participants are provided with some incident scenarios and asked to develop a response to the incident</li></ul> <h3>11 Monitoring and reporting</h3><ul><li>Environmental monitoring programmes and procedures</li><li>Monitoring and reporting as control measures for environmental consequences</li><li>Monitoring and environmental 'STOP' card systems - personal and behavioural monitoring and reporting</li></ul> 


                </section>

Educators providing Incident Response courses in Bradford

Courses matching "Incident Response"

Security+

By Systems & Network Training

Definitive network forensics for engineers

By Systems & Network Training

Cyber Security demystified

By Systems & Network Training

IP security foundation for engineers

By Systems & Network Training

Cyber security for engineers

By Systems & Network Training

Environmental awareness and management (In-House)

By The In House Training Company

Search By Location