Please fill up the below form
and our Career Consultant will
contact to you in next 12 hours!
Live Practice Labs
Our live access labs provide full console access to a self-paced study lab environment. This is an ideal place to re-work lab exercises from class or to experiment with advanced configuration from your home or hotel room. Find out which works for you and get a downloadable eKit when you enroll.
|
|
Certificate of Course Completion
Objective of the course
Pre-requisite
Certification Phase This certification has 3 phases: Phase I - Security Fundamentals UNIT 1: Concepts Basic Security Principles Linux Default Install Installer Firewall Options Post-Install Firewall Minimization - Discovery Service Discovery Hardening Security Concepts UNIT 2: Boot Security Explain run-time boot loader vulnerabilities Explore single-user mode (rootshell) and its inherent problems Modify default GRUB startup options & examine results Secure boot loader using MD5 hash UNIT 3: Shell Security Discuss Teletype Terminals (TTYs) and Pseudo Terminals (PTS) Restrict privileged login Identify user-logon history and correlate to TTYs Identify current user-connections - console-based and network-based Use lsof to identify open files and sockets UNIT 4: Reconnaissance & Vulnerability Assessment Tools Discuss Stage-1 host/network attack concepts Usage of NMAP reconnaissance tool to increase effectiveness Prepare system for Nessus vulnerability scanner installation - identify/install dependencies UNIT 5: Password Security and PAM Unix Passwords Password Aging Auditing Passwords PAM Implementation, Management, and Control Statements PAM Modules Usage of John the Ripper Cracklib Using pam_listfile to Implement Arbitrary ACLs Using pam_limits to Restrict Simultaneous Logins Using pam_nologin to Restrict Logins Using pam_access to Restrict Logins UNIT 6: XINETD - TCPWrappers - Chattr - Lsattr - TCPDump Configure XINETD to restrict communications at layer-3 and layer-4 Restrict access to XINETD-protected daemons/services based on time range Discuss TCPWrappers security concepts & applications Enhance Telnetd security with TCPWrappers Discuss chattr applications & usage Identify & flag key files as immutable to deter modifcation Configure TCPDump to intercept Telnet & FTP - clear-text traffic Use Ethereal to examine & reconstruct captured clear-text traffic UNIT 7:GNU Privacy Guard (GPG) - Pretty Good Privacy (PGP) Compatible - PKI Generate asymmetric RSA/DSA GPG/PGP usage keys - for multiple users Create a local web of trust Perform encrypts/decrypts and test data-exchanges Import & export public keys for usage Use GPG/PGP with Mutt Mail User Agent (MUA) UNIT 8:Syslog Security Discuss Syslog concepts and applications Explain Syslog semantics - facilities & levels - message handling & routing Focus on security-related Syslog facilities Examine security logs managed by Syslog 
Go Up
Phase II UNIT 1: Secure Network Time Protocol (NTP) The Importance of Time Time Measurements Terms and Definitions Synchronization Methods NTP Evolution Time Server Hierarchy Operational Modes NTP Clients Configuring NTP Clients and Servers Securing NTP NTP Packet Integrity Useful NTP Commands UNIT 2: AIDE Host Intrusion Detection Using RPM as an HIDS Introduction to AIDE Concepts of AIDE AIDE Installation AIDE Policies AIDE Usage UNIT 3: Rootkits Discuss rootkits concepts & applications Describe privilege elevation techniques Obtain & install T0rnkit - rootkit Identify system changes due to the rootkit Implement T0rnkit with AIDE to identify compromised system objects Implement T0rnkit with chkrootkit to identify rootkits T0rnkit - rootkit - cleanup Implement N-DU rootkit Evaluate system changes UNIT 4: Bastille Linux - OS-Hardening Discuss Bastille Linux system hardening capabilities Obtain Bastille Linux & perform a system assessment Install Bastille Linux Evaluate hardened system components UNIT 5: OpenSSHv2 Security Introduction - Topology - Features Identify Key OpenSSHv2 Components OpenSSHv2 Client - /ssh/ Secure Copy Program (SCP) - /scp/ Secure File Transfer Program (SFTP) - /sftp/ SSH Key Scan Utility - /ssh-keyscan/ SSH Key Generation Utility - /ssh-keygen/ Public Key Infrastructure (PKI) - Password-less Logins Port Forwarding - Pseudo-VPN Support - /Local|Remote|Gateway/ Secure OpenSSHv2 Implementation
Go Up
Phase III Advance Linux Security
Whitepaper Work
Projects
Placement Workshop
Trainings
|
