Materi Dasar Cybersecurity

Materi Dasar Cybersecurity

http://www.globalknowledge.com/training/course.asp?pageid=9&courseid=13526&country=United+States

Course Outline

1. Cybersecurity Introduction, Job Roles, and Functions

Security Fundamentals
- Security Importance
- Human Influence
Vulnerabilities
- Typical Attack Sequence
- Social Engineering
- Footprinting
- Well-Known Parts
- Port Scanning
- Password/Passphrase Vulnerabilities
- Track Covering

2. Social Media Concerns

Social Media
- Types
- Vulnerabilities
- Social Networking Sites
- Social Engineering
Phishing
- Phishing via E-mail
Online Attacks
- Statistical Data
- Security Breach Sources

3. Cyber Awareness

CNCI
- Definition and Purpose of CNCI
- CNCI Initiative Details
Legalities
- Laws and Rules
- Legal Compliance
Cyber Attacks
- Malware
- Viruses
- Worms
- Logic Bombs
- Botnet
- Trojan Horse
- OSI Model
- DNS

4. Cyber Services

Cyber Threats
- Denial of Service Vulnerabilities
Server Hardening
- Web Server Hardening
- Mail Server Hardening
- FTP Server Hardening
- DNS Server Hardening
- Other Servers
- Workstation Considerations
- Network Appliances
- Wireless Access Hardening
- VLAN Security
- Software Attacks

5. Risk Management and Assessment

Risk Management
Risk Management Process
- Steps
- ALE Formula
- CRAMM Process
- Risk Management Lifecycle
- Protected Assets
- CIA Triad
Threat Determination Process
Risk Assessment
- Scenarios
- Criticality
- Prioritization
Risk Management Lifecycle
- Steps
- Policy
- Assessment
- Baselines and ePolicy
Vulnerabilities
- Vulnerability Categories
- Self-Assessment
- Weak Links in Security
- Technical Controls
- Due Care
- Insurance against Losses

6. Security Policy Management

Security Policies
- Security Policy Definition
- Security Policy Use
- Security Policy Importance
- Legal Issues
- Policy Example
- Policy References
- Policies, Guides, Standards, Procedures, and Controls
Coverage Matrix
- Preparing a Coverage Matrix
- Example Security Coverage Matrix
- Granular View of a Security Matrix
Basic Policies

7. Vulnerability Assessment and Tools

Vulnerability Testing
Penetration Testing
- Risks of Penetration Testing
- Methodologies
- Testing
- Technology Testing Tools

8. Business Continuity Planning

Disaster Types
Disaster Recovery Plan
- Goals
- Steps for Creation
- Contents
- Design Requirements
- Priorities
- Recovery Strategies
- High Availability Considerations
- Data Collection
- Written Plan Documentation
- Plan Testing Sequence
Business Continuity Planning
Business Continuity Planning Process
- BCP Process Steps
- Controls

9. Host Security

Types of Hosts
- General Configuration Guidelines
Clean Systems
Unnecessary Services
- Rules to Follow
- Warning Banners
Limiting Access
- Administrators
- Users
- Configuring and Logging
- Security Patches
Security Baselines
- Traffic Filtering
Monitoring

10. Architectural Integration

General Security Integration
Services
- Needs
Security Zones
- Filtering
- Screened Subnets
- Trusted Zones
Devices
- Routers
- Firewalls
- DMZ Hosts
Extenuating Circumstances
- Business-to-Business
- Exceptions to Policy
- Special Services and Protocols
- Configuration Management
Development
- Certification and Accreditation
- Common Criteria

11. Authentication and Cryptography

Authentication
- Identification
- Issues
Cryptosystems
- Elements
- Password Protocols
- Hashes
- Kerberos
- Symmetric Encryption
- Asymmetric Encryption
- Digital Signatures
Certificate Services
- Certificate Authorities
- Registration Authorities
- Models
- Policies
- Lifecycle
- Distribution

12. Securing Communications

Terminology
- Tunnels
- Applying Cryptography to OSI Model
Securing Services
- E-Mail
- FTP and Telnet
Transport
- SSL and TLS
- Gateway-to-Gateway VPN
- IPSec
Wireless
- Wireless Weakness
- Wireless Security
Steganography and NTFS Data Streams
- Steganography
- NTFS Alternate Data Streams

13. Intrusion Detection and Prevention Systems

Intrusion
- Definition
Defense in Depth
- Perimeter Router
- Firewall Monitoring
- Network Device Logging
- Host Monitoring
- Events Correlation
IDS/IPS
- Placement of IDS Monitors and Sensors
- Monitoring
- Host-Based and Network-Based Differences
- Policy Management
- Behavioral Signatures
IDS/IPS Weakness
- Encryption
- Coverage
- Overwhelmed
- False Positives
- Incorrect Configuration

14. Cyber Challenge Activities

Network Analysis Review

15. Forensic Analysis

Incident Handling
- Response
- Time and Reaction Sensitivity
- Issues for Consideration
- Response Procedures
- Evidence
Logging
- Process
- Log Analysis Tools

16. Cyber Evolution

Cyber Organization
- Cyber Forces
- Internet Leadership
- Internet Defenders
Cyber Future
- Future Challenges
- Evolving Needs
- Cyber Maturity Barriers
- Einstein 2 and Future
- Goals

Labs

Lab 1: Social Media

Phishing and Spyware
Windows Activation
Antivirus Notice
Commercial Web Site

Lab 2: Cyber Awareness

Scanning with Nmap
Scanning with Zenmap

Lab 3: Cyber Services

Telnet Banner Grabbing
FTP Banner Grabbing
SMTP Banner Grabbing
Netcat

Lab 4: Risk Assessment

Use Nessus to Identify Assets and Threats
Asset Worksheet Completion

Lab 5: Business Continuity Plan

Team Members/Key Contacts
Team Status Reporting
Priority IT Systems
IT System Backup Details
Recovery Process

Lab 6: Vulnerability Assessments and Audits

Mapping Site Content Using Teleport Pro
Using Cheops for Graphical Display of Network
Working with LANguard

Lab 7: Host Security - Malware

Connecting Remotely
RECUB Service

Lab 8: Authentication and Cryptography

Perform activities using Ettercap utility
Perform and Witness a Man in the Middle (MITM) Attack

Lab 9: Cryptographic Attacks

Using Steganographic Tools
Advanced NTFS File Streaming

Lab 10: SNORT (Eagle X IDS) Install

Installing Eagle X
Configuring Eagle X
Configure Rule to Ignore Hosts in SNORT

Lab 11: Cyber Challenge Activities

Identifying Assets and Threats
Completing Asset Worksheet

Lab 12: Forensics Analysis IIS Event Log Analysis

Identifying Common Attacks through IIS Log Analysis

Comments