Understanding Network Security™

Training Format: ILT
Course Code: IP_NETWORKSECURITY

For a Class Schedule Contact TRA a 800.872.4736

Description

An enormous number of Network Security approaches are available to assure secure communications for a wide range of requirements. The landscape runs the gamut from firewall configuration to Virtual Private Network services to application-level cryptography. Each comes with its own cost and management issues, so the design of a Network Security solution for any organization involves many tradeoffs. This course describes the different types of internal and external attacks that may occur, best practices for protecting against internal and external attacks, and introduces the various security techniques for protecting against them.

Prerequisites

Students may find it helpful to have a basic understanding of networking by taking:

Understanding the Basics of Data Communications™

Designed for

Students who want to understand the goals and implementation options for how to protect networks against internal and external intercept, intrusion, and deception.

Expected Outcome

Upon completion of this course, students should be able to:

Understand the possible security challenges
Explain the implementation options

Course Outline

What is the IP Network Security Problem

Objectives, Overview and History
Current Goal of Secure IP Networking
Security Requirements

Policy and Procedures

Systematic Approach to Security
Policy Definition
Layered Defenses: Physical, Network, System, Information (Data) Security
Defense in Depth: Network Perimeter, Server, Client, Intrusion and Anomaly Detection

Protocols and Cryptography Overview

Security Protocols and Services
Cryptography Overview: Symmetric vs. Asymmetric, Public vs. Private Keys
Key Exchange and Delivery

Anatomy of a Firewall

Types and Basic Functions
Advanced Firewalls: Intrusion Detection, Deep Inspection, Integrated Security Appliances
Deployment Issues

Virtual Private Networks

Types of VPNs
VPN Technologies: MPLS, PPTP, L2TP, IPSec, TLS, SSH
Evolution and Future Directions

IP Security (IPSec)

Securing IP Packets (AH and ESP)
Authentication and Key Exchange (IKE)
Extensions for Remote Access
Evolution of IPSec and Future Directions

Secure Stream Protocols

Secure Sockets Layer (SSL), Transport Layer Security (TLS)
Secure Shell
Secure Applications

Wireless Network Security

Wired Equivalent Privacy
Wi-Fi Protected Access
802.11i, 802.1x Access Control
Evolution and Future Directions

Server and Client Security

Network-Borne System Threats: Viruses, Spyware, Spam
System Security Measures
Network Admission and Endpoint Control

Example Hacker Attacks / Case Studies

Attacks Against Perimeter Firewalls
Attacks Against IPSec VPNs
Attacks Against Applications
Attacks Against Mobile Devices
Evolution of Attack Sources, Tools, Vectors, and Future Threats