Subject: Security Training Course Availability - Unix Countermeasures, Intrusion Detection, Network Security - Wash DC area

From: David Dickson <[email-masked]>
Date: Sun, 11 Mar 2001 09:52:44 -0500

To:        [email-masked]

PLEASE FORWARD THIS MESSAGE TO YOUR AGENCY PERSONNEL INVOLVED WITH NETWORK and 
IT SECURITY TRAINING.

The following THREE courses are available now.  See our web site for course dates, 
prerequisites and more details on course content.  Visit www.marketaccess.org 
and the courses will be listed at our home page along with dates available.

Course One:  Network Security for Managers - Two day course

Course Outline: 
Introduction 
Security History (famous attacks) 
Security Principles 
Common Attacks 
Discussion on the most common attacks today and how they relate to each security 
principle 
Find out what can happen to your network as a result 
Demonstration of these attacks - see first-hand how they are executed 
Protection 
Risk Assessment: in-depth coverage on every aspect of a network 
Vulnerability Prevention: common mistakes made by administrators 
Discussion on network security tools and their purpose 
Steps and recommendations to secure your network 
Web Site and Server Protection 
Find out what might be compromised and obtain advice on how to prevent such loss 
Budget Analysis 
Discussion on the "bottom line" 
Security Policy 
Why you need one and who should be involved 
In-depth coverage of the topics which should be addressed in an effective policy 
Incident Handling 
Detailed discussion on the necessary steps to take if something happens

Network Security for Managers - Fee:  $695.00

Course Two:  UNIX Countermeasures - 5 Days (Hands-on)

Course Highlights

Identification & Authentication (I&A) -- Learn various methods of I&A including 
their weaknesses, if any, to include simple passwords, skey, and strong bind 
Discretionary Access Control (DAC) -- Learn what DAC is and how it can be used 
to make the operating system more resistant to unauthorized access 
Audit -- Learn how to configure UNIX platforms where audit files are meaningful 
as well as how to add extra program audit capabilities 
Network Services 
Gain extensive knowledge about various network services and how to configure 
them securely using TCP wrappers or the new super daemon caked XINITD. The following 
are some of the services that students will configure in class: 
Samba (NT file sharing) 
NFS (UNIX file sharing) 
HTTP 
Secure Shell 
Network Time Protocol (NTP) 

Unix Countermeasures - Government Fee $2,475.00

Course Three:  Intro to Network Security and Intrusion Detection - 5 days - Hands 
on

Course Outline

Introduction (Hands-On) 

Quick familiarization of Linux 
Gain super-user access with a password cracker 
Security History (Lecture) 
Security, in general 
Discussion of significant security events 
Definition of terms 

Intrusion Detection (Mostly Hands-On) 

Discussion of how logs and various tools can be used to detect unauthorized activities 
Hands-on experience with three different sniffers 
How to read audit files 
Hands-on experience with several system commands and various tools to detect 
unauthorized activity 

Reconnaissance (Hands-On)

Students will learn how to scan and detect scans from several different manual, 
as well as automated tools including: 
Basic UNIX commands 
Nmap 
ISS 
NetCat 
Sendmail Version Scan 

Low-Level Access (Hands-On)

Students will run a series of several “attacks and detect labs” to gain low-level 
access to various servers. Examples of the exploits include: 
HTTP Remote Buffer Overflow 
NFS Attack 
NIS Attack 
X Windows Attack 
DNS Spoofing 

Privileged Access (Hands-On)

Students will use their low-level access knowledge gained in previous labs to 
gain access as a super user. Some exploits they will perform and detect include: 
IMAP Buffer Overflow 
DIP Buffer Overflow 
EUID Buffer Overflow 

Covert Access (Hands-On & Discussion)

Although covert access is often difficult to detect, students will learn how 
to recognize when someone is using a covert channel. They will also learn how 
intruders conceal their real identity and hide in normal network traffic from 
being detected by Intrusion Detection Systems and Audit Logs. Following are examples 
of which the students will gain hands-on experience: 
UNIX Shell Games 
NetCat 
ICMP Covert Channel 
Trojan Horses 
NetBus 
Back Orifice 

Denial of Service (Hands-On & Discussion)

These attacks are commonly executed on today's networks and are often difficult 
to trace back to the actual attacker. However, sometimes the evidence needed 
can be found in your Audit System. Students will learn how these attacks work 
and how to detect them. Examples of some attacks students will learn to perform 
and detect include: 
Land Attack 
UDP Bomb 
Smurf Attack 

Course Fee - Intro to Network Security and Intrusion Detection - 5 days - Hands 
on - Government Rate:  $2,475.00

For more information on these courses or to register, call Margo McPhee, Verizon 
Federal Network Systems (formerly BBN) at 1-800-334-1553.