Network and Communications Security Workshop

Makati City, Philippines

This course, you will learn how to properly position your security appliance such as Firewall, IPS/IDS, etc. and evaluate existing security products to achieved our goals. It is important to properly position our appliance and product at the design of our network because this will make it harder for the attacks to enter into our networks. To strengthen more our security, physical security, against malware, data loss protection techniques, encryption & PKI, monitor and protection against security incidents and compliance, ethics and law are also tackled in our course.

Who Should Attend:
Information Assurance Managers/Auditors, System Implementers/Administrators, Network Security Engineers, IT Administrators, Auditors/Auditees, DoD Personnel/Contractors, IT Professors, Federal Agencies/Clients

Course Outline:

A. The Basics
• Why Security (The Technical Aspect) In Information Is Needed?
• Network And Communication Systems Threats
• Communication Protocol Basics
o An Overview Of TCP/IP & Networking
o An Introduction To Ports And Protocols
o Sniffing And Intercepting Traffic
o Man In The Middle Attacks
o Overview Of Vulnerability Assessment
o What Is Penetration Testing?
o What Does It Take To Be A Penetration Tester?
o Responsibilities Of A Penetration Tester
o Why Is Penetration Testing Needed?
o Choosing A Penetration Testing Vendor
o Methodologies/Standards In Penetration Testing
o Kinds Of Penetration Testing
 Network Penetration Testing
 Web Application Penetration Testing
 Database Penetration Testing
 Routers And Switches Penetration Testing
 Firewall Penetration Testing
 Intrusion Detection System Penetration Testing
 Wireless Network Penetration Testing
 Denial-Of-Service Penetration Testing
 Password Cracking Penetration Testing
 Social Engineering Penetration Testing
 VoIP Penetration Testing
 VPN Penetration Testing
 Telecommunication And Broadband Communication Penetration Testing
 Email Security Penetration Testing
 Security Patches Penetration Testing
 Data Leakage Penetration Testing
 Open Source And Commercial Tools
 The Live CD Approach
 Hacking Using Backtrack
 Risks Associated With Penetration Testing
B. Vulnerability Assessment
• Threat And Impact Analysis
• Social Engineering/Information Gathering
o Passive
o Active
o Reconnaissance And Enumeration
 Google Hacking
 DNS Reconnaissance
 SNMP Reconnaissance
 SMTP Reconnaissance
 Netbios Information Gathering
 Port Scanning
 Tools And Online Resources
 Vulnerability Scanning

C. Network Penetration Testing
1. Hacking Networks
• Network Devices
• Web Servers
• Email Servers
1. Wireless Penetration Testing
2. Trojans, Backdoors And Rootkits
3. Hacking Windows
4. Hacking Linux
5. Client Side Attacks
• XSS Vulnerability
• Common Browser And E-Mail Client Hacking
• E-Mail Spoofing/Social Engineering
• HTTP Session Hijacking
• Compromise An End-Users Machine Using Modern Exploits
• Dictionary Attack

D. Report Generation
• Correlation Of Testing Reports
• Report Deliverables
o Executive Reports
o Technical Reports

E. Positioning Security Appliances
1. Access Controls
2. Firewall
3. Intrusion Detection System/Intrusion Prevention System
4. Network Access Control
5. URL Filters
6. Security Information Event Management
7. Network Behaviour Analysis
8. Email Security Gateways
F. Evaluating Modern Security Products
1. Access Controls
2. Firewall
3. Intrusion Detection System/Intrusion Prevention System
4. Network Access Control
5. URL Filters
6. Security Information Event Management
7. Network Behaviour Analysis
8. Email Security Gateways
G. Encryption & PKI

Fee: P 20,000 plus VAT

Training Package:
Training Materials
Certificate of Completion
Meals (Lunch and AM/PM Snacks)

Event organizer: Judy Ann

Register for the Network and Communications Security Workshop