Advanced Network Infrastructure Security

Course Overview

The rapid changes in networking technologies and attack vectors mean that advanced infrastructure-level network security knowledge constantly requires updating. This vendor neutral course provides the knowledge administrators and professionals require to combat the latest threats.

While this course covers the latest conceptual advances in network security and is designed to examine the skills and methodologies used by attackers, it also ensures that attendees understand the latest advances in network infrastructure technologies. Techniques are taught on avoiding or corrupting traditional network security devices, methodologies for discovering and mapping networks are covered in detail - while also providing guidance on securing against these attacks.

Prerequisites

An advanced understanding of TCP networking and an awareness of the majority of the technologies within the course are required.

Ideally 3+ years of hands-on network design or management experience, coupled with attendance of an Ethical Hacking type course.

Module 1: Introduction

Overview of Course

Review of the Key Protocols

Review of Network Components

Module 2: Firewall Technologies in Depth

Network Routing and Perimeters

Basic Firewall Types

Stateful / stateless filtering

Session Management

Layer 2 Firewall technologies

Layer 3 / 4 Firewall Technologies

Layer 7 Firewall Technologies

Firewalls as an Architectural Component

Why filter internally?

Common Design and Deployment Problems

Next Generation Firewall Technologies

Module 3: IDS Technologies in Depth

Basic IDS Types

Host IDS in Context

Network IDS in Context

Common Design and Deployment Problems

Identifying and Attacking IDS

The Future for IDS

Module 4: Other Protection Devices and Strategies

Web proxies

Egress filtering

Network segregation

Remote access

Anti-Virus Technologies

Content Filtering

Deployment Strategies

Load Balancing

Module 5: Authentication and Authorisation

The Network Protocols

Authorisation Technologies

Authentication Technologies

Deploying Authentication/Authorisation Technologies

Module 6: Attacking a Large Network

Traditional Mapping Techniques

Issues Encountered in Large Environments

Egress connections

In-depth Firewall & Rulebase Analysis

Identifying and Attacking firewalls

Module 7: Secure Architecture Design

Network Segregation

Corporate Gateways

Extranet Environments

Backup & Management Networks

Content Delivery Networks

Module 8: Protection Strategies

New Infrastructure Design

Updating Existing Infrastructure

Secure Management of Protection Devices

Patch Management

Event Logging and Analysis

Disaster Recovery

Incidence Response

Outsourced Management

Advanced Network Infrastructure Security / NGS003