Management Skills (5 day)

Course Overview

This 5 day hands-on course will help experienced engineers who support large complex networks, whether service provider, ISP or large enterprise to respond to the ongoing challenges of security and infrastructure protection. It will show engineers how to recognise when they are under attack as well as how to effectively react to such attacks.

Each student will partner with another peer during the bootcamp to own and defend their own workgroup, consisting of Cisco routers and switches and associated industry tools. Each of these workgroups simulates a service provide

Audience

This course is intended for service provider (including ISP) network operators and security engineers who perform the following tasks:

• Establish a security structure
• Monitor for and recognise when they are under attack
• Effectively respond to attacks

Skills Gained

• Describe how the service provider infrastructure is attacked
• Explain how basic protocols are attacked
• Describe packet inspection and filtering
• Identify the characteristics and capabilities of secure routing
• Explain the role of advanced filtering and hardware support in service provider security
• Divert traffic to sinkholes, using multiple routing techniques
• React to attacks by applying special routing and remote triggering techniques
• Apply classification, inspection, and filtering techniques to anomaly analysis
• Explain the role of peering modules in service provider security
• Describe routing protocol vulnerabilities
• Explain the security applications of Border Gateway Protocol (BGP) in the point of presence (POP)
• Apply analytical advanced traceback techniques to react to attacks
• Detect and react to worms
• Detect and mitigate distributed-denial-of-service (DDoS) attacks

Prerequisites

Have attended the following courses, or possess the equivalent knowledge:

• Detailed knowledge of classless interdomain routing (CIDR) IP addressing
• Detailed knowledge of BGP configuration, as provided by the Cisco Advanced Services Building Core Networks with OSPF, BGP, and MPLS Bootcamp
• CCNA level or equivalent industry experience recommended, CCNP level or equivalent experience preferred

Course Outline

• Key Concepts in Service Provider Security: Preparation
• Service Provider Security Identification
• Classification
• Traceback and Reaction