Windows Server 2003: Security: Implementing & Administering (3 day)

Course Outline

INTRODUCTION TO SECURITY

• • Introduction to IT Security
  • The Data Protection Act
  • Economic Espionage Act
  • Attackers of a Computer System
  • Security Awareness
  • Vulnerability Analysis

• SECURITY PLANNING

• Risk Assessment Strategy
• Methodology for Defining Security Strategies

• WINDOWS SECURITY MODEL

• Windows Security Services
• The Security Subsystem
• Authenticating Users

• CRYPTOGRAPHY AND PKI

• • Cryptography
  • Key Based Cryptography
  • Encryption Systems
  • Digital Certificates
  • Certificate Authorities
  • Public Key Infrastructure (PKI)

• CERTIFICATE SERVICES

• • Windows Public Key Infrastructure
  • CryptoAPI
  • Microsoft Certificate Services
  • Setting up a Certificate Authority
  • Managing Microsoft Certificate Services
  • Microsoft Recommended Best Practices
  • End-User Certificate Management

• KERBEROS

• • Kerberos Concepts
  • How Kerberos Works
  • Kerberos Policy
  • Kerberos Management Tools
  • Kerberos Interoperability
  • Kerberos and DNS
  • Kerberos Delegation
  • Logon and NTLM
  • Passwords
  • How are Passwords a Security Risk?
  • General Password Security
  • Strengthening General Password Security

• SMART CARDS

• • What are Smart Cards?
  • Windows Smart Card Logons
  • Smart Card Certificate Templates
  • Setting up the Smart Card Enrollment Station
  • Issuing Smart Cards
  • Logging on with Smart Cards

• APPLICATION LEVEL SECURITY

• SMB Signing
• E-mail Security

• ENCRYPTED FILE SYSTEM

• • What is EFS?
  • How does EFS Work?
  • Using EFS
  • Recovering Encrypted Files
  • EFS Complications with Backup and Restore

• NETWORK SECURITY

• • Network Security
  • Denial of Service
  • Types of Denial of Service Attacks
  • Network Services Affected by DoS Attacks
  • Network Monitor
  • Port Scanners and Port Listeners
  • The Network Security Policy
  • Firewalls
  • Virtual Private Networking

• IPSEC

• • What is IPSec?
  • IPSec Components
  • How IPSec Works
  • IPSec Communication Modes
  • IPSec Policies
  • IPSec Policy Components

• RADIUS

• Remote Authentication and Dial-In User Service (RADIUS)
• Installing a RADIUS Server (IAS)
• Securing the IAS Server and Other Issues

• SECURITY CONFIGURATION AND ANALYSIS TOOL

Security Configuration and Analysis

VIRUSES

• • Viruses
  • Types of Virus
  • Virus Replication
  • Preventing Viruses
  • Anti-Virus Tools
  • Viruses on Networks

• Course Outline v1.2

Windows Server 2003: Security: Implementing & Administering (3 day) / MW03-SE