Monday, July 27, 2009 at 8:30 AM - Tuesday, July 28, 2009 at 4:30 PM (CT)
When you register, please make sure that you registering under YOUR NAME ONLY, the system will save the last person that registered and you may see their information and not yours, please be mindful of this when you register!
Network Security Essentials - MIS Training Institute
Speaker: Ken Cutler
Place: State Library, 701 N. Fourth Street, at the cornor of Spanish Town Road. Enter through the N. 4th street entrance.
Date and Time: July 27 - 28, 2009
8:30 am - 4:30 pm
CPE Credits : 15 credits and certificate issued from MISTI
Focus and Features
In this two-day seminar you will review the basics of LANs, WANs, client/server and other forms of distributed computing architectures. You will survey the security and audit features of network operating systems, interconnection devices, remote access methods, and add-on security products. You will also map the use of security features to security policy requirements to determine the topics that must be addressed in developing security administration standards and procedures, and designing self-assessment plans. You will receive security and audit checklists at the end of each control-related section.
What You Will Learn
1. Defining the Distributed Information Technology Environment
- defining a network
- network terminology
- computing models: centralized and distributed
- shared data networks
- distributed computing: client/server, peer-to-peer, middleware
- defining the scope of network security and audit programs
- locating network security control points
2. Network Standards and Protocols
- protocol defined
- network communications standards
- rules for communications
- Open Systems Interconnection (OSI) Model
- common network protocols
- Transmission Control Protocol/Internet Protocol (TCP/IP)
- analyzing the OSI layers
- geographical network delineation: PAN, LAN, CAN, MAN, WAN
- untangling the ‘Nets: Internet, intranets, and extranets
3. Local Area Network Connections
- common network transmission media: twisted pair copper wire, fiber optics
- physical network topologies: bus, ring, star, tree
- logical topologies: Ethernet, Token Ring, FDDI
- backbone networks
- wireless local area and personal area networks
4. Wide Area Network Connections
- WAN and Internet connections
- dial-up Internet connections
- switching techniques
- leased digital line services
- packet switched networks
- residential broadband
5. Network Devices: Functionality, Management and Security
- positioning network devices in the OSI Reference Model
- network interconnection devices: Layers 1 and 2
- network domains and segmentation
- network interconnection devices: Layers 2-7
- network device maintenance port access
- Simple Network Management Protocol (SNMP)
- best practices for network device security
6. Performing a Network Security Risk Analysis
- identifying the network assets and control points
- categorizing the threats and associated risks
- vulnerability management: identifying, tracking, and closing serious network exposures
7. Network Perimeter Security
- hacker intrusion objectives
- network security strategies
- warning banners
- network firewalls: policies, architectures
- intrusion detection systems
- best practices for network perimeter security
8. Remote Access Security
- remote access defined
- remote workstation safeguards
- user authentication credentials
- enterprise authentication systems: TACACS+, RADIUS, Diameter
- network encryption and virtual private networks (VPNs)
9. File Server Security and Audit
- server vulnerabilities
- server operating system security features and deficiencies: Microsoft Windows, Unix variants, Novell NetWare
- server security baseline checklist
- assessing key server security control points
- virtualization: friend or foe?
- server auditing tools and techniques
10. Workstation/Client Security
- portable computing and other workstation security challenges
- workstation safeguards: access control, encryption, centralized lockdown
- Windows file shares
- viruses and malware
- remote control programs
- auditing workstation security
11. Entrpise Directory Services Security and Audit
- overview of critical directory services
- Lightweight Directory Access Protocol (LDAP) directories
- Domain Name System (DNS)
12. Wrap-Up: Network Security and Audit Strategies
- defining “perfect” network security
- a practical strategy for information security
- 12-point plan for success
Trust in, and value from, information systems
| View other ISACA Baton Rouge events |
|
|
Contact the Host |
|
|
Subscribe to receive notifications of future events by this host |
Email
Facebook
Twitter
LinkedIn
MySpace
Digg
Delicious
Reddit