|
This extremely popular class focuses on network
security, and makes an excellent companion class to the
GL550: Enterprise
Linux Security Administration course.
After a detailed discussion of the TCP/IP suite component protocols and
Ethernet operation, the student practices using various tools to
capture, analyze, and generate IP traffic. Students then explore the
tools and techniques used to exploit protocol weaknesses and perform
more advanced network attacks. After building a thorough understanding
of network based attacks, course focus shifts to the defensive solutions
available. Students install, configure, and test one of the most popular
and powerful NIDS solutions available. Finally, students create a Linux
based router / firewall solution, including advanced functionality such
as NAT, policy routing, and traffic shaping.
Prerequisites: Since the tools used in class are compiled and run on a
Linux system, Linux or UNIX system experience is helpful, but not
necessary. A solid background in networking concepts will greatly aid
incomprehension. This is an intense class that covers many topics.
Troubleshooting Methodology
Tools
·
Common
Troubleshooting Tools
·
RPM
Queries and Verification
·
src
packages and spec Files
·
strace,
ltrace, lsof and fuser
·
ipcs and
icrm
·
vmstat,
iostat, mpstat, and sar
·
ifconfig,
ip, arp and route
·
Name
Resolution
·
netstat
and rpcinfo
·
nmap and
nc
·
tcpdump
and ethereal
Rescue Environments
·
Rescue
Procedures
·
Recovery
Examples
Section 4
·
Linux Boot
Process
·
Booting
Linux
·
Boot
Process Troubleshooting
·
Process
Management and Troubleshooting Backups Concepts and Troubleshooting
DNS
Protocol Vulnerability Analysis
·
DNS
·
DNS Basic
Concepts and Terms
·
DNS
Resolution
·
DNS Zone
Transfers
·
DNS
Spoofing
·
DNS Cache
Poisoning
·
DNS
Security Improvements
·
Networking
Commands Review and Troubleshooting
·
IP Aliases
vs Virtual Interfaces
·
xinetd
Concepts and Troubleshooting
·
TCP
Wrappers Concepts and troubleshooting
·
Iptables
Concepts and Troubleshooting
·
X11
Concepts, Troubleshooting, and Server Operations
·
X11
Concepts and Troubleshooting
·
Syslog
Concepts and Troubleshooting
·
RPM
Concepts and Troubleshooting
·
CUPS
Troubleshooting
·
at & cron
Troubleshooting
Section 7
·
Users and
Groups Troubleshooting
·
PAM
Concepts and Troubleshooting
·
Filesystem
Quotas and Quotas Troubleshooting
·
FACL’s and
ACL’s for users and/or groups
·
File
Access Control Lists and Troubleshooting
Section 8
·
DNS
Concepts and Troubleshooting
·
Sendmail
Concepts and Troubleshooting
·
FTP
Concepts and Troubleshooting
·
Squid
Concepts and Troubleshooing
Section 9
·
Samba
Concepts and Troubleshooting
·
Sendmail
Concepts and Troubleshooting
·
Postfix
Concepts and Troubleshooting
·
IMAP & POP
Concepts and Troubleshooting
Section 10
·
Kernel
Modules and Troubleshooting
·
Logical
Volume Management and Creating Logical Volumes
·
LVM
Deployment Issues and Troubleshooting
·
RAID
Concepts and Troubleshooting
·
Lightweight Directory Access Protocol and LDAP Troubleshooting |