SCP-200
STRATEGIC INFRASTRUCTURE SECURITY

5 Days

Tuition: $2495

The Strategic Infrastructure Security course picks up right where Tactical Perimeter Defense leaves off.  The second course in the SCP line-up leads to a certification of Security Certified Network Professional (SCNP).  It will give a network administrator the additional hands-on skills needed to protect their network from the inside out. This course teaches you about prevention techniques as well as an understanding of risk analysis and security policy creation in a blended technology environment.  The up-to-date security lessons and intense, hands-on labs provide real-world network security training.

The SCNP exam is designed to further validate the critical skills required by IT and security professionals. These skills include, but are not limited to:  Cryptography, Hardening Linux Computers, Hardening Windows Computers, Ethical Hacking Techniques, Security on the Internet and World Wide Web, Performing a Risk Analysis, Creating a Security Policy and Analyzing Packet Signatures.  Strategic Infrastructure Security replaces Network Defense and Countermeasures with updated technology and intense, hands on labs.

Prerequisites: To ensure your success, we recommend that you have completed the SCNS-100: Tactical Perimeter Defense course. The TPD course will ensure you have the core security concepts and skills in developing a secure perimeter for your organization.

Course Contents

CRYPTOGRAPHY AND DATA SECURITY

·          History of Cryptography

·          Math and Algorithms

·          Private Key Exchange

·          Public Key Exchange

·          Message Authentication

HARDENING LINUX COMPUTERS

·          Linux Filesystem and Navigation

·          General Secure System Management

·          User and Filesystem Security Administration

·          Network Interface Configuration

·          Security Scripting

·          Useful Linux Security Tools

HARDENING WINDOWS SERVER 2003

·          Windows 2003 Infrastructure Security

·          Windows 2003 Authentication

·          Windows 2003 Security Configuration Tools

·          Windows 2003 Resource Security

·          Windows 2003 Auditing and Logging

·          Windows 2003 EFS

·          Windows 2003 Network Security

ATTACK TECHNIQUES

·          Network Reconnaissance

·          Mapping the Network

·          Sweeping the Network

·          Scanning the Network

·          Vulnerability Scanning

·          Viruses, Worms, and Trojan Horses

·          Gaining Control Over the System

·          Recording Keystrokes

·          Cracking Encrypted Password

·          Revealing Hidden Passwords

·          Social Engineering

·          Gaining Unauthorized Access

·          Hiding Evidence of an Attack

·          Performing a Denial of Service

SECURITY ON THE INTERNET AND THE WWW

·          Describing the Major Components of the Internet

·          Securing DNS Services

·          Describing Web Hacking Techniques

·          Describing Methods Used to Attack Users

PERFORMING A RISK ANYALSIS    

·          Concepts of Risk Analysis

·          Methods of Risk Analysis

·          The Process of Risk Analysis

·          Techniques to Minimize Risk

·          Continuous Risk Assessment

CREATING A SECURITY POLICY

·          Concepts of Security Policies

·          Policy Design

·          Policy Contents

·          An Example Policy

·          Incident Handling and Escalation Procedures

·          Partner Policies

ANALYZING PACKET SIGNATURES

·          Signature Analysis

·          Common Vulnerabilities and Exposures (CVE)

·          Signatures

·          Normal Traffic Signatures

·          Abnormal Traffic Signatures