Syllabus

SECURITY FUNDAMENTALS

Covers basic security concepts and principles. It introduces the major elements that go into a security implementation, including encryption, authentication, access control lists, execution control lists, and auditing.

• What is security?
• A security matrix
• Assessing the threat
• Security standards
• Elements of security
• The security policy
• Encryption
• Authentication
• Access control
• Execution Control Lists
• Auditing
• Common security principles
• Multiple layers
• Enforcement and training
• Security management
• Physical security

ATTACK TYPES AND ENCRYPTION

Provides a detailed introduction to the encryption process for e-mail and other Internet applications, including the interaction of symmetric, asymmetric (public key), and hash encryption, SSL, and S-HTTP. It also provides an introduction to security attacks and how they can be prevented.

• Applied encryption
• Symmetric-key encryption
• Asymmetric encryption
• Applied packet-filtering
• E-mail encryption applications
• File and Web encryption applications
• Brute force and dictionary attacks
• System bugs, back doors, and Trojans
• Social engineering and non-direct attacks

PROTOCOL LAYERS AND SECURITY

Covers the basic models used to conceptualize network communications, including the TCP/IP and OSI reference models. It provides information on the protocols used at each layer of the model and how hackers commonly exploit network protocols. It also explains how to perform security testing on existing and new systems.

• TCP/IP security
• The OSI reference model
• Transport layer
• Application layer
• Implementing TCP/IP security
• Protecting TCP/IP services
• Simple Mail Transfer Protocol
• Testing and evaluating
• Security testing software

FIREWALLS

Introduces users to firewall and VPN design. Basic firewall concepts are covered including bastion hosts, packet filters, screening routers, and proxies.

• The role of firewalls
• Firewall concepts
• Packet filter rules
• Applying packet filters
• Configuring proxy servers
• Remote access and virtual private networks
• Public key infrastructure
• Designing a firewall
• Hardware issues
• Common firewall designs
• Implementing a firewall strategy

OPERATING SYSTEM SECURITY

Introduces security issues that arise at the operating system level in a network. It covers the major areas of vulnerability for operating systems such as Windows 2000 and Linux. It shows how built-in security features can be activated, how to configure password settings, and how to set permissions on files, folders, and shares.

• Security principles
• Evaluation criteria
• Security levels and mechanisms
• Windows 2000 security
• Windows 2000 security architecture
• Linux security
• Pluggable authentication modules
• Passwords
• Verifying system state
• Protecting accounts
• Password aging in Linux
• Windows 2000 file systems
• Remote file access
• Linux file systems

ASSESSING AND REDUCING RISK

Examines specific modifications to harden UNIX and Windows-based operating systems, including changes to the Windows Registry and UNIX rlogin, NIS, and NFS.

• Assessing risk
• Keyloggers
• System port scanning
• UNIX security vulnerabilities
• NIS security concerns
• NFS security concerns
• Patching and changing defaults
• Windows 2000 registry security
• Disabling Windows 2000 services
• Securing network connectivity
• Reducing risk in Linux systems

SECURITY AUDITING

Provides basic information on security auditing concepts, methods, and applications. It covers several categories of auditing software, including DNS utilities, ping and port scanners, network discovery applications, and enterprise-grade vulnerability scanners.

• Introduction to auditing
• Auditor roles
• Risk assessment
• Audit stages
• Security scans
• Network discovery applications
• Enterprise-grade audit applications
• Using audit applications
• Social engineering
• Basic audit information

AUDITING AND THE CONTROL PHASE

Examines each type of attack with respect to auditing. It covers the file locations used by root kits, as well as methods of penetration and the goals a hacker has during the control phase. It also covers illicit servers.

• Network penetration
• Common targets
• System bugs
• Denial-of-service attacks
• Combined attack strategies
• Identifying attacks
• Network control
• UNIX and Windows 2000 file locations
• UNIX passwords
• Control methods
• Back Orifice
• NetBus
• Adding administrative accounts

ATTACK DETECTION AND RESPONSE

Provides information on how to detect, distract, and deter hacker activity, and suggests ways to create a security and response policy.

• Proactive detection
• Distracting the hacker
• Deterring the hacker
• Intrusion detection
• Intrusion detection architecture
• IDS rules and actions
• Intrusion detection software
• Auditing with eTrust
• Creating rules in eTrust
• Auditing with Snort
• Planning for response
• Documentation and assessment
• Executing the response plan

AUDITING AND LOG ANALYSIS

Provides information on how to define a baseline of network performance for security auditing, analyze log files, create a network security assessment report, and suggest ways to improve compliance to a security policy.

• Log analysis
• Firewall and router logs
• Operating system logs
• Filtering logs
• Suspicious activity
• Additional logs
• Log auditing tools
• Generating reports
• Auditing recommendations
• Creating the assessment report
• Improving compliance
• Improving router security
• Enabling proactive detection
• Host auditing solutions
• Personal firewalls
• Replacing and updating services
• Secure shell

Qualifications

Qualification: Printable Transcript

On completion of this course you may print a transcript off as evidence of your progression throughout the course.

Requirements for Entry

There is no experience or previous qualifications required for enrolment on this course. It is available to all students, of all academic backgrounds.

Fees

 

Professional Membership

On completion of this course you will be eligible to join the following Professional Associations(s):

On successful completion of your course your qualification is awarded. You will receive an attractively presented Diploma or Certificate issued by Stonebridge Associated Colleges, this will also allow you to use the letters SAC. Dip. or SAC. Cert. after your name.

Stonebridge Associated Colleges is one of the leading (and biggest) distance education colleges in the U.K and internationally. We have many thousands of students studying with us at any one time from locations all over the world. Our diplomas will always count towards your future, and will improve your prospects of future employment or higher level study etc. by proving that you have studied to a certain level, that you have proficiency in your chosen subjects and that you are interested in your field of choice. Education is always an investment in your future and you will find this to be the case with our qualifications in your jurisdiction.

Tutor Support

With this course you will have unlimited access to your own personal tutor who specialises in their field of study. It is your personal tutor's role to ensure that you receive constructive feedback and to deal with any queries you may have. You are more than welcome to telephone, fax or email your personal tutor.

You will also have access to a dedicated and friendly team of administrators and course advisors who offer sound and professional guidance and advice when you need it. This ensures that you will never feel neglected and that you will always succeed!

Assessment Method

After each lesson there will be a question paper, which needs to be completed and submitted to your personal tutor for marking. This method of continual assessment ensures that your personal tutor can consistently monitor your progress and provide you with assistance throughout the duration of the course.

Student Community

We understand that studying from home may be a new experience for you. You could even be excused for feeling a little dauntedsince you will not be studying in a traditional "classroom environment". To help our students overcome these concernswe have developed the Student Zone. The Student Zone encourages a high level ofinteraction with your tutor and other like-minded students.

All of our students receive access to the Student Zone,within this area you can:

• Access the student forum which allows you to share ideas and chat with other students.
• View your tutor's feedback on your marked assignments.
• View optional reading lists for your course (where available).
• Access free online games, for when you need a break from studying.
• View the study guide with plenty of useful hints and tips on how to get the most out of your course.
• Access free courses such as: Improving Learning Skills, Job Interview Skills, The Effective Learner, Goal Setting and Time Management, Ten Tips to Complete a Good Test Paper.
• Find details on our generous Referral Programme.

Study Options

If you do not have Internet access, or would prefer to study this course via the traditional paper/postal based study method, you can find more information on the course by clicking on the link below.

Stonebridge Prices

Studying by Post. If you would like to pay by instalments, we do offer an affordable interest free payment plan scheme which allows you to spread the cost of your course over a number of months. However, to use this option you will need to study for your course using the traditional paper-based method. For more information on our payment plans please visit our website at www.stonebridge.uk.com

The reason why the course fee is less if you choose to study online, is because with online study there are no costs associated with postage and printing etc. and thus we are able to offer the course at a reduced rate.

The total amount payable over the term's period, is no more than the total cash price of the course.
(APR = 0%). Written quotations are available on request.

Study Hours

This is only an approximate figure and is dependant upon how much time you can dedicate to your studies and how well you grasp the learning concepts in the course material. Furthermore, at the end of each lesson there is a question paper that needs to be completed and returned to your tutor. You should allow at least 1 - 2 hours of study to complete each question paper.

The approximate amount of time required to complete the course is: 40 hrs.

Benefits

Additional Benefits

Related Courses

Below you will find a list of courses that previous students have taken to complement their course. We hope that this list will give you some idea of the types of progression courses we offer, or alternative course options that may be of interest to you.

• Information Resources Management - This course explains how organisations can lever the power of information to deliver value to customers through improved products or services and by innovative use of information technology. The course has three purposes. The first is that you understand... Read More »
• Information Technology - This course is designed for students wishing to work towards the Diploma in IT or for a variety of vocational IT exams. It will also suit anyone interested in extending their knowledge of computers and their use in society.... Read More »
• Microsoft Excel 2000 - This course will be of practical benefit to anyone who has to use (or indeed any good spreadsheet program) on a regular basis but it is also designed to prepare students for Microsoft Office User Specialist (MOUS) examinations. The Microsoft Excel ... Read More »
• Microsoft PowerPoint 2000 - This course will be of practical benefit to anyone who has to use PowerPoint (or indeed any good presentation program) on a regular basis but it is also designed to prepare students for Microsoft Office User Specialist (MOUS) examinations. The Microsoft... Read More »
• Microsoft Word 2000 - This course will be of practical benefit to anyone who has to use Word (or indeed any good word-processing program) on a regular basis but it is also designed to prepare students for Microsoft Office User Specialist (MOUS) examinations. The Microsoft... Read More »

Further Information

If you would like any further information regarding this course, please call an advisor today on 01288 356 300 (International: 00 44 1288 356 300) or email enquiries@stonebridge.uk.com

Click here to go to our facebook page