As network and system breaches become increasingly sophisticated, proactive defenses are needed to protect against malicious attacks. Only by testing and verifying security measures can an organization protect itself.
In this seminar, you learn to discover weaknesses in your network using the same mindset and methods as hackers. You acquire the knowledge to systematically test and exploit internal and external defenses. You learn the countermeasures used to mitigate and reduce risk to your enterprise.
Agenda
Network Attacks and Mitigation Techniques
Date : 23/01/2010
Time : 10am to 4pm
Taken by : Mr. Vinod V (CCSP, CCSI & CEH - Security Consultant, TimeNet Solutions)
Morning Sections- 3 Hours
INTRODUCTION
- Defining a penetration testing methodology
- Creating a security testing plan
- Assembling the hacking tools
FOOTPRINTING AND INTELLIGENCE GATHERING
- Acquiring target information
- Scavenging published data
- "Dumpster diving"
- Scanning and enumerating resources
- Identifying authentication methods
- Analyzing firewalls
- Harvesting e-mail information
- Interrogating network services
IDENTIFYING VULNERABILITIES
- Correlating weaknesses and exploits
- Researching databases
- Determining target configuration
- Configuring scanners
- Evaluating Vulnerability Assessment tools
- Selecting stealth parameters
- Leveraging opportunities for attack
- Discovering exploit resources
- Probing with Metasploit
Afternoon Sections – 2 Hours
ATTACKING SERVERS AND DEVICES TO BUILD BETTER DEFENSES
- Compromising operating systems
- Examining Windows protection modes
- Injecting SQL and HTML code
- Bypassing authentication mechanisms
EXPLOITING TARGETS TO INCREASE SECURITY
- Stealing password hashes
- Extracting infrastructure routing, DNS and NetBIOS data
- Uploading and executing payloads
- Controlling memory contents
- Utilizing the remote file system
MITIGATING RISK AND NEXT STEPS
- Reporting results and creating an action plan
- Managing patches and configuration
- Recommending defensive countermeasures
- Staying current with tools, trends and technology
Register: http://www.timenetlearning.com/EnquiryForm.aspx