1-888-THE-TREE (1-888-843-8733)
PRODUCTIVITY THROUGH EDUCATION®
 
 

Hands-On Vulnerability Assessment: Protecting Your Organization

Exposing Network Weaknesses
 
Course: 589   Duration: 4 Days
 
 

You Will Learn How To

  • Detect and respond to vulnerabilities that put your organization at risk using scanners
  • Employ real-world exploits and evaluate their effect on your systems
  • Configure vulnerability scanners
  • Analyze the results of vulnerability scans
  • Assess vulnerability alerts and advisories
  • Establish a strategy for vulnerability management

Course Benefits

Knowledge of vulnerability assessment and hacking techniques allows you to detect vulnerabilities before your networks are attacked. In this course, you learn to configure and use vulnerability scanners to detect weaknesses and prevent network exploitation. You acquire the knowledge to assess the risk to your enterprise from an array of vulnerabilities and to minimize your exposure to costly security breaches.

Who Should Attend

Security auditors, firewall/IDS personnel, PCI security testers, network managers and those involved in cybersecurity measures and implementation. Experience with network security at the level of Course 468, "System and Network Security Introduction," is assumed. A working knowledge of TCP/IP is also assumed.

Hands-On Training

Exercises provide you with practical experience assessing vulnerabilities and include:
  • Configuring scanners
  • Port scanning and enumeration
  • Scanning infrastructure, servers and desktops
  • Exploiting browsers, IDS, SQL and file services
  • Investigating and preventing spyware
  • Creating custom vulnerability tests
  • Performing a risk assessment
  • Interpreting scanning reports
  • Identifying false positives and negatives
  • Comparing scanner results

Related Courses

  

Training Dates

Apr 10 - 13Rockville, MD
May 15 - 18New York 
Jul 31 - Aug 3Rockville, MD
Sep 11 - 14New York 
Oct 23 - 26Reston, VA
Nov 27 - 30Rockville, MD

For complete schedule, please visit www.learningtree.com
 
http://www.learningtree.com/courses/589pf.htm
 
 
1-888-THE-TREE (1-888-843-8733)
PRODUCTIVITY THROUGH EDUCATION®
 
 

Hands-On Vulnerability Assessment: Protecting Your Organization

Exposing Network Weaknesses
 
Course: 589   Duration: 4 Days
 
 
Course 589 Content
 

Fundamentals

Introduction

  • Defining vulnerability, exploit, threat and risk
  • Identifying the goals of assessments
  • Creating a vulnerability report
  • Conducting an initial scan
  • Common Vulnerabilities and Exposure (CVE) list

Scanning and exploits

  • Vulnerability detection methods
  • Types of scanners
  • Port scanning and OS fingerprinting
  • Enumerating targets to test information leakage
  • Types of exploits: worm, spyware, backdoor, rootkits, Denial of Service (DoS)
  • Deploying exploit frameworks

Analyzing Vulnerabilities and Exploits

Uncovering infrastructure vulnerabilities

  • Scanning the infrastructure
  • Uncovering switch weaknesses
  • Vulnerabilities in Ethereal and Wireshark
  • Network management tool attacks

Attacks against analyzers and IDS

  • Firewall weaknesses
  • Identifying Snort IDS bypass attacks
  • Corrupting memory and causing denial of service

Exposing server vulnerabilities

  • Scanning servers: assessing vulnerabilities on your network
  • Uploading rogue scripts and file inclusion
  • Catching input validation errors
  • Performing buffer overflow attacks
  • SQL injection
  • Cross-site scripting (XSS) and cookie theft

Revealing desktop vulnerabilities

  • Scanning for desktop vulnerabilities
  • Client buffer overflows
  • Silent downloading: spyware and adware
  • Attacking design errors
  • Identifying browser plugin weaknesses

Configuring Scanners and Generating Reports

Implementing scanner operations and configuration

  • Choosing credentials, ports and dangerous tests
  • Identifying dependencies
  • Preventing false negatives
  • Creating custom vulnerability tests
  • Customizing Nessus scans
  • Handling false positives

Creating and interpreting reports

  • Filtering and customizing reports
  • Interpreting complex reports
  • Contrasting the results of different scanners
  • Producing a filtered report

Assessing Risks in a Changing Environment

Researching alert information

  • Using the National Vulnerability Database (NVD) to find relevant vulnerability and patch information
  • Evaluating and investigating security alerts and advisories
  • Determining vulnerability severity
  • Employing the Common Vulnerability Scoring System (CVSS)

Identifying factors that affect risk

  • Evaluating the impact of a successful attack
  • Calculating vulnerability severity
  • Weighing important risk factors
  • Performing a risk assessment

Managing Vulnerabilities

The vulnerability management cycle

  • Applying a vulnerability process
  • Standardizing scanning with Open Vulnerability Assessment Language (OVAL)
  • Patch and configuration management

Vulnerability controversies

  • Rewards for vulnerability discovery
  • Bounties on hackers
  • Markets for bugs and exploits
 
http://www.learningtree.com/courses/589pf.htm
 
 
1-888-THE-TREE (1-888-843-8733)
PRODUCTIVITY THROUGH EDUCATION®
 
 

Hands-On Vulnerability Assessment: Protecting Your Organization Tuition

Exposing Network Weaknesses
 
Course: 589   Duration: 4 Days
 
 
Course Tuition
$ 2,890Standard Tuition
Tuition with a Savings Plan
$ 1,700Premium-Pass
$ 1,833Training Passport
$ 2,250Voucher 10-Pack
$ 2,267Triple-Pack
$ 2,573Government Discount
$ 2,600Alumni Gold Discount

Your Course Tuition Entitles You To...

  • Class participation
  • Team workshops
  • Use of in-class hands-on equipment
  • Comprehensive course materials
  • Morning and afternoon refreshments
  • Course Completion Certificate awarding Continuing Education Units
  • FREE participation in Professional Certification
  • FREE participation in College Credit programs (including related exams)
  
 

Tuition Savings Plans

Training Passport
  • 3 courses in 12 months
  • As little as $1,833 per course
  • Savings as much as 40%
  • Only $5,500
Premium Pass
  • 4 courses in 24 months
  • As little as $1,700 per course
  • Save as much as 45%
Training Vouchers
  • Save as much as $1,040 per course
  • Fully transferable
  • As low as $2,250 per course
Triple-Pack
  • 3 courses for anyone in your organization
  • As little as $2,266 per course
  • Only $6,799
Alumni Gold Discount Attend your first course and you'll receive a personalized Alumni Gold Discount card, entitling you to save as much as $320 on each course you take within the following 12 months. Take just one course each year and you'll be entitled to ongoing discounts...year after year!

Your Guarantee of Satisfaction

Unless you feel 100% satisfied that Learning Tree delivered even more than you expected, there is no fee for your course attendance. Our Guarantee of Quality lets you experience the value of the course—and then pay only if you feel the course was well worth the tuition.

Enrolling is Easy and Flexible!

Enroll by phone or online. If your plans change, just let us know and, without a fee, you can transfer to another course or cancel your enrollment. Pay after you've taken the course, and then only if you are 100% satisfied.

 
http://www.learningtree.com/courses/589pf.htm