**NOTE** All Online Course Tutorials require Internet Explorer 5.0 or higher and the Macromedia Flash 4.0 or higher plugin installed as they will not work with AOL, Netscape or Mozilla browsers.**

CIW Security 1D0-470 Online Course Tutorial Details

Total Lessons: 10
Total Time: 39 hour(s)
Subscription Term: 12 month(s)

Summary:

This series is designed to prepare the student to pass the Certified Internet Webmaster (CIW) Security 1D0-470 exam. It helps the student achieve proficiency in identifying security threats, developing countermeasures, and using firewall systems and attack recognition technologies. It covers the fundamental concepts and principles of network security, and it describes the most common types of attacks that can occur. It covers basic networking models, such as TCP/IP and the OSI reference model, and it explains the security vulnerabilities of protocols used at each layer in the model. It also covers the basic tools and procedures used to protect a network, including firewalls, encryption, auditing, and log analysis.

Features and Benefits of our Tutorial:
* Exercises that allow users to practice the application
* A file containing the text of the exercises
* Activities that allow users to apply course concepts in an interactive questioning environment
* Simulations that allow users to practice course skills, even if they don't have access to the application
* A glossary
* A Skill Assessment

Lesson 1 Security Fundamentals - 4 hours

Objectives: After completing this lesson, students will be able to:
* List the basic elements of a security matrix
* Explain the types of security threats that are now common
* Describe the most common elements of a security system, including encryption, authentication, access control lists, execution control lists, and auditing

Lesson 2 Attack Types and Encryption - 4 hours

Objectives: After completing this lesson, students will be able to:
* Explain the e-mail encryption process and its components
* Explain the differences between SSL and S-HTTP
* Use common applications to encrypt messages and files
* List and describe the categories of security attack: brute force/dictionary, buffer overflow, Trojan, DOS/DDOS, and man in the middle
* List methods of preventing each type of attack

Lesson 3 Protocol Layers and Security - 3 hours

Objectives: After completing this lesson, students will be able to:
* Describe the TCP/IP protocol stack
* Diagram the OSI reference model and explain how it functions
* List protocols used at the Network, Transport, and Application layers of each model
* Identify the major security vulnerabilities of network protocols
* List basic steps you can take to protect network services
* Identify the security vulnerabilities of e-mail servers


* Explain the processes used for security testing

Lesson 4 Firewalls - 4 hours

Objectives: After completing this lesson, students will be able to:
* Explain the role and purpose of a firewall
* Distinguish between packet-filters, application-layer proxies, and circuit-level proxies
* Describe the role and possible configurations of a bastion host
* Outline how PKI works
* Write rules for a basic packet filter
* Describe the four basic firewall designs and discuss their advantages and disadvantages
* Use WinRoute to configure NAT or a proxy on a Windows machine
* Use Ipchains and Iptables to configure packet-filtering on Linux

Lesson 5 Operating System Security - 5 hours

Objectives: After completing this lesson, students will be able to:
* Describe the most widely-used industry security standards
* List the key vulnerabilities of Windows 2000 and Linux operating systems
* Describe the built-in security features of Windows 2000
* Use Pluggable Authentication Modules to improve authentication on Linux systems
* Configure password settings for improved security
* Set permissions on files, folders and shares

Lesson 6 Assessing and Reducing Risk - 4 hours

Objectives: After completing this lesson, students will be able to:
* Identify general and specific operating system attacks
* Describe the function of a keylogger program
* Scan a system to view its services and assess security risks
* Explain Linux security concerns including rlogin, NIS, and NFS
* Explain the purpose and importance of system patches and fixes
* Modify the Windows 2000 Registry to increase security
* Lock down and remove services for effective security in Windows 2000 and Linux

Lesson 7 Security Auditing - 3 hours

Objectives: After completing this lesson, students will be able to:
* Describe the activities of auditors in their various roles, including that of security manager, consultant, and insider
* List and describe the three basic stages of a security audit
* Identify and utilize auditing software, including DNS utilities, ping and port scanners, and enterprise-grade vulnerability scanners
* Classify information revealed during audits

Lesson 8 Auditing and the Control Phase - 5 hours

Objectives: After completing this lesson, students will be able to:
* Identify common targets of attack
* Discuss penetration strategies and methods
* List potential physical, OS, and TCP/IP stack attacks
* Identify and analyze specific brute-force and DoS attacks
* Implement methods designed to thwart penetration
* Define control procedures
* Identify control methods
* List ways to document control procedures and methods

Lesson 9 Attack Detection and Response - 3 hours

Objectives: After completing this lesson, students will be able to:
* Deter and distract hackers using proactive detection techniques
* Describe the different types of IDS architectures
* Audit and create rules using eTrust
* Audit your network using Snort
* Create and implement a response policy

Lesson 10 Auditing and Log Analysis - 4 hours

Objectives: After completing this lesson, students will be able to:
* Audit network activity in Windows NT/2000 and Linux
* Use log analysis to identify suspicious network activity
* Create a security audit report
* Recommend steps for improving security compliance
* Enable proactive detection of security problems
* Configure a personal firewall
* Use SSH for data security and authentication