14
Vulnerability Assessment Course Introduction

Introduction

Tags:

Embed Size (px)

DESCRIPTION

Introduction. Vulnerability Assessment Course. All materials are licensed under a Creative Commons “ Share Alike ” license. http://creativecommons.org/licenses/by-sa/3.0/. Agenda. Administrivia Introductions Course Description Course Goals Prerequisites Course Outline Expectations. - PowerPoint PPT Presentation

Citation preview

Page 1: Introduction

Vulnerability Assessment Course

Introduction

Page 2: Introduction

2

All materials are licensed under a Creative Commons “Share Alike” license.

■ http://creativecommons.org/licenses/by-sa/3.0/

Page 3: Introduction

3

Agenda

■ Administrivia

■ Introductions

■ Course Description

■ Course Goals

■ Prerequisites

■ Course Outline

■ Expectations

3

Page 4: Introduction

4

Administrivia

■ Please silence all cell phones

■ Avoid other distractions while in class

■ Do not practice what you learn here in any other network without appropriate permissions

■ Questions...

4

Page 5: Introduction

5

Introductions

■ Name

■ Relevant Experience

■ Expectations

5

Page 6: Introduction

6

■ Purpose- Overview of Vulnerability Assessment practices

- Basic tools and techniques used to test technical security controls implemented within an information system or network infrastructure

■ Present a standard methodology for conducting vulnerability assessments

■ How to identify vulnerabilities in a networked environment; examine the configuration of networking devices, critical services, operating systems, and databases; and test the security controls implemented in a Web-based application

■ Course will also discuss the impact of vulnerabilities and recommended methods of mitigation

■ Course contains some hands-on exercises

Course Description

6

Page 7: Introduction

7

Course Objectives

■ Learning a general methodology for conducting assessments

■ Scanning and mapping network topology

■ Identifying listening ports/services on hosts

■ Fingerprinting operating systems remotely

■ Conducting automated vulnerability scans

■ Auditing router, switch, and firewall security

■ Auditing UNIX and Windows configuration and security

■ Performing Web application and associated database security assessments

7

Page 8: Introduction

8

Prerequisites

Participants should have...

■ A good understanding of the UNIX operating system

■ A good understanding of Windows operating systems

■ A good understanding of networking

■ A good understanding of computer and/or network security

8

Page 9: Introduction

9

Target Audience

■ People who wish to increase their understanding and skills in vulnerability assessment processes and techniques

9

Page 10: Introduction

10

Day One - Monday

Time Subject Instructor

0830-0900 Introduction

0915-1000 Terms, Methods, Preparations

1015-1100 Findings

1100-1200 Lunch

1200-1400 Tools

1415-1630 Unix OS Assessment

10

Page 11: Introduction

11

Day Two - Tuesday

Time Subject Instructor

0830-1200 Windows OS Assessment

1200-1300 Lunch

1300-1630 Network Devices/Services

11

Page 12: Introduction

12

Day Three - Wednesday

Time Subject Instructor

0830-1200 Applications Assessment

1200-1300 Lunch

1300-1500 DB Assessment

1515-1600 Best Practices

12

Page 13: Introduction

13

Expectations

■ A three-day course consisting of:– Lectures and discussion designed to introduce the conceptual

approach to vulnerability assessment

– Supporting laboratory time to introduce various tools and techniques used to identify common vulnerabilities and mis-configurations

■ Successful participation in this course requires the student to complete hands-on exercises

■ This is not a hacker’s course

13

Page 14: Introduction

14

Questions

14


Introduction - daks2k3a4ib2z.cloudfront.net€¦ · Introduction Establishedin1974MarbleHillFireplacesofferoneofthelargestandmostcomprehensiveselectionsof …

Introduction - daks2k3a4ib2z.cloudfront.net€¦ · Introduction Establishedin1974MarbleHillFireplacesofferoneofthelargestandmostcomprehensiveselectionsof …

Documents
Introduction to Databases: Introduction

Introduction to Databases: Introduction

Documents
Introduction to Elasticsearch and Logstash. - KIT · PDF fileOutline 1 Introduction 2 Logstash Introduction 3 Elasticsearch Introduction 4 Conclusions Introduction Logstash ElasticsearchConclusions

Introduction to Elasticsearch and Logstash. - KIT · PDF fileOutline 1 Introduction 2 Logstash Introduction 3 Elasticsearch Introduction 4 Conclusions Introduction Logstash ElasticsearchConclusions

Documents
Introduction and Welcome€¦ · Introduction and Welcome Introduction 4

Introduction and Welcome€¦ · Introduction and Welcome Introduction 4

Documents
INTRODUCTIONS (LEADS) Academic introduction Creative introduction Action introduction Dialogue introduction Overarching societal statements Personal introduction

INTRODUCTIONS (LEADS) Academic introduction Creative introduction Action introduction Dialogue introduction Overarching societal statements Personal introduction

Documents
Introduction to introduction to introduction to … Optimization

Introduction to introduction to introduction to … Optimization

Documents
Introduction to Logic Introduction

Introduction to Logic Introduction

Documents
Introduction Chapitre 1 · Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Introduction Chapitre 1 · Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Documents
Introduction€¦ · Introduction ThisdocumentprovidesinformationabouttheIOSXEsoftwarereleasefortheCiscoNCS4201andCisco …

Introduction€¦ · Introduction ThisdocumentprovidesinformationabouttheIOSXEsoftwarereleasefortheCiscoNCS4201andCisco …

Documents
CrowPiwithMineCraftPiEdition · 2 CrowPiwithMineCraftPiEdition-Introduction-MinecraftPiEdition-Introduction-Whatyouwillneed-Introduction-RunningMinecraft-Introduction

CrowPiwithMineCraftPiEdition · 2 CrowPiwithMineCraftPiEdition-Introduction-MinecraftPiEdition-Introduction-Whatyouwillneed-Introduction-RunningMinecraft-Introduction

Documents
An Introduction to NSAn Introduction to NS2An Introduction

An Introduction to NSAn Introduction to NS2An Introduction

Documents
1. Introduction 10 - therackonline.com€¦ · 1. Introduction 10 - therackonline.com ... Introduction)

1. Introduction 10 - therackonline.com€¦ · 1. Introduction 10 - therackonline.com ... Introduction)

Documents
R as a Web Service Introduction Introduction Introduction

R as a Web Service Introduction Introduction Introduction

Documents
Introduction | Introduction | Millennium Serials · 2018. 4. 17. · MARC Display | Print | Introduction | Millennium Serials INTRODUCTION Introduction This tutorial introduces the

Introduction | Introduction | Millennium Serials · 2018. 4. 17. · MARC Display | Print | Introduction | Millennium Serials INTRODUCTION Introduction This tutorial introduces the

Documents
 · Contents INTRODUCTION Introduction

 · Contents INTRODUCTION Introduction

Documents
URBAN STREAM REHABILITATION. INTRODUCTION, OBJECTIVES & IMPACTS INTRODUCTION, OBJECTIVES & IMPACTS INTRODUCTION, OBJECTIVES & IMPACTS INTRODUCTION, OBJECTIVES

URBAN STREAM REHABILITATION. INTRODUCTION, OBJECTIVES & IMPACTS INTRODUCTION, OBJECTIVES & IMPACTS INTRODUCTION, OBJECTIVES & IMPACTS INTRODUCTION, OBJECTIVES

Documents
PRODUCT INTRODUCTION Company Introduction

PRODUCT INTRODUCTION Company Introduction

Documents
Introduction Introduction to Brittle Deformation

Introduction Introduction to Brittle Deformation

Documents
Introduction Introduction (ctnd.)

Introduction Introduction (ctnd.)

Documents
Introduction Section I: Introduction

Introduction Section I: Introduction

Documents
INTRODUCTIONS (LEADS) Creative introduction Action introduction Dialogue introduction Personal introduction Question introduction Quotation introduction

INTRODUCTIONS (LEADS) Creative introduction Action introduction Dialogue introduction Personal introduction Question introduction Quotation introduction

Documents
1. INTRODUCTION INTRODUCTION - Deusto

1. INTRODUCTION INTRODUCTION - Deusto

Documents
1. INTRODUCTION 1.1 Introduction

1. INTRODUCTION 1.1 Introduction

Documents
1 Introduction INTRODUCTION - MICROCSB

1 Introduction INTRODUCTION - MICROCSB

Documents
VisionaryScancombinesarichsetofqualitycontrolandproductivi ... · Introduction Introduction VisionaryScancombinesarichsetofqualitycontrolandproductivityfeatureswithasimpleinterfacedesignedspecificallyforscanningandcodingdepositionexhib-

VisionaryScancombinesarichsetofqualitycontrolandproductivi ... · Introduction Introduction VisionaryScancombinesarichsetofqualitycontrolandproductivityfeatureswithasimpleinterfacedesignedspecificallyforscanningandcodingdepositionexhib-

Documents
An Introduction to NSAn Introduction to NS2An Introduction ...teerawat/publications/NS2/02-NS2.pdf · An Introduction to NSAn Introduction to NS2An Introduction to NS2 Textbook: T

An Introduction to NSAn Introduction to NS2An Introduction ...teerawat/publications/NS2/02-NS2.pdf · An Introduction to NSAn Introduction to NS2An Introduction to NS2 Textbook: T

Documents
Industry introduction Industry introduction Company introduction Company introduction Production introduction Display time time content

Industry introduction Industry introduction Company introduction Company introduction Production introduction Display time time content

Documents
ection Introduction A Introduction

ection Introduction A Introduction

Documents
Introduction - University of Cambridge · Introduction. Introduction

Introduction - University of Cambridge · Introduction. Introduction

Documents
Introduction and Thesis Introduction - …...1 Introduction and Thesis Introduction: The introduction relates the topic to the main point of the essay. The introduction is composed

Introduction and Thesis Introduction - …...1 Introduction and Thesis Introduction: The introduction relates the topic to the main point of the essay. The introduction is composed

Documents