Web Site Security - Internet and Intranet Management and Policies

Audience

Anyone who designs creates maintains and secures a corporate Web site. Webmasters and Web Administrators would be typical audiences for this course. Participants should have knowledge equivalent to the following courses: Networking Foundation series (courses 12754 and 12755); HTML 4.0 (courses 12822 and 12823); Java (courses 12975-77); CGI (course 12776); and TCP/IP (courses 12771-73).

Objective

• Identify strategies to secure a Local Area Network (LAN).
• Identify the tactics that prevent detect correct and establish responsibility for electronic threats to a physical or electronic network.
• Identify Internet threats and how to safeguard a Windows NT network from these threats.
• Identify and track a network intruder.
• Identify the uses and prevention tactics for sniffing and spoofing.
• Identify the various items that provide network access security.
• Identify the function attributes and implementation factors of Kerberos.

Topics Include

Unit 1: Internal Security Strategies and Tactics

• Match the physical access barrier with the security risk it prevents.
• Match the management safeguard for a LAN with its function.
• Identify the safeguards that establish employee accountability for physical access to a LAN.
• Match the tactic that prevents an electronic threat to a network with its security function.
• Select the tactics for detecting electronic threats to an electronic network.
• Identify the attributes of a network recovery plan.

Unit 2: External Security Strategies and Tactics

• Identify the safeguards used to protect against UNC threats.
• Identify the software tools that pose potential threats.
• Identify the safeguards used to protect against source routing threats.
• Identify the safeguards used to protect against threats to services.
• Identify the safeguards used to protect against threats to shares.
• Identify the safeguard used to protect against threats to the Anonymous account.
• Identify the safeguard used to protect against a SYN threat.
• Identify signs of intruder activity on a network.
• Establish an audit trail on a directory using File Manager in Windows NT.
• Establish an audit trail based on an audit policy using the User Manager in Windows NT.
• Set the event Viewer to display events occurring during a particular time period.
• Identify the uses of sniffing.
• Match the sniffing prevention tactic with the network scenario.
• Identify spoofing methods.
• Match the spoofing prevention tactic with its spoofing method.

Unit 3: Network Access Security

• Identify the benefits a firewall provides.
• Match the firewall mechanism with the security services it provides.
• Identify the questions that help establish a firewall design policy.
• Match the security item with the element of authentication of which it is representative.
• Match the authentication protocol with the statement that describes it.
• Identify the benefits of a proxy server.
• Match the type of proxy server deployment with its definition.
• Match the firewall architecture containing a proxy server with its definition.
• Sequence the equations that are used to estimate server load.
• Identify the variables to consider when hardware sizing for Netscape Proxy Server 3.5.
• Identify the services to configure when deploying Netscape Proxy Server 3.5.
• Identify the configuration issues to consider when implementing a proxy server.
• Identify the areas of proxy server performance that should be regularly monitored.

Unit 4: Kerberos

• Identify the functions of Kerberos.
• Identify the encryption method used in Kerberos.
• Sequence the steps in the Kerberos authentication process.
• Identify the naming styles for Kerberos realms.
• Match the Kerberos principal name-type with its use.
• Match the Kerberos ticket flag with its function.
• Identify the attributes of cross-realm operation.
• Sequence the steps in obtaining credentials from the Authentication Server.
• Sequence the steps to mutually authenticate a Kerberos client and a Kerberos server.

Duration

8

Minimum Requirements

The CDROM version of this course requires:

• At least a 486DX 33Mhz CPU.
• Microsoft Windows 3.1 or higher and a Microsoft compatible mouse.
• At least 8MB RAM.
• At least VGA graphics capability with a minimum 512K video RAM (1MB video RAM recommended).
• At least a double speed CDROM drive.
• An MPC compliant sound card with attached speakers or headphones is recommended (Currently only the CDROM version supports audio).

• At least a 486DX 33Mhz CPU.
• Microsoft Windows 3.1 or higher and a Microsoft compatible mouse.
• At least 8MB RAM and 22MB available hard disk space or file server space.
• At least VGA graphics capability with a minimum 512K video RAM (1MB video RAM recommended).

Media