RHCSS/RHCDS/ RHCA

RHS333 - Red Hat Enterprise Security: Network Services

Duration : Four Days: 10 am - 5.30 pm Fee : Rs. 15,000/- (plus service tax)
 
Overview
Red Hat Linux has gained considerable momentum as the operating system of choice for deploying network services such as web, ftp, email, and file sharing. RHS333 curriculum provides training in deploying these services and on the essential elements of securing them.
 
Pre-Requisites
RHCE Level Knowledge is recommended for the participant to aim at the higher level certifications.
Have you done the previous required course?         Yes   No 
 
Target Audience
The Network Administrators who is responsible to implement and secure various Server applications. The Network Administrators who have completed RHCE Certification and look towards higher level Linux Certifications.
 
Course Outline
  • The Threat Model and Protection Methods
    -Internet threat model and the attackers plan
    -System security and service availability
    -An overview of protection mechanisms
  • Basic Service Security
    -SELinux
    -Host-based access control
    -Firewalls using Netfilter and iptables
    -xinetd and service limits
  • Cryptography
    -Overview of cryptographic techniques
    -Management of SSL certificates
    -Using GnuPG
  • Logging and NTP
    -Time synchronization with NTP
    -Logging syslog and its weaknesses
    -Protecting log servers
  • BIND and DNS Security
    -BIND vulnerabilities
    -DNS Security attacks on DNS
    -Access control lists
    -Transaction signatures
    -Restricting zone transfers and recursive queries
    -DNS Topologies
    -Bogus servers and blackholes
    -Views
    -Monitoring and logging
    -Dynamic DNS security
  • Network Authentication RPC NIS and Kerberos
    -Vulnerabilities
    -Network managed users and account management
    -RPC and NIS security issues
    -Improving NIS security
    -Using Kerberos authentication
    -Debugging Kerberized Services
    -Kerberos Cross Realm Trust
    -Kerberos Encryption
  • Network File System
    -Overview of NFS versions 2 3 and 4
    -Security in NFS versions 2 and 3
    -Improvements in security in NFS4
    -Troubleshooting NFS4
    -Client-side mount options
  • OpenSSH
    -Vulnerabilities
    -Server configuration and the SSH protocols
    -Authentication and access control
    -Client-side security
    -Protecting private keys
    -Port-forwarding and X11 forwarding issues
  • Electronic Mail with Sendmail
    -Vulnerabilities
    -Server topologies
    -Email encryption
    -Access control and STARTTLS
    -Anti-spam mechanisms
  • Postfix
    -Vulnerabilities
    -Security and Postfix design
    -Configuring SASL/TLS
  • FTP
    -Vulnerabilities
    -The FTP protocol and FTP servers
    -Logging
    -Anonymous FTP
    -Access control
  • Apache security
    -Vulnerabilities
    -Access control
    -Authentication files passwords Kerberos
    -Security implications of common configuration options
    -CGI security
    -Server side includes
    -suEXEC
  • Intrusion Detection and Recovery
    -Intrusion risks
    -Security policy
    -Detecting possible intrusions
    -Monitoring network traffic and open ports
    -Detecting modified files
    -Investigating and verifying detected intrusions
    -Recovering from reporting and documenting intrusions
 
Download
 
Course From a Specific Date:
 
line
Linux is the registered trademark of Linus Torvalds. All brand and product names are trademarks or registered trademarks of their respective companies.