Certified Security Professional

Duration : 3 months
Classroom : 3 Days (24 Hrs)
Self-Study Hours : 21:50 Hrs

Course Contents

Threat Mitigation
The central goals of network security are integrity, confidentiality, and availability. Even the most secure data systems are threatened on a daily basis, providing the challenge to administrators as well as users to maintain security. A decision must be made as to whether or not the cost of adding additional security outweighs possible losses that may be incurred with current configurations. Companies are constantly deciding how much risk is acceptable. This module introduces methods used to perform core system maintenance, manage viruses and spyware, securing browser software, and identify and mitigate social engineering threats.

Cryptography
The central goal of cryptography is to hide information from others. Modern cryptographers use advanced algorithms and computational models to create layers of security and trusts in order to protect information. This module introduces encryption methods using both symmetric and asymmetric encryption techniques, along with trust models, certificates, and algorithms.

Authentication Methods
Developing authentication methods that ensure that a user is who they claim to be has been a challenge for administrators since shared networking was first introduced. There are many authentication models and strategies available today. This module introduces the learner to the concepts of AAA, hashing, multi-factor authentication, Kerberos, and domain security.

Messaging, User, and Role Security
E-mail and instant messaging have taken over from snail mail, memos, and even to a large extent from phone conversations in modern of fice environments. The challenge is to ensure that these forms of communication are secure, readily accessible, and that the identity of both parties involved can be confirmed. This module analyzes and demonstrates the methods for securing e-mail and instant messages along with creating security on the Active Directory domain and client computers so that these forms of communication can be done with confidentiality, integrity, availability and non-repudiation.

Public Key Infrastructure and Access Security
Access security, both within a network and on the Internet, is paramount to corporate security. Modern network environments use key encryption technologies in order to provide security and availability to both employees and customers. This module explores the use of certificate servers and certificates to provide a secure environment both within a network and when dealing with web servers and internet validations. It also examines how to secure the physical environment and data access.

Ports, Protocols, and Network Security
Internetwork communications are the foundation of the modern Internet. Selecting the correct devices, properly configuring those devices, and placing them in the correct locations both within and outside a network to defend against attack is a task every network administrator faces on a daily basis. This module discusses, TCP/IP configuration and attack defences, network devices selection and proper placement, and securing the networking environment.

Wi-Fi and Remote Access
Remote access is becoming more and more prevalent in today's working world. The telecommuter has become the daily business person of today. Plane trips, hotel stays, and long distance meetings have made the need for wireless networking and wireless security paramount. This module examines wireless security configuration options along with remote access strategies, VPN configurations, and security measures.

Risk Analysis, Vulnerability Testing, IDS, and Forensics
Ensuring that modern network environments are secure is of paramount importance in today's IT world. The use of risk analysis techniques and vulnerability scanners, along with intrusion detection systems and forensic methodologies have become the backbone of modern IT security. This module looks at modern risk analysis techniques, forensic methodologies, IDS systems and methods to harden network devices and operating systems.

Auditing, Security Policies, and Disaster Recovery
Network Administrators create security polices, generate audit reports, and prepare disaster recovery contingency plans in the hope of both avoiding network security failures and being prepared should they actually occur. This module examines the methods used to secure a network environment through security policies, user education, and resource monitoring. The module also explores business continuity planning, backups, and disaster recovery planning.