Duration
4 days
Overview
To minimize costly security breaches, organizations need to evaluate the risk in their enterprise from an array of vulnerabilities. In this training course, you learn how to create a network security vulnerability assessment checklist by exposing infrastructure, server, and desktop vulnerabilities, create and interpret reports, configure vulnerability scanners, detect points of exposure, and ultimately prevent network exploitation.
Course Objectives
Detect and respond to vulnerabilities, and minimize exposure to security breaches
Employ real-world exploits and evaluate their effect on your systems
Configure vulnerability scanners to identify weaknesses
Analyze the results of vulnerability scans
Establish an efficient strategy for vulnerability management
Prerequisites
- Basic understanding of network security and security issues.
You should have an understand of:
- TCP/IP networking
- Network security goals and concerns
- The roles of firewalls and intrusion detection systems
Introduction
- Defining vulnerability, exploit, threat and risk
- Creating a vulnerability report
- Conducting an initial scan
- Common Vulnerabilities and Exposure (CVE) list
Scanning and exploits
- Vulnerability detection methods
- Types of scanners
- Port scanning and OS fingerprinting
- Enumerating targets to test information leakage
- Types of exploits: worm, spyware, backdoor, rootkits, Denial of Service (DoS)
- Deploying exploit frameworks
Uncovering infrastructure vulnerabilities
- Uncovering switch weaknesses
- Vulnerabilities in infrastructure support servers
- Network management tool attacks
Attacks against analyzers and IDS
- Identifying Snort IDS bypass attacks
- Corrupting memory and causing Denial of Service
Exposing server vulnerabilities
- Scanning servers: assessing vulnerabilities on your network
- Uploading rogue scripts and file inclusion
- Catching input validation errors
- Performing buffer overflow attacks
- SQL injection
- Cross–Site Scripting (XSS) and cookie theft
Revealing desktop vulnerabilities
- Scanning for desktop vulnerabilities
- Client buffer overflows
- Silent downloading: spyware and adware
- Identifying design errors
Implementing scanner operations and configuration
- Choosing credentials, ports and dangerous tests
- Preventing false negatives
- Creating custom vulnerability tests
- Customizing Nessus scans
- Handling false positives
Creating and interpreting reports
- Filtering and customizing reports
- Interpreting complex reports
- Contrasting the results of different scanners
Researching alert information
- Using the National Vulnerability Database (NVD) to find relevant vulnerability and patch information
- Evaluating and investigating security alerts and advisories
- Employing the Common Vulnerability Scoring System (CVSS)
Identifying factors that affect risk
- Evaluating the impact of a successful attack
- Determining vulnerability frequency
- Calculating vulnerability severity
- Weighing important risk factors
- Performing a risk assessment
The vulnerability management cycle
- Standardizing scanning with Open Vulnerability Assessment Language (OVAL)
- Patch and configuration management
- Analyzing the vulnerability management process
Programme scope, delivery arrangements and suitability are confirmed during enquiry.