Establishing a Secure Framework

Building a robust enterprise

• Investigating security model components
• Validating your organisation's security policy
• Quantifying risk to determine access controls

Deploying TCP/IP

• Identifying network protocols
• Blueprinting encapsulation
• Analysing headers to classify packets

Fortifying the Perimeter

Best practices for device configuration

• Securing access to devices
• Hardening routers and switches

Applying advanced filtering techniques

• Prioritising network traffic
• Classifying traffic to achieve Quality of Service (QoS)
• Ingress and egress filtering
• Providing state with context-based access controls

Mitigating threats using port security

• Preventing address spoofing
• Containing resource starvation

Strengthening Gateway Defense

Traffic filtering methods

• Stateless vs. stateful packet filters
• Application proxies
• Web application firewalls: Profense, mod_security

Differentiating firewall architectures

• Refining the topology
• Setting a security perimeter
• Combining components to give defense in depth

Managing access

• Safeguarding application servers
• Supporting DMZ services

Implementing Network Intrusion Prevention

Decoding traffic using protocol analysers

• Fingerprinting Operating Systems
• Interpreting malicious traffic
• Establishing thresholds and boundaries

Curtailing the network threat

• Inspecting network traffic for abnormal activity
• Leveraging intrusion prevention technologies
• Correlating signature- and anomaly-based events

Filtering Content

Essential proxy principles

• Constructing proxy controls
• Assessing proxy operations

Strategising content filter deployment

• Preventing malicious Web-based content
• Validating Ajax and SOAP messages

Protecting the Infrastructure

Surveying the network

• Defensive techniques with an offensive mindset
• Dissecting an attack methodology

Shielding against zero-day exploits

• Defeating attacks with host-based intrusion prevention
• Processing system calls and system-level access

Network Access Control (NAC)

Establishing an effective NAC

• Identifying NAC requirements
• Partitioning and segmenting zones
• Neutralising rogue clients

Enforcing user identity-based controls

• Guest, contractors and others
• Maintaining awareness of who is on your network

Controlling and securing authentication

• Implementing 802.1x port access control
• Pruning ports to deter intrusion

Securing Remote Access

Building Virtual Private Networks (VPNs)

• Tunnelling with IPsec and SSL/TLS
• Developing secure communications

Supporting remote users

• Site-to-site vs. client-to-site
• Avoiding pitfalls of split tunnelling

The Future of Access Control

• Screening complex protocols
• Expanding de-perimeterisation across the enterprise