Course Overview
Security is always a concern, and with major security holes like Shellshock and Heartbleed being announced regularly, it’s more critical than ever to secure the data you are liable for. This course will walk you through the many risks and threats that exist, show you how to use best practices and other open-source tools to mitigate or counteract those threats, and teach you what you need to know to detect and recover from those attacks that do happen.
What you’ll learn
In this course students will learn how to assess security risks in your enterprise Linux environment, the best techniques and tools to increase security, server hardening, how to deploy and use monitoring and attack detection tools, how to gain visibility into possible vulnerabilities, the art and science of developing your Linux security policy and response strategy, how to configure your systems for compliance with HIPAA, DISA STIG, etc., and more. This advanced, completely hands-on course adopts a highly technical approach to cover important security techniques and tools. By providing visibility both into attack vectors and possible security holes, this course provides you a complete guide on how to mitigate security risks in any Linux environment.
Requirements
- To make the most of of this course, you should: Have a solid understanding of core local system administration and networking concepts equivalent to that obtained from Linux System Administration and LFS311 Linux Networking and Administration. Be experienced with Linux (or more generally UNIX), especially at the command line level.
Target audiences
- This course is for individuals already experienced in Linux system administration who want to improve their security posture. Before enrolling, you should have a solid understanding of core local system administration and networking concepts, and be experienced with Linux (or more generally UNIX), especially at the command line level.
Curriculum
- 1 Section
- 17 Lessons
- 4 Days
- Topics17
- 1.1Introduction Linux Foundation Linux Foundation Training Linux Foundation Certifications Linux Foundation Digital Badges Laboratory Exercises, Solutions and Resources E-Learning Course: LFS216 Distribution Details Labs Security Basics
- 1.2What is Security? Assessment Prevention Detection Reaction Labs Threats and Risk Assessment
- 1.3Classes of Attackers Types of Attacks Trade Offs Labs Physical Access
- 1.4Physical Security Hardware Security Understanding the Linux Boot Process Labs Logging
- 1.5Logging Overview Syslog Services journald Services The Linux Kernel Audit Daemon Linux Firewall Logging Log Reports Labs Auditing and Detection
- 1.6Auditing Basics Understanding an Attack Progression Detecting an Attack Intrusion Detection Systems Labs Application Security
- 1.7Bugs and Tools Tracking and Documenting Changes Resource Access Control Mitigation Techniques Policy Based Access Control Frameworks Real World Example Labs Kernel Vulnerabilities
- 1.8Kernel and User Spaces Bugs Mitigating Kernel Vulnerabilities Vulnerabilities Examples Labs Authentication
- 1.9Kernel and User Spaces Bugs Mitigating Kernel Vulnerabilities Vulnerabilities Examples Labs Authentication
- 1.10Standard UNIX Permissions Administrator Account Advanced UNIX Permissions Filesystem Integrity Filesystem Quotas Labs Network Security
- 1.11TCP/IP Protocols Review Remote Trust Vectors Remote Exploits Labs Network Services Security
- 1.12Network Tools Databases Web Server File Servers Labs Denial of Service
- 1.13Network Basics DoS Methods Mitigation Techniques Labs Remote Access
- 1.14Unencrypted Protocols Accessing Windows Systems SSH IPSEC VPNs Labs Firewalling and Packet Filtering
- 1.15Firewalling Basics iptables Netfilter Implementation Netfilter rule management Mitigate Brute Force Login Attempts nft Concepts Labs Response and Mitigation
- 1.16Preparation During an Incident Handling Incident Aftermath Labs Compliance testing with OSCAP
- 1.17Compliance Testing SCAP Introduction OpenSCAP SCAP Workbench Command Line Scan Labs
Instructor
