CIS 235 - Advanced Topics in Linux/Unix Security

1. Install various Linux distributions and network configurations.
2. Discover network and system vulnerabilities.
3. Explain methods of conveying network security issues to management.
4. Describe the various aspects of Intrusion detection.
5. Explain the process of data gathering for law enforcement.
6. Perform WiFi network security and security augmentation.

1. Background Review
   1. The Unix philosophy
   2. Editing, compiling, linking, and running programs
   3. Pipes and redirection
   4. Unix security and passwords
   5. Unix file system concepts
   6. Basic Linux installation
   7. Adding normal users to the system
2. Discovering Network Vulnerabilities
   1. Nmap – port scanning
   2. Nessus – network attack system
   3. Running processes and port association
3. Vulnerability Mitigation
   1. Iptables – Shorewall
   2. Running processes and ports
   3. No-execute file systems
   4. Secure protocols
   5. Tunneling of services
4. Management Awareness
   1. Security risk
   2. Money and the corporate bottom line
   3. Legal liability
5. Intrusion Detection
   1. Log files
   2. Network intrusion detection systems
   3. File modification tracking
6. Data Gathering
   1. Law enforcement contacts
   2. Backing up log files
   3. Printouts
   4. Replication of hard disk drives as evidence
7. WiFi
   1. Risks of an open network
   2. Corporate wireless security
   3. Home/telecommuter wireless security
   4. How public hotspots can put your data at risk