Course Outline

Note: EC-Council's fundamental courses are conducted by selected academic partners such as colleges and universities around the world.

Module 1: Networking Revisited

• Network Layers
  • Application Layer
  • Transport Layer
  • Internet Layer
  • Network Interface Layer
  • Physical Layer
• Differentiating Protocols & Services
• Mapping Internet Protocol to OSI
• OSI Layers and Device Mapping
• Network Security - Defined
• Essentials of Network Security
• Data Security Threats over a Network
• Network Security Policies
• What Defines a Good Security Policy?
• Types of Network Security Policies

Module 2: Secure Network Protocols

• Secure Network Applications
• Web Security Applications
  • SSL
  • SSH
• E-mail Security Applications
  • S/MIME
  • PGP       
• VPN Security Applications
  • IPSec
  • PPTP
• Wireless Security Applications - WEP
• PKI
• ACL
• AAA
• RADIUS              
• TACACS+
• Kerberos
• IKE

Module 3: Authentication

• Authentication
• Authentication≠Authorization
• Types of Authentication
• Steps of Authentication
• Examples of Authentication
• Authentication over HTTP
• Authentication Service Model
• Authentication Providers
• Form Based Authentication
• Digital Certificates
• Attacks on Authentication

Module 4: Network Attacks

• Denial of Service (DoS)
• Scanning
• Packet Sniffing
• IP Spoofing
• ARP Spoofing
• Session hijacking
• Spamming
• Eavesdropping

Module 5: Introduction to Intrusion Detection System (IDS)

• History of Intrusion Detection System
• Intrusion Detection Systems (IDS)
• Need for IDS
• Types of Intrusion Detection System
• System Integrity Verifiers (SIV)
• Advantages of IDS
• Limitations of IDS
• Ways to Detect an Intrusion
• Popular Intrusion Detection Tools
• Intrusion Protection System
• IDS VS Firewall

Module 6: Firewalls

• Introduction
• Essential Terminology
• Purpose of a Firewall
• Types of Firewall Protection
  • Multilayer Firewall Protection
  • Packet Filtering
  • Stateless Packet Filtering
  • Stateful Packet Filtering
  • NAT
  • Application Layer Gateways
• Advantages of Firewalls
• Limitations of Firewalls
• Firewall Classification
• Popular Personal Firewall Vendors
• Common Features seen in Personal Firewalls
• Popular Hardware Firewall Vendors

Module 7: Bastion hosts and DMZ

• Introduction
• Kinds of Bastion hosts
• Need for a Bastion host
• Basic Principles for Building a Bastion Host
• General Requirements to Setup a Bastion Host
• Hardware Requirements
• Selecting the OS for the bastion host
• Positioning the Bastion host
  • Physical Location
  • Network Location
• Select a Secure Location
• Auditing the Bastion Host
• Connecting the Bastion Host
• Tool: IPSentry
• What is DMZ?
• Different Ways to Create a DMZ
• Where to Place Bastion Host in the DMZ
• Benefits of DMZ

Module 8: Proxy servers

• What are Proxy servers?
• Benefits of a Proxy Server
• Other Benefits of a Proxy Server
• Functioning of a Proxy Server
• Functions of a  Proxy Server
• Communication Via a Proxy Server
• Proxy Server-to-Proxy Server Linking
• Proxy Servers vs. Packet Filters
• Networking Protocols for Proxy servers
• S-HTTP
• SOCKS
• Types of Proxy Servers
• Proxy Server-based Firewalls
• Microsoft Internet Security & Acceleration server (ISA)
• Wingate
• Symantec Enterprise Firewall
• Limitations of a Proxy server

Module 9: Virtual Private Network

• What is a VPN?
• VPN Deployment
• Tunneling Described
• Types of Tunneling
• Popular VPN Tunneling Protocols
• VPN Security
• VPN via SSH & PPP
• VPN via SSL & PPP
• VPN via Concentrator
• Other Methods
• VPN Registration and Passwords
• Intro to IPSec
• IPSec Services
• Combining VPN and Firewalls

Module 10: Introduction to Wireless Network Security

• Introduction to Wireless Networking
• Basics
• Types of Wireless networks
  • WLANS
  • WPANs
  • WMANs
  • WWANs
• Antennas
• SSIDs
• Rogue Access Points
• Tools to detect Rogue Access Points: NetStumbler
• What is Wired Equivalent Privacy (WEP)?
• WEP Tool: AirSnort
• 802.11 Wireless LAN Security
• Limitations of WEP Security
• Wireless Transportation Layer Security (WTLS)                             
• Extensible Authentication Protocol (EAP) Methods
• 802.11i
• Wi-Fi Protected Access (WPA)
• TKIP and AES
• Denial of Service attacks
• Man-in-the-Middle Attack( MITM)
• WIDZ, Wireless Intrusion Detection System
• Securing Wireless Networks
• Maximum Security: Add VPN to Wireless LAN