| 08:30 |
KEYNOTE
COMMENTS, WELCOME AND INTRODUCTIONS - Roles and Responsibilities
of the Security Practitioner |
| 09:00 |
CONFRONTING
THE SYSTEM CHALLENGE TO SECURE COMPUTING |
|
The Current
Nature of the Intruder Phenomenon and Emerging New Technologie |
|
• |
The Hacker Threat &
Intrusions & Operating System Vulnerabilities & Exploit |
|
• |
Conducting
the Threat Analysis & Risk Assessment |
|
• |
Applying
Emerging Technologies; Security Database Technology |
|
• |
Integration
of Security Functions - The Next Generation of Security Software |
| 09:45 |
INTRODUCTION
TO THE COMPUTER UNDERGROUND |
| 10:15 |
INTERNET RELAY CHAT -
ACTUAL ON-LINE MEMBERS OF THE COMPUTER UNDERGROUND |
| 11:00 |
ON-LINE
TOUR OF COMPUTER SECURITY AND HACKER WEBSITES |
| 11:40 |
SOCIAL
ENGINEERING AND VIDEO PRESENTATION |
|
Features a
Top White Hat Hacker in a 20/20 interview |
| 13:00 |
PRINCIPLES
OF SECURITY POLICIES |
|
Developing
Company Security Policies, System and Business Rules, Quality Controls |
| 14:00 |
PRACTICAL APPLICATION OF
SECURITY POLICIES USING THE INSTITUTIONAL REQUIREMENTS OF SPREADSHEET |
| 15:00 |
INTRODUCTION TO
THE RISK ASSESSMENT PROCEDURES |
| 08:30 |
TESTING
RISK ASSESSMENT AND PROCEDURES |
| 09:30 |
Exercise–Develop
Risk Assessment Chart and SECURITY Controls Matrix |
| 10:30 |
Introduction
to Technical Scanning & Penetration Testing |
|
"Understanding
the Fundamental Skills" |
| 11:30 |
CONTROL
CONSIDERATIONS IN SCANNING & PENETRATION TESTING |
| 13:00 |
Information
Gathering: Basic & Advanced Scanning, AND EXPLOITS |
| 14:00 |
Securing
the Conquest - Rootkits, Backdoors, Trojans |
| 14:30 |
INFILTRATING THE NETWORK -
Sniffing, Session Hijacking / Sniping, Human Trust Relationships, System-based
Trust Relationship |
| 15:00 |
THE
ELEMENTS OF A CONTROLLED PENETRATION - PASSIVE METHODS |
|
• |
Methodology
/ Philosophy |
• |
Public Information |
|
• |
Mapping the Network |
• |
WWW |
|
• |
nslookup |
• |
HTTP Information |
|
• |
Usenet |
• |
host |
| 15:30 |
THE ELEMENTS OF A
CONTROLLED PENETRATION - ACTIVE METHODS |
|
• |
Methodology /
Philosophy |
• |
Social Engineering |
|
• |
Mapping the Network |
• |
Firewalls |
|
• |
Remote
OS Fingerprinting |
• |
Physical Security |
|
• |
Service Exploits |
• |
Report Writing |
| 16:00 |
CONTROLLED
PENETRATION - PRACTICAL EXERCISE AND TEST |
| 17:00 |
QUESTIONS
AND ANSWERS / ADJOURN |
