Building a Secure Organization

​

1. Real threats that impact cybersecurity

   1. Hackers inside and out

   2. Eavesdropping

   3. Spoofing

   4. Sniffing

   5. Trojan horses

   6. Viruses

   7. Wiretaps

2. A cyber security policy: the foundation of your protection

   1. Defining your information assurance objectives

   2. Assessing your exposure

 

A Cryptography Primer

​

1. Securing data with symmetric encryption

   1. Choosing your algorithm: DES, AES, Rc4 and others

   2. Assessing key length and key distribution

2. Solving key distribution issues with asymmetric encryption

   1. Generating keys

   2. Encrypting with RSA

   3. PGP and GnuPG

   4. Evaluating Web of Trust and PKI

3. Ensuring integrity with hashes

   1. Hashing with Md5 and SHA

   2. Protecting data in transit

   3. Building the digital signature

 

Guarding Against Network Intrusions

​

1. Scanning for vulnerabilities

   1. Searching for rogue servers

   2. Profiling systems and services

2. Reducing Denial of Service (DoS) attacks

   1. Securing DNS

   2. Limiting the impact of common attacks

3. Deploying firewalls to control network traffic

   1. Preventing intrusions with filters

   2. Implementing a cyber security policy

   3. Deploying personal firewalls

4. Protecting web services and applications

   1. Validating user input

   2. Controlling information leakage

 

Ensuring Network Confidentiality

1. Threats from the LAN

   1. Sniffing the network

   2. Mitigating threats from connected hosts

   3. Partitioning the network to prevent data leakage

   4. Identifying wireless LAN vulnerabilities

2. Confidentiality on external connections

   1. Ensuring confidentiality with encryption

   2. Securing communication with IPSec