Operating System Security

Operating System Security is a 6-hour course designed to teach students the latest security industry recommendations and how to properly protect Windows 2000 and Linux servers in a variety of settings. Students will learn how to protect Windows 2000 and Linux systems from attacks, reconfigure the operating system to fully protect it, and scan hosts for known security problems. By the end of the course, students will have a solid understanding of the security architectures used by Windows 2000 and Linux.

Prerequisites:

Students must have completed Network Security and Firewalls or be able to demonstrate equivalent knowledge.

Upon completion of this course, the participant, at a minimum, will be able to demonstrate the following skills:

• Describe the typical uses of different operating systems in the enterprise and how they interact with other components of an organization's core IT infrastructure
• Perform fundamental system administration and audit operations
• Perform user administration, access control, auditing, and reporting on various operating systems

Participants will be able to build up a solid understanding of various operating systems functions, features, and their associated security risks through lectures and hands-on exercises. Furthermore participants evaluate the OS and its security measurement by reviewing, auditing, reporting and recommending proper security controls.

Learning Level: Intermediate

Duration: 3 day(s)-

• Overview of Security Principles
• Definition of Security
• Evaluation Criteria
• Security Levels
• Security Mechanisms
• Security Management
• Windows 2000 Security
• Windows 2000 Security Architecture
• Linux Security
• Pluggable Authentication Modules (PAMs)

• Securing Accounts: An Overview
• Passwords
• Verifying System State
• Password Aging in Linux
   

• File System Security Overview
• Windows 2000 File System Security
• Remote File Access Control
• Linux File System Security

• Risk Assessment Basics
• Security Threats
• Windows 2000 Security Risks
• General UNIX Security Vulnerabilities
• Keyloggers
• System Port Scanning
• UNIX Security Risks
• NIS Security Concerns
• NFS Security Concerns
   

• Reducing Risk through Simplification
• Patches and Fixes
• Windows 2000 Registry Security
• Disabling and Removing Unnecessary
• Services in Windows 2000
• Reducing Risk in Linux Systems