Announcing Hands-on Linux Security workshop

[Merit Network Professional Learning]

Merit Network is pleased to present "Hands-on Linux Security: Practical
Tools and Methods," a workshop on the essentials of securing Linux-based
workstations and servers. The workshop will be offered in Ann Arbor on
October 12-14, 2009, beginning at 1:00 p.m. on Monday, October 12.

The workshop, taught over 2-1/2 days, is designed as an intensive,
hands-on learning experience in how to assess and secure your Linux
platform infrastructure using current open-source tools, techniques, and
best practices. The focus will be on studying current attack
methodologies, examining your platform for vulnerabilities, presenting
recommended solutions and best practices for mitigation, and assessing
the effectiveness of the tools and methods used.

Registration and complete details are now available at:

  http://www.merit.edu/learning/linuxsecurity


Class goals and contents
------------------------
The course is based on ITS101, Theory and Practice of Campus Computer
Security, a course offered to computer administrators at the University
of Michigan for the past three years. Over 100 administrators were
trained in security essentials during this period, providing a core set
of security competencies across campus units. Instructor Charles
Antonelli developed and coordinated the teaching of ITS101 and is
pleased to present its key Linux platform security contents to a broader
audience to benefit other organizations.

The course will be taught in a hands-on environment, emphasizing
practical application of security principles and tools. It is
appropriate for system administrators, advanced users, and others who
need expertise in Linux platform security fundamentals and best
practices. The course can serve either as a basic primer for novices or
as a refresher course for experienced administrators.

Topics to be covered include:

  * Linux Architecture Review
  * Authentication, Authorization & Audit Review
  * Reconnaissance Tool Review
  * File Systems (Linux ext4, NFS/NFSv4)
  * Introduction to SELinux
  * Logging Infrastructures
  * Viruses & Worms
  * Phishing, Pharming, Users & URLs
  * Arbitrary Code Execution: Threats & Countermeasures
  * Application Security (sshd, SSL, IPsec & VPNs)
  * Platform Security (TripWire & Bastille Unix)
  * Introduction to Forensics


About the instructor
--------------------
Charles Antonelli, Ph.D. is a research computing specialist, affiliated
with Civil and Environmental Engineering and the School of Information
at the University of Michigan. Charles created and taught the popular
ITS 101 Campus Computer Security training course, and teaches regular
courses and graduate seminars in the School of Information and the
College of Engineering at U-M. His previous research efforts include the
secure packet vault and a secure distributed network testing and
performance tool based on Globus and GARA. He received his doctorate in
Computer, Information, and Control Engineering from the University of
Michigan, and has been a Member of Technical staff at Bell Laboratories.


Laptop requirement
------------------
Students should bring an Intel-based laptop to class to participate in
virtualized Live Linux experiments. The laptop may run a Windows or
Linux/UNIX operating system and should be brought to class loaded with
VMware Player, Server, or Fusion as well as the class virtual laboratory
environment. The laptop should support wireless network connectivity.


Location, times and registration
--------------------------------
"Hands-on Linux Security: Practical Tools and Methods" will be taught
from 1:00-5:00 p.m. on Monday, October 12; 8:00 a.m. to 5:00 p.m. on
Tuesday, October 13, and 8:00 to noon on Wednesday, October 14. The
workshop will conclude with a lab session from 1:00-5:00 p.m. on
Wednesday. The Monday afternoon session will cover Linux review and
fundamentals; students proficient in these topics may skip the review
session and attend beginning on Tuesday morning. The Wednesday afternoon
lab session is encouraged for an optimal learning experience.

Registration for individuals from Merit Member organizations is $749 per
attendee. Attendees from non-profit organizations that are not Merit
Members may attend for $799. Others may register for $849. Registration
includes continental breakfast, beverages and refreshment breaks each
day. Wireless Internet service is available in the classroom.

Registration is available online, and payment can be made by credit
card, check, or purchase order. To register and to read more about the
class, please visit:

  http://www.merit.edu/learning/linuxsecurity

Seating is limited; please register early. For more information please 
contact learning@merit.edu.


--Merit Network Professional Learning
  http://www.merit.edu/learning
  learning@merit.edu

=========================================================

NEW! See all our upcoming events at:
  http://www.merit.edu/learning/schedule

VoIP Fundamentals
  --Three seats left!
  September 10-11, Ann Arbor (2 days)
  http://www.merit.edu/learning/voipfundamentals

Fall MJTS meeting
  --Presentations on WiMAX at NMU, cloud performance tools,
      Merit's broadband stimulus application and more
  September 29, East Lansing
  http://www.merit.edu/learning/mjts

Fall MITE Forum meeting
  --All IT executives invited to attend and to join the Forum
  September 30, Ann Arbor
  http://www.merit.edu/resources/mite

NANOG47 plus ARIN Meeting
  October 18-23, Dearborn
  http://www.nanog.org

Internet2 IPv6 Workshop
  November 11-13, Ann Arbor (2 days)
  http://www.merit.edu/learning/ipv62009


-----------------------------------------------------------------
TO UNSUBSCRIBE:
This list is used for occasional announcements of Merit
Network's Professional Learning events. You have been included
because we believe you may have interest in these events. If
you don't want to receive future announcements, please send
email to majordomo@merit.edu with the text:

unsubscribe event-announcements
------------------------------------------------------------------