Reminder: Hands-on Linux Security workshop, Oct. 12-14

[Merit Network Professional Learning]

A few seats remain for "Hands-on Linux Security: Practical Tools and
Methods," a workshop on the essentials of securing Linux-based
workstations and servers. The workshop will be offered in Ann Arbor on
October 12-14, 2009, beginning at 1:00 p.m. on Monday, October 12.

The workshop, taught over 2-1/2 days, is designed as an intensive,
hands-on learning experience in how to assess and secure your Linux
platform infrastructure using current open-source tools, techniques, and
best practices. The focus will be on studying current attack
methodologies, examining your platform for vulnerabilities, presenting
recommended solutions and best practices for mitigation, and assessing
the effectiveness of the tools and methods used.

Registration and complete details are available at:

  http://www.merit.edu/learning/linuxsecurity


Class goals and contents
------------------------
The course is based on ITS101, Theory and Practice of Campus Computer
Security, a course offered to computer administrators at the University
of Michigan for the past three years. Over 100 administrators were
trained in security essentials during this period, providing a core set
of security competencies across campus units. Instructor Charles
Antonelli developed and coordinated the teaching of ITS101 and is
pleased to present its key Linux platform security contents to a broader
audience to benefit other organizations.

The course will be taught in a hands-on environment, emphasizing
practical application of security principles and tools. It is
appropriate for system administrators, advanced users, and others who
need expertise in Linux platform security fundamentals and best
practices. The course can serve either as a basic primer for novices or
as a refresher course for experienced administrators.

Topics to be covered include:

  * Linux Architecture Review
  * Authentication, Authorization & Audit Review
  * Reconnaissance Tool Review
  * File Systems (Linux ext4, NFS/NFSv4)
  * Introduction to SELinux
  * Logging Infrastructures
  * Viruses & Worms
  * Phishing, Pharming, Users & URLs
  * Arbitrary Code Execution: Threats & Countermeasures
  * Application Security (sshd, SSL, IPsec & VPNs)
  * Platform Security (TripWire & Bastille Unix)
  * Introduction to Forensics


About the instructor
--------------------
Charles Antonelli, Ph.D. is a research computing specialist, affiliated
with Civil and Environmental Engineering and the School of Information
at the University of Michigan. Charles created and taught the popular
ITS 101 Campus Computer Security training course, and teaches regular
courses and graduate seminars in the School of Information and the
College of Engineering at U-M. His previous research efforts include the
secure packet vault and a secure distributed network testing and
performance tool based on Globus and GARA. He received his doctorate in
Computer, Information, and Control Engineering from the University of
Michigan, and has been a Member of Technical staff at Bell Laboratories.


Laptop requirement
------------------
Students should bring an Intel-based laptop to class to participate in
virtualized Live Linux experiments. The laptop may run a Windows or
Linux/UNIX operating system and should be brought to class loaded with
VMware Player, Server, or Fusion as well as the class virtual laboratory
environment. The laptop should support wireless network connectivity.


Location, times and registration
--------------------------------
"Hands-on Linux Security: Practical Tools and Methods" will be taught
from 1:00-5:00 p.m. on Monday, October 12; 8:00 a.m. to 5:00 p.m. on
Tuesday, October 13, and 8:00 to noon on Wednesday, October 14. The
workshop will conclude with a lab session from 1:00-5:00 p.m. on
Wednesday. The Monday afternoon session will cover Linux review and
fundamentals; students proficient in these topics may skip the review
session and attend beginning on Tuesday morning. The Wednesday afternoon
lab session is encouraged for an optimal learning experience.

Registration for individuals from Merit Member organizations is $749 per
attendee. Attendees from non-profit organizations that are not Merit
Members may attend for $799. Other non-Members may register for $849.
Registration includes continental breakfast, beverages and refreshment
breaks each day. Wireless Internet service is available in the classroom.

Registration is available online, and payment can be made by credit
card, check, or purchase order. To register and to read more about the
class, please visit:

  http://www.merit.edu/learning/linuxsecurity

For more information please contact learning@merit.edu.


--Merit Network Professional Learning
  http://www.merit.edu/learning
  learning@merit.edu

=========================================================

NANOG47 plus ARIN Meeting
  October 18-23, Dearborn
  http://www.nanog.org

University of Michigan IT Security Summit
  --Free, open to the public and streamed live
  October 20, Ann Arbor
  http://safecomputing.umich.edu/events/sumit09

Merit Services Seminar
  --A free seminar to learn more about Merit's services
  October 29, Ann Arbor, plus webcast
  http://www.merit.edu/learning/services2009

Internet2 IPv6 Workshop
  November 11-13, Ann Arbor (2 days)
  http://www.merit.edu/learning/ipv62009

SANS Secure Coding in Java/JEE: Developing Defensible Applications
  January 5-8, 2010, Ann Arbor
  http://www.merit.edu/learning/sans541/

Campus LAN Switching: Techniques for Design and Management
  January 13-14, 2010, Ann Arbor
  http://www.merit.edu/learning/lanswitching/

SANS Virtualization Security and Operations
  January 20-22, 2010, Ann Arbor
  http://www.merit.edu/learning/sans557/


-----------------------------------------------------------------
TO UNSUBSCRIBE:
This list is used for occasional announcements of Merit
Network's Professional Learning events. You have been included
because we believe you may have interest in these events. If
you don't want to receive future announcements, please send
email to majordomo@merit.edu with the text:

unsubscribe event-announcements
------------------------------------------------------------------