Cyberhacker Series: Honeypots, IDS and FW's

Name: Cyberhacker Series: Honeypots, IDS and FW's
Rating: 3.6 (120 reviews)

Created byChad Russell

Last updated 11/2017

English

English [Auto],

What you'll learn

You will be able to install and deploy honeypots and IDS systems.

Course content

1 section • 11 lectures • 1h 39m total length

Introduction9:19
Explore networks and hosts intrusion detection and prevention concepts, including nids, nips, hids, hips, dmz deployments, and detection methods like statistical, baseline, and signature analysis.
Snort26:46
Explore intrusion detection on Windows networks using Snort, highlighting network based evidence, promiscuous mode, and the four Snort components—sniffer, preprocessor, detection engine, and output—along with lab setups and Security Onion.
Advanced IDS6:20
Honeypots6:36
Lure attackers with decoy systems, such as honeypots and honeynets, to study their methods and strengthen real network defenses.
Honeydrive Installation1:10
Start Honey Drive to quickly spin up a honeypot environment by importing a VM from a Honey Drive distribution in VirtualBox. Explore the interface to access numerous preinstalled honeypot tools.
Kippo SSH Honeypot6:50
Explore Kippo SSH honeypot setup, emulation with a Python runtime, honey FS, and fake banners. Learn how blue teams record attacker sessions and detect honeypots with nmap scripts.
Firewalls3:30
A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules.
Firewalls have been a first line of defense in network security for over 25 years. They establish a barrier between secured and controlled internal networks that can be trusted and untrusted outside networks, such as the Internet. A firewall can be hardware, software, or both.
Advanced Perimeter Security12:17
This lecture explains that perimeter security remains vital with cloud adoption, covering load balancers, forward and reverse proxies, API gateways, firewall rules, and unified threat management for application-layer inspection.
LAN Security13:09
Secure land environments with vlan segmentation and access control lists, deploy tac x and radius for centralized authentication, and apply openflow-based sdn to monitor traffic and defend against dos attacks.
Threat Management8:29
Explore threat modeling and threat assessments to identify threats, estimate probability and impact, and implement countermeasures within a risk management framework, covering cloud attack vectors, dataflow diagrams and attack diagramming.
DNSSec4:45
Explore how the DNS infrastructure works, including root and authoritative name servers, caching DNS servers, and how DNSSEC creates a chain of trusted signatures to secure lookups.

Requirements

Students should have a working understanding of TCP/IP and networking concepts.

Description

Cyberhacker Series: Honeypots, IDS and FW's: Honeypots, IDS and FW's

This course is for beginners and IT pros looking to learn more about Honeypots, IDS and Firewalls. Each chapter closes with exercises putting your new learned skills into practical use immediately.

What are the pre-requisites for this course?

Students should have a working understanding of TCP/IP and networking concepts.

What will you be able to do after taking this course?

Honey drive - HoneyDrive is the premier honeypot Linux distro. It is a virtual appliance (OVA) with Xubuntu Desktop 12.04.4 LTS edition installed. It contains over 10 pre-installed and pre-configured honeypot software packages such as Kippo SSH honeypot, Dionaea and Amun malware honeypots, Honeyd low-interaction honeypot, Glastopf web honeypot and Wordpot, Conpot SCADA/ICS honeypot, Thug and PhoneyC honeyclients and more. Additionally it includes many useful pre-configured scripts and utilities to analyze, visualize and process the data it can capture, such as Kippo-Graph, Honeyd-Viz, DionaeaFR, an ELK stack and much more. Lastly, almost 90 well-known malware analysis, forensics and network monitoring related tools are also present in the distribution.
Kippo - Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.
Snort - Snort is an open-source, free and lightweight network intrusion detection system ( NIDS) software for Linux and Windows to detect emerging threats.
DNSSec - Domain Name System Security Extensions (DNSSEC) is a suite of extensions that add security to the Domain Name System (DNS) protocol by enabling DNS responses to be validated. Specifically, DNSSEC provides origin authority, data integrity, and authenticated denial of existence.

Who this course is for:

This course is for beginners and IT pros looking to get certified and land an entry level Cyber Security position paying upwards of six figures! There are currently over a million Cyber Security job openings global and demand is greatly outpacing supply which means more opportunity, job security and higher pay for you! Each chapter closes with exercises putting your new learned skills into practical use immediately.