Internet Security Diploma
Hours: 300
COURSE DESCRIPTION
This course aims to provide an understanding of the technologies behind the operation of a Public Key Infrastructure (PKI). A wide range of information technology (IT) professionals and business managers, including IT managers, webmasters, system integrators, Internet/intranet/extranet consultants, departmental managers, and strategic IT planners would especially benefit from taking this course.
PRE-REQUISITES
Familiarity with the concept of the Internet and e-business.
COURSE OUTLINE
Security and the Internet
- Security concepts
- Information security fundamentals
- Computing securely
- Security management
Security threats
- Denial of service
- Threats to data
- Specific Internet threats
Secure computing
- Securing the client
- Securing the application
- The 4A strategy
- Exercise: Selecting countermeasures
Secure networking
- Securing the network
- Securing the web platform
- Secure communications
- Exercise: Identifying Internet components
Symmetric cryptography
- Cryptography's origins
- Symmetric key algorithms
- Block ciphers
- Stream ciphers
- Exercise: Triple DES
Public key algorithms
- Asymmetric technology
- RSA algorithms
- Exercise: Performing public key encryption
Public key techniques
- Digital signatures
- Message digests
- Exercise: Using digital signatures
Key management
- Diffie-Hellman key management
- Fundamentals of key management
Cryptanalysis techniques
- Attacks on algorithms I
- Attacks on algorithms II
Using public key certificates
- Certificates
- Key pair management
- Issuing certificates
- Exercise: Reviewing certificate lifecycle
- Nonrepudiation
X.509 certificates
- X.509 format
- X.500 naming
- Version 3 format
- Exercise: Identifying the fields
- Revocation and validity
Certificate management systems
- Certificate authority structures
- Certificate practices and policies
- Certificate paths
|
| Objectives |
- Explain the use of certificates.
- Describe the certificate lifecycle.
- Describe how certificates can be used for nonrepudiation.
- Describe the X.509 certificate format.
|
|
|
