Time

Course

Agenda

  2005/6/6

09:30~11:00

Session I：Introduction of NetKeeper^TM Functionalities

Introduction of NetKeeper^TM Functionalities

Briefing on NetKeeper^TM Functionalities and case study

11:00-12:00

Session II：NetKeeper^TM Installation & Operation

NetKeeper^TM Installation and Configuration

a. NetKeeper^TM Installation

b. NetKeeper^TM Configuration

14:00-17:30

Using NetKeeper^TM

a. BEMS (Policy) Server Installation

b. User account & Product Registration

c. Graphic User Interface (GUI)

d. Report Generator- Schedule Report

e. Advanced Settings -Defining new customize policy rule

f. Case Study & Exercise

g. Q&A

Time

Course

Agenda

2005/6/7

09:30~12:00

Reference Sites Visiting

14:00-15:00

Quiz on NetKeeper^TM Installation & Configuration topic

Multiple-Choice Questions

15:00-17:30

Session III：Unveiling NetKeeper^TM Signatures

OSI & TCP/IP Introduction

a. OSI Model

b. TCP/IP Protocol Suite

c. IP/ICMP/IGMP/TCP/UDP

NetKeeper^TM IPS Analysis Techniques Overview

a. Misuse-based Detection

b. Anomaly-based Detection

NetKeeper^TM Signatures Introduction

a. Attack Type

b. Attack Severity

c. Anomaly Detection Rules in NetKeeper^TM

d. Examples of Anomaly Detection Rules in NetKeeper^TM

e. Statistics of NetKeeper^TM Signatures

Time

Course

Agenda

2005/6/8

09:30~17:30

Case Studies

a. MS-SQL Slammer

b. W32/Blaster

User Define Signatures

a. Using Sniffer / Ethereal

b. Defining a New Defense Signature

c. Signature Examples

LAB

Hacking Practice & Defining Countermeasure Signatures with NetKeeper^TM

Exercises

a. Defining signatures against MSN login

b. Defining signatures against WEB MSN

c. Defining signatures against P2P

d. Defining signatures against Trojan Horse

e. Defining signatures against Exploits

f.  Signature troubleshooting techniques