The Basic LAN

• The OSI Model

• ARP Cache Poisoning

• Other Layer 2 Attacks

• Network Planning

• Load Balancing

• Securing Network Access

• Honeypots

• Firewalls

• Proxy Servers

• Network and Port Address Translation

• IP Security (IPsec)

• Virtual Private Networks (VPNs)

Intrusion Detection and Prevention Systems (IDS/IPS)

Securing Wireless LAN

• Wi-Fi Encryption Standards

• RFID, NFC, and Bluetooth

• Wi-Fi Coverage and Performance

• Wi-Fi Discovery and Attacks

• Cracking WPA2

• Wi-Fi Hardening

Securing Public Servers

• Defining a Public Server

• Common Attacks and Mitigations

• Containers and Software-Defined Networking

• Hypervisors and Virtual Machines

• Cloud Deployment Models

• Cloud Service Models

• Securing the Cloud

Securing Dedicated Systems

• Embedded Systems

• Industrial Control System (ICS)

• Internet of Things (IoT) Devices

• Connecting to Dedicated and Mobile Systems

• Security Constraints for Dedicated Systems

• Mobile Device Deployment and Hardening

Physical Security

• Physical Security Overview

• Physical Security

• Keylogger Demo

Environmental Controls

Secure Protocols and Applications

• DNS Security

• FTP Packet Capture

• Secure Web and E-mail

• Request Forgery Attacks

• Cross-Site Scripting Attacks

• Web Application Security

• Web App Vulnerability Scanning

Testing Infrastructure

• Testing Infrastructure Overview

• Social Engineering

• Social Engineering Attacks

• Vulnerability Assessments

• Penetration Testing

• Security Assessment Tools

• The Metasploit Framework

Dealing with Incidents

• Incident Response Overview

• Incident Response Plans (IRPs)

• Threat Analysis and Mitigating Actions

• Digital Forensics

• Gathering Digital Evidence

• Business Continuity and Alternate Sites

• Data Backup