Services

Technology Training: Security: Enterprise Security Series: Network Design: SANS Security Technologies

Course Objectives:

Upon completion of this course students will be able to:

• List the various popular Storage Area Networking Technologies
• List the components of a typical network architecture
• Explain the principles of security architecture and security models
• Describe the touch points to implement security in a Storage Area Network

Course Type:

The course is taught in class with an instructor.

Prerequisite:

The Student should have a basic understanding of the principles of Metropolitan and Storage Area Networks. Our "Network Design: MAN and SAN" course is highly recommended.

Audience:

Individuals that need to understand network security, specifically those responsible for the planning and implementation of Metropolitan and Storage Area Networks.

Course Description:

This course introduces the student to the controls over hardware, media and operations staff with access to privileged information or systems. Audit and monitoring mechanisms, tools and facilities will be discussed. This course also introduces identification of information assets and the development of documentation, implementation of policies, standards, procedures and guidelines to ensure confidentiality, integrity and availability. Data classification, risk assessment and risk analysis are also introduced.

Course length

1 Day

Course Outline

• Network Architecture Overview
• Network Architecture Layers
• User Access Layer
• Aggregation Layer
• Core Layer
• Services Layer
• SAN and the Service Layer
• SAN Overview
• Components of a SAN
• Fibre Channel
• ISCSI
• FCIP
• iFCP
• ISNS
• Security Architecture and Management
• Architecture and Design Principles
• Security Models, Architecture and Evaluation Criteria
• System Architecture Security Issues
• Concepts and Principles
• Protection Mechanisms
• Change Control and Management
• Data Classification
• Employment Policies and Practices
• Policies, Standards, Guidelines and Procedures
• Roles and Responsibilities
• Cryptology
• Cryptography Defined
• Cryptographic Concepts
• Private Key Algorithms
• Public Key Algorithms
• Public Key Infrastructure
• Cryptographic Architecture
• Methods of Attack
• Access Controls
• Introduction to Access Controls
• Access Control Techniques
• Access Control Administration
• Access Control Models
• Identification and Authentication Techniques
• Assess Control Methodologies and Implementation
• Methods of Attack
• Monitoring Techniques
• SAN Security
• SAN Threats
• Standards
• FC-SP
• Bluefin/SMI
• Authorization Zoning
• Techniques for SAN Security
• Conclusion