
	Sun Educational Services

Course Catalog

Administering Security on the Solaris[tm] 8 Operating Environment

( SC-300 )

Course Description

The Administering Security on the Solaris[tm] 8 Operating Environment course provides students with the skills to implement, administer, and maintain a secure Solaris Operating Environment (OE).

Course details
id: SC-300
duration: 5 days
list price: $ 2795.00

Who Can Benefit

Solaris system administrators and Solaris security administrators with responsibility for administering one or more homogeneous Solaris OE systems or administering security on one or more Solaris OE systems

Prerequisites

To succeed fully in this course, students should be able to:

Demonstrate basic Solaris OE system and network administration skills

Install the Solaris OE

Administer users, printers, file systems, networks, and devices on the Solaris OE

Demonstrate a basic understanding of Transmission Control Protocol/Internet Protocol (TCP/IP) networking

Skills Gained

Upon completion of this course, you should be able to:

Describe security terminology and common forms of security attack

Use Solaris OE logging and auditing to identify actual and potential security attacks

Secure a Solaris OE host against user and network attacks

Use tools such as Titan and SAINT to improve system security

Related Courses

Before: SA-399: Network Administration for the Solaris 9 Operating Environment

After: SC-345: Solaris Network Intrusion Detection

Course Content

Module 1 - Security Overview Back To Top

Describe basic system security, its manifestations, and the sources and implications of poor security

Explain what security means in computing terms

Explain why system security is important

Recognize security terminology

Identify different types of security violation

Describe the most likely sources of security violations

Describe the need for security policy

Recognize the difference between prevention of security violations and fixing after the event

Explain how to obtain and build third-party security tools

Module 2 - Using Solaris OE Log Files

Locate and interpret Solaris OE standard log files

Use log files to form an audit traiL

Configure and use the syslogd daemon

Configure and use the Solaris OE process monitoring control tools

Use third-party process monitoring tools

Configure and use UNIX� accounting tools

Module 3 - The Solaris OE Basic Security Module

Implement auditing using the Solaris OE Basic Security Module (BSM)

Use the BSM to log user and kernel events

Locate and configure the necessary administrative files to implement device allocation functionality

Allocate and de-allocate shared devices

Module 4 - Security Attacks

Recognize and detect the following common security attacks and list at least two consequences of each:

Trojan horses

Back door attacks

DoS attacks

Describe how attackers can use a rootkit to cover their tracks

Module 5 - Administering User Accounts Securely

Explain how to add, maintain, and delete user accounts securely

Administer login accounts with special requirements

Describe how to make special user accounts more secure

Configure restricted shell accounts

Module 6 - Password Security

List at least two measures that constitute good password practice

Configure and use the password-cracking tool crack

Module 7 - Securing Root Access

Configure and use Role Based Access Control (RBAC)

Configure and use the sudo utility

Module 8 - File System Attacks

Set secure file permissions and ownerships

Describe the security implications of using set-user-id (SUID) programs

Describe the security implications of setting sticky bits on directories

Configure and use access control lists (ACLs)

Encrypt data using the crypt command

Describe the security implications of device files

Describe common security issues with backup and restore strategies

Module 9 - Auditing File Systems

Describe the role of file system auditing

Describe how file system auditing tools such as TripWire can secure your system

Describe the purpose of Solaris OE Fingerprint Database

Module 10 - Attacking Network Data

Describe the term "network sniffing"

Describe use of common sniffer tools

Describe common network service attacks

Describe network DoS attacks

Module 11 - Securing Network Data

Describe the basic aspects of the Secure Sockets Layer (SSL)

Explain why SSL is required, and what it does

Configure secure communications between hosts using IPsec

Module 12 - Analyzing Network Services

Apply SAINT to improve network security

Install SAINT and launch probes using the SAINT graphical user interface

Configure SAINT using the configuration file

Interpret SAINT reports

Use the Courtney scanning tool to detect SAINT-type attacks

Module 13 - Security Network Services

Configure network services such as telnet and FTP

Configure remote access using rlogin and rsh

Explain the role of chroot for enhanced security

Configure Anonymous FTP

Describe the role of authentication tools

Configure and use PAM

Disable the use of rhosts files

Describe the Sun Enterprise Authentication Mechanism and the Kerberos 5 protocol

Module 14 - Hardening the System

List at least two reasons for hardening a system

Describe the role of Titan in a secure system

Install and configure Titan

Write a Titan module

Configure and use the Automated Security Enhancement Tool (ASET)

Module 15 - Authenticating Network Services

Explain how to authenticate network clients

Install and configure TCP wrappers

Monitor the use of telnet, FTP, and other utilities with TCP wrappers

Use TCP wrappers to control network access to the system

Module 16 - Securing Remote Access

Identify the benefits of the secure shell

Install and configure the secure shell

Use the secure shell

Module 17 - Securing Physical Access

Justify the need for physical system security and define measures that enhance the physical system security

Explain the potential weak points in a physical network

Disable the STOP-A key

Explain the role of the EEPROM password and security modes

Module 18 - Connecting the Enterprise to the Outside World

Explain the importance and role of firewalls, proxy servers, and other enterprise network security components

Describe ongoing security tasks

Explain the role of security audits

List common sources of security information