The most trusted source for computer security training, certification and research.



Global Information Assurance Certification

Instructors have excellent hands on real life experience.
-Terry Kuxhaus, State of South Dakota

NOTE: Mentor sessions run for 10 weeks, one evening a week for two hours unless otherwise noted below.
Security 564: Security Architecture for Systems Administrators

Piscataway, NJ 08854
Monday, February 8, 2010 - Wednesday, February 17, 2010

Class meets 2/8, 2/10, 2/15, 2/17

Course Fee: $1,645.00

* Payment must be RECEIVED by the deadline to receive the posted rate.

Mentor: Beth Binde
Dates:  Monday, February 8, 2010 - Wednesday, February 17, 2010
Meeting Time:  6:00 PM - 9:00 PM
Where:

Rutgers - Busch Campus
96 Davidson Road
Davidson Hall Room 172B - Busch Campus
Piscataway, NJ 08854
Mentor Bio:
 Beth Binde: Since 2002, Beth has led six classes for SANS. Beth works in the Information Protection and Security area, Rutgers University Office of Information Technology. She also teaches at the School of Communication and Information at Rutgers. In addition to the GSEC, GCIA, GCIH, GCFA and GSNA certifications, Beth holds an MS in Computer Science, an MA in the Program for Administrators, and a BA in Political Science. Current outside interests include learning French.

Key Techniques System Administrators Use to Find Hackers In Their Systems (Also known as "Detecting the Wily Hacker")

This course and continuing updates give system administrators up-to-date tools and techniques to illuminate evidence of potentially malicious activity on their systems and to look deeper to determine whether problems are real. It uses hands-on exercises to ensure sysadmins are comfortable using the tools. Because attack vectors are constantly changing, the program does not stop with the first class, but continues with quarterly updates that illuminate the newest attacks and how the lessons they learned before would be adjusted to target the newest attacks. Because attackers are increasingly focusing on database and application software, the program will also include a growing library of up-to-date modules on finding hackers in specific software applications and Web sites. The order of development of the additional modules will be determined by a vote of the system administrators who are active in the program.

This course is not designed to make a sysadmin into a security geek. Rather, it will help sysadmins better understand how they can do what is required by security teams and auditors without wasting a lot of time. The course also has a strong focus on tools and techniques that system administrators need to meet audit and security requirements as efficiently as possible.

In other words, this class provides the tools and techniques that help sysadmin teams meet the needs of security and audit teams -- and still do their day jobs.