7 Days Left to Save $400 for SANS Security West 2010 >> More Info

The most trusted source for computer security training, certification and research.

Global Information Assurance Certification

SANS training is like a catalyst. It not only boosts your knowledge but also inspires you to learn more.
-Tan Koon Yaw, IDA

NOTE: Mentor sessions run for 10 weeks, one evening a week for two hours unless otherwise noted below.
Security 504: Hacker Techniques, Exploits & Incident Handling

Bowling Green, KY 42101
Thursday, June 24, 2010 - Thursday, September 2, 2010

Course Fees Payment Deadline
$2,695.00 Through Thursday, May 20, 2010 *
$2,845.00 After Thursday, May 20, 2010 *
$3,095.00 After Thursday, June 3, 2010
$499.00 Additional For Proctored Certification †
$399.00 Additional For OnDemand

* Payment must be RECEIVED by the deadline to receive the posted rate.

Mentor: Chris Sanders
Dates:  Thursday, June 24, 2010 - Thursday, September 2, 2010
Meeting Time:  6:30 PM - 8:30 PM
Where:

Western Kentucky University
Cyber Defense Laboratory Training Room
2413 Nashville Road - Suite 120
Bowling Green, KY 42101
Mentor Biography:
Chris Sanders
Chris Sanders is a technology consultant, author, and trainer originally from around Paducah, Kentucky. That’s ten miles west of the town Possum Trot, thirty miles east of the community of Monkey’s Eyebrow, and ten miles north of New York City (population 214). He currently resides in Bowling Green, Kentucky.

Chris serves as the senior information security analyst for EWA Government Systems, Inc where he interfaces with various government entities in an effort to provide a more secure cyber posture for the United States.

His book Practical Packet Analysis is widely respected as one of the best practical use books on its topic and has sold several thousand copies internationally. Along with this, Chris has written and co-written hundreds of articles on the topics of packet analysis, network security, Microsoft Server technologies, and general network administration. Chris is currently a staff writer for WindowsNetworking.com and WindowsSecurity.com, members of the TechGenix network.

In 2008, Chris founded the Rural Technology Fund. The RTF is a 501(c)(3) non-profit organization designed to provide scholarship opportunities to students from rural areas pursuing careers in computer technology. The organization also promotes technology advocacy in rural areas through various support programs. You can read more about the RTF at http://www.ruraltechfund.org.

Chris has obtained bachelors degrees in telecommunications and international business from Murray State University and currently holds several industry certifications including being recognized as a Certified Information Systems Security Professional (CISSP), SANS GIAC Certified Incident Handler (GCIH), Microsoft Certified Professional (MCP), and Certified Wireless Network Administrator (CWNA). You can read more about Chris on his personal blog located at http://www.chrissanders.org where he posts information regarding his latest projects as well as various technical articles, or follow Chris on twitter at http://www.twitter.com/chrissanders88.

This course prepares you for the GCIH certification ( http://www.giac.org/certifications/security/gcih.php ) which meets the requirement of the DoD 8570 IAT Level III.

If your organization has an Internet connection or one or two disgruntled employees (and whose doesn't!), your computer systems will get attacked. From the five, ten, or even one hundred daily probes against your Internet infrastructure to the malicious insider slowly creeping through your most vital information assets, attackers are targeting your systems with increasing viciousness and stealth.

By helping you understand attackers' tactics and strategies in detail, giving you hands-on experience in finding vulnerabilities and discovering intrusions, and equipping you with a comprehensive incident handling plan, the in-depth information in this course helps you turn the tables on computer attackers. This course addresses the latest cutting-edge insidious attack vectors and the "oldie-but-goodie" attacks that are still so prevalent, and everything in between. Instead of merely teaching a few hack attack tricks, this course includes a time-tested, step-by-step process for responding to computer incidents; a detailed description of how attackers undermine systems so you can prepare, detect, and respond to them; and a hands-on workshop for discovering holes before the bad guys do. Additionally, the course explores the legal issues associated with responding to computer attacks, including employee monitoring, working with law enforcement, and handling evidence.

This challenging course is particularly well suited to individuals who lead or are a part of an incident handling team. Furthermore, general security practitioners, system administrators, and security architects will benefit by understanding how to design, build, and operate their systems to prevent, detect, and respond to attacks.

It is imperative that you get written permission from the proper authority in your organization before using these tools and techniques on your company's system and also that you advise your network and computer operations teams of your testing.