City of Dublin Education & Training Board. Programme Module for. Network Security. leading to. Level 6 QQI. Network Security 6N0720

Transcription

1 City f Dublin Educatin & Training Bard City f Dublin Educatin & Training Bard Prgramme Mdule fr Netwrk Security leading t Level 6 QQI Netwrk Security 6N0720 Netwrk Security 6N0720

2 City f Dublin Educatin & Training Bard Intrductin This prgramme mdule may be delivered as a standalne mdule leading t certificatin in a QQI minr award. It may als be delivered as part f an verall validated prgramme leading t a Level 6 QQI Certificate. The teacher/tutr shuld familiarise themselves with the infrmatin cntained in [Named Prvider s] prgramme descriptr fr the relevant validated prgramme prir t delivering this prgramme mdule. The prgramme mdule is structured as fllws: 1. Title f Prgramme Mdule 2. QQI Cmpnent Title and Cde 3. Duratin in hurs 4. Credit Value f QQI Cmpnent 5. Status 6. Special Requirements 7. Aim f the Prgramme Mdule 8. Objectives f the Prgramme Mdule 9. Learning Outcmes 10. Indicative Cntent 11. Assessment a. Assessment Technique(s) b. Mapping f Learning Outcmes t Assessment Technique(s) c. Guidelines fr Assessment Activities 12. Grading 13. Learner Marking Sheet(s), including Assessment Criteria Integrated Delivery and Assessment The teacher/tutr is encuraged t integrate the delivery f cntent where an verlap between cntent f this prgramme mdule and ne r mre ther prgramme mdules is identified. This prgramme mdule will facilitate the learner t develp the academic and vcatinal language, literacy and numeracy skills relevant t the themes and cntent f the mdule. Likewise the teacher/tutr is encuraged t integrate assessment where there is an pprtunity t facilitate a learner t prduce ne piece f assessment evidence which demnstrates the learning utcmes frm mre than ne prgramme mdule. The integratin f the delivery and assessment f level 6 Cmmunicatins and level 6 Mathematics mdules with that f ther level 6 mdules is specifically encuraged, as apprpriate. Indicative Cntent The indicative cntent in Sectin 10 des nt cver all teaching pssibilities. The teacher/tutr is encuraged t be creative in devising and implementing ther appraches, as apprpriate. The use f examples is there t prvide suggestins. The teacher/tutr is free t use ther examples, as apprpriate. The indicative cntent ensures all learning utcmes are addressed but it may nt Netwrk Security 6N0720

3 City f Dublin Educatin & Training Bard fllw the same sequence as that in which the learning utcmes are listed in Sectin 9. It is the teacher s/tutr s respnsibility t ensure that all learning utcmes are included in the delivery f this prgramme mdule. Netwrk Security 6N0720

4 City f Dublin Educatin & Training Bard 1. Title f Prgramme Mdule Netwrk Security 2. Cmpnent Name and Cde Netwrk Security 6N Duratin in Hurs 150 Hurs (typical learner effrt, t include bth directed and self directed learning) 4. Credit Value 15 Credits 5. Status This prgramme mdule may be cmpulsry r ptinal within the cntext f the validated prgramme. Please refer t the relevant prgramme descriptr, Sectin 9 Prgramme Structure 6. Special Requirements NONE 7. Aim f the Prgramme Mdule This prgramme mdule aims t give the student an understanding f the fundamental cncepts in Netwrk Security and an ability t implement best practice slutins in the prtectin f cmputer system. 8. Objectives f the Prgramme Mdule T enable the learner t understand the fundamental cncepts and terminlgy in Netwrk Security. T enable the learner t explain the imprtance f auditing and cmpliance in Netwrk Security. T assist the learner t analyse the features f and implement the varius techniques used t prtect cmputer systems. T enable the learner t understand the cncepts behind and implement secure cmmunicatin n a cmputer system. T assist the learner t develp the academic and vcatinal language, literacy and numeracy skills related t Netwrk Security thrugh the medium f the indicative cntent T enable the learner t exercise substantial persnal autnmy and respnsibility. Netwrk Security 6N0720

5 City f Dublin Educatin & Training Bard 9. Learning Outcmes f Level 6 Netwrk Security 6N0720 Learners will be able t: 1. Demnstrate an understanding f and apply key (fundamental) cncepts and principles in cmmunicatin and infrastructure security 2. Identify security threats t, and weaknesses f, netwrk slutins and deplyments bth external and internal 3. Demnstrate an understanding f the cncepts and mdalities cmmnly explited in netwrk, system and sftware cmprmise strategies and demnstrate hw t prtect against such attacks 4. Analyse the capabilities f netwrk prtectin and threat remediatin slutins, and issue recmmendatins theref 5. Define and enfrce rbust security, cmpliance, auditing and updating plicies 6. Implement and test practive security slutins acrss a variety f platfrms 7. Establish and implement a centralised system update and sftware patching regimen 8. Secure cmmn sftware and internet services 9. Use a VPN t securely cnnect, and rute remte traffic, int a crprate netwrk 10. Establish secure wireless cnnectivity fr devices and users within a crprate netwrk (e.g. WPA, WPA2, EAP, 802.1x) 11. Engage in systematic security auditing, system hardening and penetratin testing fr all netwrk devices and services 12. Describe a training, auditing and cmpliance system fr an rganisatin s cmputer system 13. Demnstrate an understanding f the different methds used fr sftware restrictin plicies, and implement and evaluate ne such methd 14. Investigate hardware and sftware encryptin slutins fr securing infrmatin n mdern netwrkable systems Netwrk Security 6N0720

6 City f Dublin Educatin & Training Bard 10. Indicative Cntent This sectin prvides suggestins fr prgramme cntent but is nt intended t be prescriptive. The prgramme mdule can be delivered thrugh classrm based learning activities, grup discussins, ne-t-ne tutrials, field trips, case studies, rle play and ther suitable activities, as apprpriate. Sectin 1 : Fundamental Cncepts (1,2,3) Facilitate the learner t: Explain the imprtance f Cnfidentiality, Integrity and Availability in Netwrk Security. Explain the imprtance f access cntrl and explre the different mdels that are available, including Mandatry Access Cntrl (MAC), Rle Based Access Cntrl (RBAC), Discretinary Access Cntrl (DAC), Rule Based Access Cntrl (RBAC r RB-RBAC) Explain cmmn terminlgy in security, including Asset Threat Threat Agent Vulnerability Explit Risk Describe the different types f attackers that might threaten security, including: Hackers Script kiddies Spies Emplyees Cybercriminals Cyberterrrists Outline the steps invlved in an attack, including: Prbing fr infrmatin (Enumeratin) Penetrating any defenses Mdificatin f security settings Circulatin t ther systems Explain the methds used in cmmn netwrk attacks and what defences might be used against them, including: Netwrk Security 6N0720

7 City f Dublin Educatin & Training Bard Viruses, Wrms, Spyware, Key lggers Scial Engineering Attacks, e.g. Phishing, Spfing, Pharming Btnets Rtkits Man in the Middle Attacks Facilitate the learner t: Sectin 2: Auditing and Prtectin (5,11,12,7,8,4,6,13) Develp an Auditing Plicy fr a cmpany t include sectins n: Wh can use resurces Prper use f the resurces Granting access & use System Administratr privileges User rights & respnsibilities What t d with sensitive infrmatin Desired security cnfiguratins f systems Explain briefly, RFC 1244 and ISO Demnstrate a familiarity with privacy and data prtectin laws and regulatins, and the imprtance f cmpliance with these. Explain the imprtance f an update plicy in prtecting a system frm vulnerabilities. Implement a centralised update system. E.g cnfigure Windws Server Update Services Explain the Btstrapping prblem, prpse methds f vercming the prblem, e.g. examining surce cde and cmpiling the sftware Describe and be able t use cmmn auditing tls, e.g. Nmap Run scans frm nmap using different ptins and cmpare the results that are returned Use the results frm nmap t frmulate a simple reprt in a wrd prcessr. Identify vulnerable services by checking their versin numbers against nline explit databases. Harden a system against attack using measures including, fr example Cnfigure standard and extended ACLs n a ruter Blck traffic based n surce, destinatin address Netwrk Security 6N0720

8 City f Dublin Educatin & Training Bard Blck traffic based n prtcl, e.g. blck pings by blcking ICMP Passwrd cmplexity Enfrce cmplexity rules n a Windws Operating system Installing a firewall Install a firewall frm, fr example, Nrtn n a PC Cnfigure the firewall t allw r disallw particular sftware t cmmunicate n the Internet, e.g. disable itunes ability t cmmunicate ver the internet. Applying Sftware restrictins Cnfigure a cmputer t allw r disallw particular sftware, e.g n Windws use the Sftware Restrictin Plicy. Explain the varius methds f restricting sftware, including: Hash rules Certificate Rules Path Rules Zne Rules Disabling any unnecessary services Demnstrate hw t start, restart, and stp services running n a hst. Describe the peratin f, and demnstrate the use f cmmn penetratin testing tls, fr example: Wireshark Use Wireshark t capture packets frm the Netwrk. Filter packets based n Prtcl, Address, etc. Passwrd cracking tls, e.g. Jhn the ripper Set up sme user accunts with shrt insecure passwrds and test hw lng Metasplit it takes t crack them. Set up a virtual machine with an vulnerable OS,e.g. Metasplitable and use Aircrack-ng metasplit t attack the system. Explain hw meatsplitable is used in Netwrk attacks. Use aircrack-ng t gather infrmatin abut access pints and hsts n a wireless netwrk Explain hw aircrack might be used t crack passwrds n a wireless netwrk Netwrk Security 6N0720

9 City f Dublin Educatin & Training Bard Describe a training, auditing and cmpliance system fr an rganisatin s cmputer system Examine the key features f different Netwrk Security Suites, e.g. Nrtn, Kaspersky with a view t making a recmmendatin as t their suitability in different cntexts, e.g. Hme use, Crprate use Install and use a security suite, e.g. Nrtn, MacAfee and test its effectiveness E.g Setup a security suite n ne machine and run an Nmap scan frm anther t see if it will pick up the scan. Facilitate the learner t: Sectin 3: Secure Cmmunicatin (9,14,10) Use a VPN client t cnnect t a securely cnnect t a remte netwrk. Explain the hw a VPN can be used as a prxy Describe hw encryptin is used t secure infrmatin Describe mdern encryptin algrithms, including: Symmetric key algrithms Blck ciphers Stream Ciphers Hash Functins Public Key algrithms Implement encryptin t prtect data, including: Encrypt a partitin n a harddrive Send an encrypted , using pen sftware, e.g. PGP Encrypt a text file Generate an md5 hash fr a file Establish secure wireless cnnectivity fr devices and users within a crprate netwrk (e.g. WPA, WPA2, EAP, 802.1x) Netwrk Security 6N0720

10 City f Dublin Educatin & Training Bard 11. Assessment 11a. Assessment Techniques Skills Demnstratin 60% (Practical) Exam (Thery) 40%% 11b. Mapping f Learning Outcmes t Assessment Techniques In rder t ensure that the learner is facilitated t demnstrate the achievement f all learning utcmes frm the cmpnent specificatin; each learning utcme is mapped t an assessment technique(s). This mapping shuld nt restrict an assessr frm taking an integrated apprach t assessment. Learning Outcme 1. Demnstrate an understanding f and apply key (fundamental) cncepts and principles in cmmunicatin and infrastructure security 2. Identify security threats t, and weaknesses f, netwrk slutins and deplyments bth external and internal 3. Demnstrate an understanding f the cncepts and mdalities cmmnly explited in netwrk, system and sftware cmprmise strategies and demnstrate hw t prtect against such attacks 4. Analyse the capabilities f netwrk prtectin and threat remediatin slutins, and issue recmmendatins theref 5. Define and enfrce rbust security, cmpliance, auditing and updating plicies 6. Implement and test practive security slutins acrss a variety f platfrms 7. Establish and implement a centralised system update and sftware patching regimen Assessment Technique Exam Exam Exam and Skills Demnstratin Exam Skills Demnstratin Skills Demnstratin Skills Demnstratin 8. Secure cmmn sftware and internet services Skills Demnstratin 9. Use a VPN t securely cnnect, and rute remte traffic, int a Skills crprate netwrk Demnstratin 10. Establish secure wireless cnnectivity fr devices and users within a crprate netwrk (e.g. WPA, WPA2, EAP, 802.1x) 11. Engage in systematic security auditing, system hardening and penetratin testing fr all netwrk devices and services 12. Describe a training, auditing and cmpliance system fr an rganisatin s cmputer system Skills Demnstratin Skills Demnstratin Exam Netwrk Security 6N0720

11 City f Dublin Educatin & Training Bard 13. Demnstrate an understanding f the different methds used fr sftware restrictin plicies, and implement and evaluate ne such methd 14. Investigate hardware and sftware encryptin slutins fr securing infrmatin n mdern netwrkable systems Skills Demnstratin Skills Demnstratin Netwrk Security 6N0720

12 City f Dublin Educatin & Training Bard 11c. Guidelines fr Assessment Activities The assessr is required t devise assessment briefs and marking schemes fr the skills demnstratins, examinatin papers, marking schemes and utline slutins fr the examinatin. In devising the assessment briefs and examinatin papers, care shuld be taken t ensure that the learner is given the pprtunity t shw evidence f achievement f ALL the learning utcmes. Assessment briefs may be designed t allw the learner t make use f a wide range f media in presenting assessment evidence, as apprpriate. Quality assured prcedures must be in place t ensure the reliability f learner evidence. Learning utcmes 3 and 5 are assessed by bth examinatin and skills demnstratin. It is intended that knwledge f the cncepts invlved is assessed by examinatin and that the learner demnstrates practical skills and techniques in the skills demnstratin. Skills Demnstratins 60% Each skills demnstratin shuld take frm 2 t 3 hurs each ver the duratin f the curse. Skills Demnstratin 1(3,6) Demnstrate hw t prtect against cmmn attacks against Netwrks and Sftware. Using varius sftware, including Firewall, install a hst based firewall and bserve any warnings that are triggered as the user uses the Internet in a typical sessin. The installatin may be tested by fr example, running an nmap scan frm anther machine and check the firewall lg. Intrusin Detectin System, setup an IDS, e.g. Snrt and simulate an attack using fr instance nmap r metasplit. Examine the lgs t see if the attack was recrded Anti-virus sftware, install anti-virus sftware, update the database and run a full scan Skills Demnstratin 2(5,7,13) Develp a plicy fr, and implement a system fr delivering updates acrss a system. Outline a plicy that lks at fr example, hw t check fr updates, update intervals, what changes are made, what if an update breaks the system Implement a sftware restrictin plicy. In a real r fictinal rganisatin, identify what sftware resurces are available, what user grups exist, what access requirements exist and what are restrictins are necessary Skills Demnstratin 3(9,10,14) Demnstrate varius methds f secure cmmunicatins, including VPN Encryptin Securing Wireless cmmunicatin, e.g. implementing WPA2 n a wireless access pint Use methds f securing sftware and Internet Services thrugh Using SSH, SSL Netwrk Security 6N0720

13 City f Dublin Educatin & Training Bard Cnnect t a remte machine using ssh and perfrm sme rutine tasks n that machine, such as, fr example, create a new user, list the cntents f the current directry, etc. Use wireshark t mnitr a http sessin and an encrypted sessin using ssl, describe the difference between the captures. (8,11)Skills Demnstratin 4 Use scanning sftware t enumerate a netwrk an list any vulnerable sftware and any available explits Use nmap t scan a remte machine fr pen prts and use an nline explit database t see if there are any vulnerabilities in the services Create a reprt identifying the ut f date/vulnerable sftware Make any recmmendatins Use sftware such as metasplit t attempt t explit any vulnerability fund. (It is nt necessary t gain access t the vulnerable machine, nly t demnstrate the techniques an attacker might use) Using Access Cntrl Lists t limit access t cmmn services, e.g. HTTP FTP ICMP Evidence fr this assessment technique may take the frm f written r digital evidence, r any cmbinatin f these Any audi, vide r digital evidence must be prvided in a suitable frmat. All instructins fr the learner must be clearly utlined in an assessment brief. Exam 40% 2 Hurs (1,2,3,4,5,12) Devise an exam paper, with 4 structured questins, where the student must answer all questins. Questins shuld cver the fllwing areas: Cmmn terminlgy and key cncepts in Netwrk Security(1) e.g. Access cntrl, Attack methdlgies Identify different attacks that are perfrmed n a Netwrk, explain hw they are achieved(2,3) Explain the varius methds f prtectin that are available, including apprpriate plicies(4,5) Describe the imprtance f auditing and cmpliance in Netwrk Security.(12) Structured questins are divided int a number f related parts and generally require the learner t demnstrate mre in-depth knwledge and understanding f a tpic. All instructins fr the learner must be clearly utlined in an examinatin paper. 12. Grading Netwrk Security 6N0720

14 City f Dublin Educatin & Training Bard Distinctin: 80% - 100% Merit: 65% - 79% Pass: 50% - 64% Unsuccessful: 0% - 49% At levels 4, 5 and 6 majr and minr awards will be graded. The grade achieved fr the majr award will be determined by the grades achieved in the minr awards. Netwrk Security 6N0720

15 City f Dublin Educatin & Training Bard Netwrk Security 6N0720 Learner s Name: Learner Marking Sheet 1 Skills Demnstratin 60% Learner s PPSN: Assessment Criteria Skills Demnstratin 1 Use sftware slutins t defend against attacks against sftware and Netwrks, including: Firewall Installed crrectly Tested Intrusin Detectin System Installed Crrectly Lgs checked and interpreted crrectly Anti-virus sftware Installed crrectly Updated Tested Maximum Mark Subttal 30 Skills Demnstratin 2 Creating a Sftware update and restrictin plicy: Dcument a sftware update plicy 5 Implement a system fr delivering updates acrss a system 10 Dcument a sftware restrictin plicy 5 Implement sftware restrictin plicy 10 Subttal 30 Skills Demnstratin 3 Use varius methds f securing cmmunicatins, including: Cnnect t a remte netwrk via a VPN 6 Cnnect t a remte netwrk via a SSH 6 Capture a SSL sessin using wireshark 6 Encrypt a text dcument, 6 Securing Wireless cmmunicatin, e.g. implementing WPA2 n a 6 wireless access pint Subttal 30 Learner Mark Netwrk Security 6N0720

16 City f Dublin Educatin & Training Bard Skills Demnstratin 4 Using Access Cntrl Lists t limit access t cmmn services, e.g. HTTP FTP ICMP Use penetratin testing and auditing sftware t test a systems defences, Use scanning sftware t enumerate a netwrk List any vulnerable sftware and any available explits Use Penetratin testing sftware t try t cnnect t a cmputer Subttal 30 Ttal 120 Ttal Mark(Ttal 60 Assessr s Signature: Date: External Authenticatr s Signature: Date: Netwrk Security 6N0720

17 City f Dublin Educatin & Training Bard Netwrk Security 6N0720 Learner Marking Sheet 2 Examinatin Thery 40% Learner s Name: Learner s PPSN: Assessment Criteria Sectin A:Structured Questins 1. Cmmn terminlgy and key cncepts in Netwrk Security 2. Identify different attacks that are perfrmed n a Netwrk, explain hw they are achieved 3. Explain the varius methds f prtectin that are available, including apprpriate plicies 4. Describe the imprtance f auditing and cmpliance in Netwrk Security. Maximum Mark Learner Mark Ttal Mark 40 Assessr s Signature: Date: External Authenticatr s Signature: Date: Netwrk Security 6N0720