Ciw Web Security Associate Course

The CIW (Certified Internet Webmaster) Web Security Associate Course teaches about Network Security and Firewalls and how to secure your network from unauthorized activity.

This course teaches you about security principles, such as establishing an effective security policy, and about the different types of hacker activities that you are most likely to encounter. Individuals with these security skills can pursue or advance careers in many aspects of online and network security.

The CIW Web Security Associate + 1 of the below Certifications would result in CIW Web Security Specialist Certification.

• 
  Checkpoint Certified Security Expert (CCSE)
  
• 
  Cisco Certified Network Professional (CCNP)
  
• 
  Cisco Certified Network Associate (CCNA)
  
• 
  Cisco Certified Internetwork Expert (CCIE)
  
• 
  CIW Network Technology Associate (NTA)
  
• 
  CIW Web Foundations Associate (WFA)
  
• 
  CompTIA Security+
  
• 
  Convergence Technologies Professional (CTP)
  
• 
  CyberSecurity Forensic Analyst (CSFA)
  
• 
  EC Council Certified Ethical Hacker (CEH)
  
• 
  EC Council Security Analyst (ECSA)
  
• 
  EC Council Computer Hacking Forensic Investigator (HFI)
  
• 
  GIAC Certified Firewall Analyst (GCFW)
  
• 
  GIAC Certified Intrusion Analyst (GCIA)
  
• 
  GIAC Certified Incident Handler (GCIH)
  
• 
  GIAC Certified Forensic Analyst (GCFA)
  
• 
  GIAC Information Security Officer (GISO)
  
• 
  GIAC IT Security Audit Essentials (GSAE)
  
• 
  GIAC Security Expert (GSE)

• 
  GIAC Certified ISO-17799 Specialist (G7799)
  
• 
  GIAC Security Leadership Certification (GSLC)
  
• 
  GIAC Systems and Network Auditor (GSNA)
  
• 
  GIAC Certified Security Consultant (GCSC)
  
• 
  ISACA CISA
  
• 
  ISC� CISSP
  
• 
  ISC� SSCP
  
• 
  Juniper Networks Certified Internet Associate (JNCIA)
  
• 
  Linux Professional Institute (LPI) Level 2
  
• 
  Linux Professional Institute (LPI) Level 3
  
• 
  Microsoft Certified Systems Engineer (MCSE)
  
• 
  Microsoft Certified IT Professional (MCITP)
  
• 
  Microsoft Certified Systems Administrator (MCSA)
  
• 
  Microsoft Certified Technology Specialist (MCTS)
  
• 
  Red Hat Certified Engineer (RHCE)
  
• 
  Red Hat Certified Security Specialist (RHCSS)
  
• 
  Sourcefire SFCP

• CIW WEB SECURITY ASSOCIATE COURSE BOOK

The CIW Network Security and Firewalls course teaches you how to secure your network from unauthorized activity. This course teaches you about security principles, such as establishing an effective security policy, and about the different types of hacker activities that you are most likely to encounter. Individuals with these security skills can pursue or advance careers in many aspects of online and network security.

Skills Taught:

• 
  Corporate network security policies
  
• 
  Authentication procedures, encryption standards and implementations
  
• 
  Ports and protocols that hackers manipulate
  
• 
  Proactive detection and response/reporting methods
  
• 
  Preventing and managing hacker penetration

The course book is split into the following Units:

• Unit 1: What is Security?

The following topics are covered by this unit: Network Security Background; What Is Security? Hacker Statistics; The Myth of 100-Percent Security; Attributes of an Effective Security Matrix; What You Are Trying to Protect; Who Is the Threat? and Security Standards.

• Unit 2: Elements of Security

The following topics are covered by this unit: Security Elements and Mechanisms; The Security Policy; Encryption; Authentication; Specific Authentication Techniques; Access Control; Auditing; and Security Tradeoffs and Drawbacks.

• Unit 3: Applied Encryption

The following topics are covered by this unit: Reasons to Use Encryption; Creating Trust Relationships; Symmetric-Key Encryption; Symmetric Algorithms; Asymmetric-Key Encryption; One-Way (Hash) Encryption; Applied Encryption Processes; and Encryption Review.

• Unit 4: Types of Attack

The following topics are covered by this unit: Network Attack Categories; Brute-Force and Dictionary Attacks; System Bugs and Back Doors; Malware (Malicious Software); Social Engineering Attacks; Denial-of-Service (DOS) Attacks; Distributed Denial-of-Service (DDOS) Attacks; Spoofing Attacks; Scanning Attacks; Man-in-the-Middle Attacks; Bots and Botnets; SQL Injection; and Auditing.

• Unit 5: Recent Networking Vulnerability Considerations

The following topics are covered by this unit: Networking Vulnerability Considerations; Wireless Network Technologies and Security; IEEE 802.11 Wireless Standards; Wireless Networking Modes; Wireless Application Protocol (WAP); Wireless Network Security Problems; Wireless Network Security Solutions Site Surveys; Convergence Networking and Security; Web 2.0 Technologies; Greynet Applications; Vulnerabilities with Data at Rest; Security Threats from Trusted Users; and Anonymous Downloads and Indiscriminate Link-Clicking.

• Unit 6: General Security Principles

The following topics are covered by this unit: Common Security Principles; Be Paranoid; You Must Have a Security Policy; No System or Technique Stands Alone; Minimize the Damage; Deploy Companywide Enforcement; Provide Training; Use an Integrated Security Strategy; Place Equipment According to Needs Identify Security Business Issues; and Consider Physical Security.

• Unit 7: Protocol Layers & Security

The following topics are covered by this unit: TCP/IP Security Introduction; OSI Reference Model Review; Data Encapsulation; The TCP/IP Stack and the OSI Reference Model; Link/Network Access Layer; Network/Internet Layer; Transport Layer; and Application Layer.

• Unit 8: Security Resources

The following topics are covered by this unit: TCP/IP Security Vulnerabilities; Implementing Security; Resources and Services; Protecting TCP/IP Services; Simple Mail Transfer Protocol (SMTP); Physical Security; Testing Systems; Security Testing Software; and Security and Repetition.

• 
  Unit 9: Firewalls & Virtual Private Networks

The following topics are covered by this unit: Access Control Overview; Definition and Description of a Firewall; The Role of a Firewall; Firewall Terminology; Firewall Configuration Defaults; Creating Packet Filter Rules; Packet Filter Advantages and Disadvantages; Configuring Proxy Servers; URL Filtering; Remote Access and Virtual Private Networks (VPNs); and Public Key Infrastructure (PKI).

• Unit 10: Levels of Firewall Protection

The following topics are covered by this unit: Designing a Firewall; Types of Bastion Hosts; Hardware Issues; Common Firewall Designs; and Putting It All Together.

• Unit 11: Detecting & Distracting Hackers

The following topics are covered by this unit: Proactive Detection; Distracting the Hacker; and Deterring the Hacker.

• Unit 12: Incident Response

The following topics are covered by this unit: Creating an Incident Response Policy; Determining If an Attack Has Occurred; Executing the Response Plan; and Analyzing and Learning.

Pre-Requirements:

Course Duration & Support:

On Completion of this curriculum, you can apply for the internationally recognised CIW Web Security Associate 1D0-571 Examination, which is currently �90.00 + VAT.

Exams must be sat at a registered Prometric or Pearson VUE testing centre. The exams consists of 62 multiple choice/multiple answer questions over 90 minutes and the passing score is 76%.