It will begin with a definition of router functions and control parameters, followed by explanations of what a router does on the network and how it can or may be used as a security control point and how it can be audited to assure its performance as a control point as part of a corporations networked infrastructure. The attendees will walk away with a basic understanding of router terminology and functions. Section 2 will acquaint the audit team with a high level view of network routers from an auditing perspective and provide guidance on how to audit these devices which can be critical components of a network infrastructure. Specific vulnerabilities to router technologies coupled with their security role will be identified and why it is important to audit these devices on a periodic basis to assure the integrity of an enterprise's infrastructure both internally and externally. The end of the course offers a more advanced view of routers in which you will learn how to enhance security using routers.
Information is immediately applicable to router audits.
Phil did a great job explaining routing, auditing and packet filtering. Intrusions exploit vulnerabilities, and the vast majority of those vulnerabilities are the result of programming errors. Security professionals and developers who know the difference between safe and unsafe code can be key players in two critical endeavors-writing software that doesn't create new vulnerabilities and evaluating code to determine whether it is vulnerable. The course covers common errors in designing and writing privileged programs, and presents them in the context of where they were discovered and exploited. In this way, the course provides not only a prescription for safe programming but the anecdotal information needed for the audience to know why ignoring each of the prescriptions can lead and has led to real-world compromise.