Certified Network Defender

After completing the course, participants will be able to:

• To effectively secure networks with firewalls.

• analyze network traffic and identify suspicious activities.

• To configure IDS and IPS solutions and adapt them to individual needs.

• Create and apply YARA rules to detect malware and suspicious behavior.

• protect web applications from attacks

This course is aimed at:

• IT administrators and security officers who want to better protect their networks.

• Network engineer with experience in Linux administration.

• Cyber ​​security enthusiasts who want to deepen their knowledge of threat defense.

1. Introduction to Network Security:

   • Overview of threats and attack scenarios.

   • Basics of network security.

2. Firewalling:

   • Basic and advanced filter rules.

   • Stateful vs. stateless packet filtering.

3. protocol analysis and traffic monitoring:

   • Analyzing network traffic with Wireshark and tcpdump.

   • Detecting suspicious patterns to create IDS rules.

4. Intrusion Detection System (IDS):

   • Functionality and configuration of an IDS.

   • Create custom rules based on network observations.

5. Intrusion Prevention System (IPS):

   • Differences between IDS and IPS.

   • Configuring and deploying an IPS for automatic blocking.

6. Web Application Firewall (WAF)

   • Protecting web applications.

   • Creation and customization of WAF rules.

7. YARA rules for malware detection:

   • Introduction to YARA and its integration into security platforms.

   • Creating and customizing YARA rules to detect suspicious files.

8. Examination:

   • Analysis of a simulated attack

   • Configuration of measures to protect your own services

6,5 days, 8 hours per day

The course includes both theoretical units and practical exercises in a laboratory environment. Participants learn to identify and fix real-world vulnerabilities by analyzing and fixing various configuration errors.