104 lines
No EOL
14 KiB
Markdown
104 lines
No EOL
14 KiB
Markdown
# APRICOT 2016 Security Workshop 2016.02.15-19
|
||
|
||
## Daily Schedule
|
||
|
||
| | |
|
||
| --------- | ------------- |
|
||
| Session 1 | 09:00 - 10:30 |
|
||
| Tea | 10:30 - 11:00 |
|
||
| Session 2 | 11:00 - 12:30 |
|
||
| Lunch | 12:30 - 14:00 |
|
||
| Session 3 | 14:00 - 15:30 |
|
||
| Tea | 15:30 - 16:00 |
|
||
| Session 4 | 16:00 - 17:30 |
|
||
| | |
|
||
|
||
## Instructors
|
||
|
||
| | | | |
|
||
| ---------- | ------------------- | ---------------------------------------------------- | ----------- |
|
||
| **alisha** | Alisha Gurung | [Tashi Cell](http://www.tashicell.com/) | Bhutan |
|
||
| **maz** | Yoshinobu Matzusaki | [Internet Initiative Japan](http://www.iij.ad.jp) | Japan |
|
||
| **randy** | Randy Bush | [Internet Initiative Japan](http://www.iij.ad.jp) | Japan |
|
||
| **daniel** | Daniel Griggs | [New Zealand Registry Services](https://nzrs.net.nz) | New Zealand |
|
||
| | | | |
|
||
|
||
## Official Song
|
||
|
||
[Spyin’ NSA - by Keith Alexander, Daniel J. Bernstein, Timo Kasper, Tanja Lange, and Peter Schwabe](http://www.anagram.com/jcrap/Volume_9/spyin.pdf)
|
||
|
||
## Agenda
|
||
|
||
| | | | | |
|
||
| :------------ | :-------------------------------------------------- | :-------------- | :----------------------------------------------------------- | ---- |
|
||
| **Day 1** | **Topic** | **Inst** | **Presentations** | |
|
||
| | | | | |
|
||
| Session 0 | Intro | randy | [1-0-1 Intro](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/1-0-1.intro.pdf) | |
|
||
| | - admin | | | |
|
||
| | - agenda | | | |
|
||
| | - materials and resources | | | |
|
||
| | - facilities and wireless | | | |
|
||
| Session 1 | Assets & Threat Models | randy | [1-1-1 Assets, Threats, Pragmatics](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/1-1-1.AssetsThreats.pdf) | |
|
||
| | - what assets are we protecting? | | | |
|
||
| | - from what kinds of attackers? | | | |
|
||
| | .. kiddies | | | |
|
||
| | .. financial gain | | | |
|
||
| | .. nation state (you're dead) | | | |
|
||
| | Threat Pragmatics | | | |
|
||
| | . to network infrastructure (routing, wiretap, ...) | | | |
|
||
| | . to service infrastructure (dns, mail, ...) | | | |
|
||
| | .to users | | | |
|
||
| | Social Engineering | | | |
|
||
| Session 2 | Cryptography | randy | [1-2-1 Crypto Overview](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/1-2-1.Crypto-Overview.pdf) | |
|
||
| | - symmetric encryption | | | |
|
||
| | - asymmetric encryption | | | |
|
||
| | - digital signatures | | | |
|
||
| | - hash functions | | | |
|
||
| | - certificates & trust anchors | | | |
|
||
| Session 3-4 | Cryptography Applications / PGP | maz | | |
|
||
| | - gpg | | [1-3-1 PGP](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/1-3-1.PGP.pdf) | |
|
||
| | - PGP Lab | alisha & daniel | [1-3-2 PGP Lab](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/PGP-Lab.pdf) | |
|
||
| | | | [1-3-1 GPG Mail for Mac OS X](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/) | |
|
||
| **Day 2** | **Topic** | **Inst** | **Presentations** | |
|
||
| | | | | |
|
||
| Session 1 | Cryptography Applications | | | |
|
||
| | - ssh | randy | [2-1-1 SSH](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/2-1-1.ssh.pdf) | |
|
||
| Session 2 | Wireshark | maz | [2-4-1 wireshark](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/2-4-1.wireshark.pdf) | |
|
||
| | - wireshark lab | maz | [2-4-1 wireshark lab](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/Wireshark-lab.zip) | |
|
||
| Session 3 | Cryptography Applications | maz | | |
|
||
| | - VPNs, IPsec, TLS | | [2-2-1 VPN IPsec TLS](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/2-2-1.vpn-tls.pdf) | |
|
||
| Session 4 | OpenVPN & pfSense | randy | [2-3-1 OpenVPN](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/2-3-1.openvpn.pdf) | |
|
||
| **Day 3** | **Topic** | **Inst** | **Presentations** | |
|
||
| | | | | |
|
||
| Session 1 | Network Infrastructure | daniel | | |
|
||
| | - management pane | daniel | [3-1 Management Plane](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/3-1.Management-Plane.pdf) | |
|
||
| | - control plane | daniel | [3-2 Control Plane Protection](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/3-2.Control-Plane-Protection.pdf) | |
|
||
| | - data plane | daniel | [3-3 Data Plane Protection](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/3-3.Data-Plane-Protection.pdf) | |
|
||
| | - Logging and Monitoring | daniel | [3-4 Monitoring](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/3-4.Monitoring.pdf) | |
|
||
| **Day 4** | **Topic** | **Inst** | **Presentations** | |
|
||
| | | | | |
|
||
| Session 1 | DNS & DNS Security | alisha | | |
|
||
| | - DNS | | [DNS.pptx](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/DNS.pptx) | |
|
||
| | - DNS Security | | [DNS_Security.pptx](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/DNS_Security.pptx) | |
|
||
| | - DNS Rate Limiting | randy | [4-1-3 DNS Rate Limiting](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/4-1-3.dns-rate-limit.pdf) | |
|
||
| Session 2 | IDS | maz | | |
|
||
| | - IDS pragmatics - snort | | [3-4-1.snort](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/3-4-1.snort-ids.pdf) | |
|
||
| Session 3 | Protecting Hosts from Net | maz | | |
|
||
| | - hosts | | [4-2-1 Hosts](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/4-2-1.hosts.pdf) | |
|
||
| | - Recovery Plan! | | [4-2-2 wipe, recovery](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/4-2-2.wipe-etc.pdf) | |
|
||
| Session 4 | Virus, Mail and Browsing | | | |
|
||
| | - Anti-virus | maz | [4-3-1 Anti-virus](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/4-3-1.anti-virus.pdf) | |
|
||
| | - Safe Mail Practices | randy | [4-3-2 Safer Mail](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/4-3-2.safer-mail.pdf) | |
|
||
| | - Safe Browsing Practices | randy | [4-3-3 Safer browsing](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/4-3-3.safer-browsing.pdf) | |
|
||
| | - File & Disk Encryption | randy | [4-3-4 File & Disk Encryption](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/4-3-4.file-encrypt.pdf) | |
|
||
| **Day 5** | **Topic** | **Inst** | **Presentations** | |
|
||
| | | | | |
|
||
| Session 1 | Inter-Host Protocols | | | |
|
||
| | - sftp, ... | randy | [4-4-1 sftp & scp](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/4-4-1.scp%2Bsftp.pdf) | |
|
||
| | - Covert Channels, TOR, Steganography | randy | [4-4-2 Covert Channels](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/4-4-2.Covert-Channels.pdf) | |
|
||
| Session 2 | Inter-Network Cooperation | maz | | |
|
||
| | - Communities and Cooperation | | [5-2-1 Security Communities](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/5-2-1-cooperation.pdf) | |
|
||
| Session 3 & 4 | Dessert | randy | | |
|
||
| | Protecting Routing Protocols | randy | [Protecting Routing Protocols](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/160219.routing-protocols.pdf) | |
|
||
| | Telco vs Internet & Complexity | randy | [Complexity](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/160219.complexity.pdf) | |
|
||
| | Critical Infrastructure and SW Eng | randy | [Critical Infrastructure and Software Engineering](https://wiki.rg.net/raw-attachment/wiki/Apricot2016Sec/160219.CI-apricot.pdf) | | |