Courses
Scanit provides courses to eliminate false thoughts about security and to enrich knowledge. While system security is a broad subject, Scanit has created different courses to focus more on the specific fields in security.
For more information about above mentioned courses, or a buy-out course, please do not hesitate to contact courses@scanit.net, or contact Scanit trhough other means mentioned on the contact page.
Ethical Hacking
Summary
This course teaches the hacking techniques and tools used to penetrate computer systems. It is taught by seasoned security specialists using a combination of class lectures and practical sessions.
| Course length: | 5 days |
| Language: | English |
Intended audience
|
Students should have a reasonable understanding of
|
Day One - Information gathering
|
|
|
|
|
Additional topics
|
Each topic covered during the lectures will be illustrated during the practical session. Each student will try out the tools and techniques they learned in the class on the lab machines.
During the five day course the students will try to break into the following systems
|
Dates:
June 22, 2008 - June 27, 2008 (Register for this date)
Aug 03, 2008 - Aug 07, 2008 (Register for this date)
Download course leaflet as a Adobe PDF file
For more information concerning this course, please contact courses@scanit.net.
Oracle Anti-Hacking
Summary
Know your enemy is important if you are responsible for the protection of Oracle databases and application server. In this session you learn various tricks of Oracle Hacker and the appropriate countermeasure.
| Course length: | 5 days |
| Language: | English |
Intended audience
|
Students should have a good understanding of
|
| Oracle Security Information |
|
| Security Basics |
|
| Database |
|
| Oracle Clients |
|
| Application Server |
|
| Advanced Topics |
|
Dates:
May 18, 2008 - May 22, 2008 (Register for this date)
July 06, 2008 - July 10, 2008 (Register for this date)
Download course leaflet as a Adobe PDF file
For more information concerning this course, please contact courses@scanit.net.
Oracle Forensics
Instructor: Alexander KornbrustSummary
This training describes how to do Oracle Forensics in different real-world scenarios. Attendees will learn the Oracle Forensic Basics, what tools to use and efficient approaches to find traces in Oracle.
| Course length: | 3 days |
| Language: | English |
In the exercises attendees will learn.
Dates: Jan 06, 2008 - Jan 08, 2008 (Register for this date) For more information concerning this course, please contact courses@scanit.net.
|
Oracle Setup Auditing
Instructor: Alexander KornbrustSummary
This training describes how to use Oracle Audit features.
| Course length: | 3 days |
| Language: | English |
In the exercises attendees will learn.
|
Dates:
Aug 24, 2008 - Aug 26, 2008 (Register for this date)
For more information concerning this course, please contact courses@scanit.net.
WIFI Anti-Security
Summary
During this course you will acquire a deep understanding of WLAN technologies and Security. You will also spend half of the time experiencing practical hacking excersises, monitoring and defending a wireless network in a Lab, You will also train on the monitoring tools and on AP's configuration. Each lecture will be followed by practical example and training. Each hacking demo will be practiced by the student. Each security measure will be discussed, applied and tested by the students. This course is a real hacking and defense course, with a lot of practical experience built in.
| Course length: | 5 days |
| Language: | English |
Intended audience
|
Due to the very technical nature of this course, each student need to have a good understanding of the following topics:
|
Lecture topics
|
Download course leaflet as a Adobe PDF file
For more information concerning this course, please contact courses@scanit.net.
Security Awareness
Summary
During this 3 day course, you will learn about the pillars of IT & IS Security Awareness Campaigns. Students will be walked through various best-practices and guidelines on how to conduct successful awareness programs. Using a task-based approach, students will also face some of the common pitfalls of design, development and implementation of security awareness programs.
| Course length: | 3 days |
| Language: | English |
Prerequisities
| None |
Table of Contents
Understanding awareness
Basic concepts:
|
|
|
|
|
Dates:
July 27, 2008 - July 29, 2008 (Register for this date)
Download course leaflet as a Adobe PDF file
For more information concerning this course, please contact courses@scanit.net.
VoIP Security
Summary
In this 3 days course, you will learn wide variety of techniques used by attackers against VoIP architectures. You will also learn how to identify such attacks, how to defend against such attacks and how to build Security VoIP Architecture. The course also covers the basics of VoIP Protocols, as well as basic penetration testing techniques.
| Course length: | 3 days |
| Language: | English |
Prerequisities
Basics understanding of VoIP technology
Lecture topics
|
Scada Security
Summary
In this 5 days course, you will learn wide variety of techniques used by attackers against Critical Infrastructures. You will also learn what the major standards requirements and guidelines for security SCADA systems are. Practical exercises will include analysis of Modbus/ TCP network traffic, identification of infrastructure design weaknesses, as well as SCADA basic penetration testing techniques.
| Course length: | 5 days |
| Language: | English |
Prerequisities
Basics understanding of SCADA technology
Lecture topics
|
Telecom Fraud
Summary
This course is focused on Telecommunications Fraud Department Professionals, Engineers, Consultants or Management.
It teaches the techniques and methodology used to intentionally access a telecommunication service by using false identities with "no intention to pay". As from 2001 the number of complaints regarding subscription fraud quintupled. 85% of all telecommunications fraud starts with a subscription fraud. This trend appears to be to biggest threat for the future as 50% of all fraud committed on the Internet at present is subscription fraud related.
| Course length: | 3 days |
Intended audience
|
Students should have a reasonable understanding of
|
Practical excercises
Each topic covered during the lectures will be illustrated during the practical sessions using actual case studies.
Course topics
Introduction to fraud
|
Fixed Network Fraud
|
Mobile Network Fraud
|
Subscription Fraud
|
Partnership fraud
|
Content & Added value services fraud
|
Fraud detection & prevention
|
Download course leaflet as a Adobe PDF file
For more information concerning this course, please contact courses@scanit.net.
Forensics Acquisition & Analysis
Summary
This course teaches participants how to perform digital forensic examinations of
computers and other digital media. Knowing how to properly find, recover and
preserve "digital evidence" is a necessity for both criminal and civil
investigations. There are very specific standards and methodologies that must
be followed for digital evidence to be accepted in most courts of law. Our
instructors will take you through a real investigation, step-by-step, to put into
practice the knowledge that you will receive in this course. Analysis will be
conducted of several different types of media and the digital evidence that it
contains. During the course, you will learn the techniques used by experienced
forensic examiners in exercises with actual digital forensics tools and
applications. At the conclusion of the digital investigations, you will learn how
to build an electronic report that documents and preserves that evidence that
you have recovered.
| Course length: | 5 days |
| Language: | English |
Course Venue (April 6 -10, 2008)
This course will be taught at the Scanit technical training classroom in Dubai Internet City. The course date is April 6 - 10, 2008. The course fee is $2,500 (US) which includes a forensic write blocker and imaging software.
Course Learning Objectives
This course is designed to provide the knowledge in computer forensics procedures, tools and technology needed to serve as a computer forensic specialist. Completion of this course will provide the skills needed to properly collect digital evidence and conduct basic forensic analysis in a legally admissible manner, using accepted forensics practices.
Course Instructors
Steve Anson, CISSP, MCSE is a former Special Agent with the US Department of Defense Criminal Investigative Service (DCIS). Mr. Anson has conducted numerous Internet investigations on some of the most sophisticated network systems in the world, and has taught computer crime investigation techniques at the FBI Academy. He has served as a Task Force Agent for the FBI as well as supervised a local police department cyber crime and technology unit. Mr. Anson is a Certified Information Systems Security Professional (CISSP), a Microsoft Certified Systems Engineer (MCSE), and the coauthor of "Mastering Windows Network Forensics and Investigations".
Domingo Montanaro, GCFA, is an Information Security Specialist and Computer Forensics Expert, who has been working with High Tech crime investigation for the private sectors including the financial markets as well as law enforcement agencies as an expert consultant. Currently holding the position of Manager of Research & Development for the Information Security and Computer Forensics Labs of Oger Systems. Domingo specializes in Information Leakage, Data Recovery, and Incident Handling, as well as being highly skilled in Anti-Forensics methodologies and tools. Guest professor at a number of Universities as an expert on Computer Forensics and author of several articles/papers as well as a key speaker at major worldwide conferences.
Course outline
Course Introduction
|
|
|
|
|
|
|
|
|
|
|
Dates: Apr 06, 2008 - Apr 10, 2008 (Register for this date) |
Download course leaflet as a Adobe PDF file
For more information concerning this course, please contact courses@scanit.net.
Exploiting Software Vulnerabilities
Course Authors / Instructors:Rodrigo Rubira Branco (BSDaemon) and Filipe Alcarde Balestra (coideloko)
| Course length: | 5 days |
| Language: | English |
Course description
* Why learn how to break software?
* What is the differences between the hacking (security research) community and the open-source community?
* How do we release vulnerabilities?
* Web Vulnerabilities
- Cross-site scripting
- SQL Injection
- Remote file include
- Others
- Hello World
* Bypassing filters - Polymorphic shellcodes
- How it works?
- Structure
- Uses
- Why it do exist?
- How it can be exploited?
- Debugging software
- Controlling the application
- Searching for a return point
- What else we can do?
- Why it can be exploited?
- Old School - breaking in to the old libc
- What changed nowadays - be prepared
- Differences between Windows and Linux systems
- Widthness overflows
- Arithmetic overflows
- Signedness bugs
- Is it dead?
- Exploiting
- Breaking canary protection
- controlling pointers
- controlling indexes
- Breaking non-executable memory
- Returning-into-libc (system())
- Returning-into-libc (sprintf()/strcpy()) [the case of leaf functions]
- Breaking memory randomization
- By-passing glibc unlink protection
- NULL pointer dereference
- Slab overflows
- Disabling security protections
- Protocol analysis
- Remote system interaction
- Packet sizes
- Filters, Detectors (IDS/IPS/XYZ), others
- Rootkits - How do they work?
- Syscall proxying, encoding, pivoting and others...
Dates:
July 20, 2008 - July 24, 2008 (Register for this date)
For more information concerning this course, please contact courses@scanit.net.