Intrusion Detection and Forensics

Location - Worldwide

Internet Security Systems

http://www.iss.net/education/course_descriptions/
security_courses/advanced_intrusion_response.php

The Intrusion Detection and Forensics course builds on the foundation of a X-Force™ Education Services system for Information Assurance in an organization. It presents an insight into intrusion detection and forensics and incident response strategies that organizations need in order to protect their critical assets; hacker techniques are also discussed.

Duration  - 5 Days

Information Updated:26 Jun 03

[talisker - REVIEW I attended this course in Jun 03 and was VERY pleasantly surprised by it's genuine neutrality.  The course will not only take a Snort user from virgin to competent within the week but also allow the student to run Snort in the enterprise.  The course covers all aspects required to handle an incident effectively from signature writing to forensics]

Intrusion Detection In Depth

Location - Worldwide

Sans

http://www.sans.org/training/description.php?tid=242

This hands-on track offers a practical working knowledge in intrusion detection and traffic analysis, taught by top practitioners/authors in the field. This is the most advanced program in network intrusion detection that has ever been taught. All of the courses are either new or just updated to reflect the latest attack patterns. This series is jam-packed with network traces and analysis tips.

Duration  - 6 days

Information Updated:18 Aug 2002

[talisker- REVIEW I attended this course in May 01.  The course was not for the computer novice, some students found the technical level to be very intense.  However, if you have some TCP/IP knowledge and a grounding in computer security this is a brilliant course with up to the minute content from the World's leading IDS practitioners.]

Introduction to Computer Forensics

Location US

SP Hailey Enterprises

http://www.cybersecurityinstitute.biz

Duration  - 5 Days

Information Updated:29 Mar 2006

Deploying Intrusion Detection Systems: Hands-On

Location - Worldwide

Learning Tree International

http://www.learningtree.co.uk/courses/uk588.htm

With the growing reliance on e-commerce, network-based services and the Internet, organizations are faced with an ever-increasing challenge to protect their systems from attacks. IDSs are the latest and most powerful tools used for alerting the analyst to network- and host-based exploits.

This hands-on course provides knowledge of how attackers break into systems and networks, and how an IDS can play a key role in detecting and responding to these events. Using Windows and UNIX-based tools, you learn to configure, deploy and tune an IDS to determine what exploits are occurring in your organization.

Duration  - 4 days

Information Updated:26 Jun 2003

[talisker]- REVIEW I attended this course in  01.  The course covers a lot of ground in a short time, allowing the student to sample a good selection of Intrusion Detection Systems and various related subjects.]

Open Source Intrusion Detection Systems

Location Global

Mile2

http://www.mile2.com/Certified_Perimeter_Protection_Tactician_Training.html

Coming Soon

5 Days

Information Updated:29 Mar 2006

Intrusion Prevention: Stop Hackers Before They Start

Location US

InfoSec Institute

http://www.infosecinstitute.com/courses/intrusion_prevention_training.html

The Intrusion Prevention training offered by InfoSec Institute covers all areas of intrusion prevention. Host Intrusion Prevention and Network Intrusion Prevention are covered in great detail. You will learn the technical details that make Intrusion Prevention Systems so effective. Much of technical learning is best done by doing, so you will experience a multitude of hands on lab exercises using popular technologies like Entercept, Okena, Inline Snort, Netscreen, Internet Security Security Systems, Top Layer. Additionally, you will learn how to enable Intrusion Prevention features built into operating systems such as OpenBSD, Solaris, Linux and even Tru64.

Duration  - 5 days

Information Updated: 18 Nov 2003

 Intrusion Detection (IDS)

Location - Zurich CH or Onsite

ROMAN - Consulting & Engineering AG

http://www.roman.ch/fachkurse/gruppe2/e-ids.htm

In order to protect computer systems against hacker attacks, various firewalls are used today. Doubtlessly, firewalls increase IT security. However, firewalls cannot ward off all attacks. They are useless against attacks initiated from within the network itself (the majority!). The Intrusion Detection Systems (IDS) are utilized for this type of protection. Intrusion Detection is the art of detecting inappropriate, incorrect, or suspicious activity.
In this specialized course, the participants are taught the possibilities and limitations of the IDSs . They learn comprehensive network protection capabilities, using built-in, proactive defenses for damage prevention. 

Duration  - 2 Days

Information Updated:20 Aug 2002

Solaris[tm] Operating Environment Network Intrusion Detection

Location - Worldwide

Sun Microsystems

http://suned.sun.com/US/catalog/courses/SC-345.html

The Solaris[tm] Operating Environment Network Intrusion Detection course provides students with the knowledge and skills necessary to perform the advanced administration skills required to firewall, monitor, log, identify and respond to network security breaches.
Experienced system administrators who are tasked with protecting Sun Solaris systems in a non-trusted environment such as the Internet or a LAN environment with multiple unknown/untrusted users.

Duration  - 5 Days

Information Updated:09 Jan 2003

Catching the Hackers - Introduction to Intrusion Detection Systems

Location - Worldwide

Security University, Inc

http://www.securityuniversity.net/classes_introIDS.php

This three-day seminar investigates the strengths and weaknesses of network- and host-based intrusion detection systems (IDS). You will explore the leading IDS products on the market today, including Cisco NetRanger, ISS RealSecure, NFR - Network Flight Recorder, Shadow (freeware), Tripwire Enterprise (and shareware), AXENT OmniGuard, Bellcore Sysguard, and more. You will compare insourcing and outsourcing options and gain the knowledge you need to make informed decisions about which is best suited to your organization. You will explore the pros and cons of perimeter defenses. A demo of hacker attack methods will illustrate port scans, buffer overruns, and other network assaults in action. When you leave this cutting-edge seminar, you will know where to position sensors and consoles; the types of responses you will receive; and how to react to alerts using industry-standard IDS countermeasures.

Duration  - 3 days

Information Updated; 23 Aug 2006

Catching The Hackers II: Systems to Defend Networks

Location - Worldwide

Security University, Inc

http://www.securityuniversity.net

Intrusion detection systems (IDS) give you the ability to detect when your networks or systems are being probed or attacked, or if they have been compromised in some manner. This critical monitoring capability is an essential component in any comprehensive enterprise network security program. IDS systems, however, have a reputation for being difficult and expensive to deploy, and can be time-consuming to properly manage. Many organizations that have implemented IDS in their infrastructures have a hard time developing the adequate processes for tuning the systems, monitoring their massive amounts of output, and responding to critical security events in a timely manner.

In this 5 -day, hands-on class you will cover the ins and outs of intrusion detection systems. You will learn how IDS operates and the trade-offs between host-based and networked-based intrusion detection systems. You will discover methods for integrating and managing a network of IDS components; how to manage and administer IDS; where to position IDS sensors; what key freeware and commercial IDS tools are best where on your network; and how to determine if IDS should be outsourced or kept in-house. Using hands-on exercises, you will set up your own real-time IDS sensors. You will also detect and analyze an assortment of live hacker attacks and related probes and why you can't rely on IDS as your sole monitoring component. You will learn the difference between anomaly based and Signature based IDS that promise to make intrusion detection systems easier to manage and more effective as part of your information security strategy.

Duration  - 5 days

Information Updated:23 Aug 2006

Intrusion Detection II: Systems to Monitor Your Network

Location - Worldwide

Security University, Inc

http://www.securityuniversity.net/classes_det_tie.php

In this 5 -day, hands-on class you will cover the ins and outs of intrusion detection systems. You will learn how IDS operates and the trade-offs between host-based and networked-based intrusion detection systems. You will discover methods for integrating and managing a network of IDS components; how to manage and administer IDS; where to position IDS sensors; what key freeware and commercial IDS tools are best where on your network; and how to determine if IDS should be outsourced or kept in-house.

Duration  - 5 days

Information Updated:02 Aug 2003

Intrusion Detection III: Alert Criteria Analysis and Response

Location - Worldwide

Security University, Inc

http://www.securityuniversity.net

New class outline coming soon.

Duration  - 5 days

Information Updated:23 Aug 2006