1. Mail Server Security

• Overview of Mail Server Security
• Securing Sun Messaging Server
• Secure Configuration of Lotus Domain/Notes
• Securing Microsoft Exchange Server
  

2. Implementation of Information Security Management in      Government & Critical Sectors

• ISMS - Overview, Standards and ISO 27001 Requirements, Implementation
• Case Study - ISMS Implementation in BHEL - Challenges Ahead

3. Database Security and Auditing

• Overview of Database Server Security & Auditing
• Securing and Auditing Oracle Database Server
• Secure configuration of MySQL Database Server
• SQL Server Security and Auditing

4. Computer Forensics for System Administrators

• Computer Forensics – Basics, First Responder, Collection of Evidence
• Computer Forensics – Tools, Evidence Analysis, Anti-Forensics
• IT Act on Cyber Crime
• Cyber Crime and Forensics Tools
• Forensics Tools, Demo

5. Network Security

• Overview of Network Security
• Network Perimeter Security Devices
• VPN and WLAN Security
• WLAN
• Network Penetration Testing

6. Windows Web Server Security

• Overview of Windows Server Security
• Securing Windows 2003 & 2008 servers
• Securing IIS
• IIS Log Analysis
• IIS Log Management

7. Linux Server Security

• System Security
• Network Security
• Red Hat Enterprise Security
• Apache Server Security
• Security Tools and Syslog implementation

8. DNS Security     

• Need of DNSSec
• Overview of DNSSEC for Managers and Technologists
• Defining the Objectives of DNSSEC in the .IN Domain
• A Role for Everybody – ISPs, Registrars, Key Industry Leaders

9. Web Application Security     

• Introduction to Web Application Security
• Top 2 Application Security Attacks
• Advanced Application Security Attacks

10. Cryptography Primitives

• Cryptography : Basics
  • Symmetric & Asymmetric encryption
  • DES, AES RSA encryption
  • Cryptographic Authentication
  • Key Exchange
    
    
• Applications of Cryptography
  • Email encryption and authentication
  • Secure Communication/Transmission – VPN, SSL, HTTPS/IPSec
  • Storage encryption
  • Cryptographic Systems and Design concepts
    
    
• PKI Cryptography
  
  
• Digital Signature - Applications and Demo

11. Cyber Security: Latest Attack Methods

• Financial Fraud Attacks (Phishing)
• Denial of Service Attacks: New Techniques, New Domains
• BOTNETS: Mitigation methodologies
• Anonymizers

12. Intrusion Prevention System(IPS)

• Introduction to IPS Technology
• IPS working procedures and Attack tool description
• IPS attack detection and prevention demonstration

13. Wireless Security

• Security Incident from Asia
• Wireless Security Threats
• Unified Communication and VoIP Security Threats
• PSTN Security Threats
• Remote Access Threats
• Best Practices and countermeasures

14. Information Security Best Practices and Compliance (for        CISOs)

• Overview of Security Best Practices and Need for Compliance
• Risk Assessment and Management– understanding and mitigating risks
• Implementing Security Best Practices as per ISMS/ISO 27001 standard
• Security Policy Deployment: Technology perspective -- Case Study
• Security Policy Deployment: Management perspective -- Case Study
  

15. Crimeware for Financial Frauds

• Crimeware Trends
• Internet Banking - Frauds & Defenses - A Case Study
• eCommerce & Frauds - A Case Study
• Defense against Crimeware
  • Policies & Procedures
  • Solutions
  • Best Practices

16. Identity Theft and Access Management

• Need for Identity and Access Management
  • Introduction: concepts, technology and process
  • Fraud detection & customer authentication
  • Risks & challenges
  • Access Management
  • Best practices
    
    
• Identity Theft and Frauds
  
  
• Authentication and Authorization Methods
  • Policies and Procedures
  • Technical solutions (such as Token, Biometrics, smart card, etc)
  • Best Practices
    
    
• User Authentication & Authorization: A Case Study
  
  
• Identity theft and Frauds: A case study

17. Information Security - Risk Management and Business           Continuity Management

• Need for Security Risk Management
• Assets, Threats and Vulnerabilities
• Risk Management Process
• Risk Assessment Methodologies
• Business Continuity Management
• Risk Assessment and Management: A case study
• Risk Assessment : Tool Demo
  

18. Managing Organization's Network Security

• Securing Network: Network Devices
  • Switches
  • Router
  • Gateways
  • Firewall
  • IPS
    
    
• Unified Threat Management (UTM)
  
  
• UTM Case Study
  
  
• Extensible Threat Management (XTM)
  
  
• Security Threat Management – An integrated Approach
  • Threat monitoring,
  • Vulnerability management,
  • Security event monitoring
  • Incident Response
  • Log Management