|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/the-complete-ethical-hacking-series-honeypots-ids-and-fws/
课程评论：没有评论
**课程名称：** 网络黑客系列：蜜罐、入侵检测系统（IDS）和防火墙（FW） **课程概述：** 本课程适合初学者和希望深入了解蜜罐（Honeypots）、入侵检测系统（IDS）和防火墙（Firewalls）的 IT 专业人士。课程内容注重实践，每个章节都包含练习，帮助学员立即将所学技能应用于实际操作。 **先修要求：** 学员需具备 TCP/IP 和网络基础知识。 **课程收获：** 学员将能够熟练运用以下工具和技术： * **HoneyDrive:** 这是一个领先的蜜罐 Linux 发行版，基于 Xubuntu Desktop 12.04.4 LTS 的虚拟设备（OVA）。它预装并配置了超过 10 种蜜罐软件，包括 Kippo SSH 蜜罐、Dionaea 和 Amun 恶意软件蜜罐、Honeyd 低交互蜜罐、Glastopf Web 蜜罐和 Wordpot、Conpot SCADA/ICS 蜜罐、Thug 和 PhoneyC 蜜罐客户端等。此外，它还提供大量数据分析、可视化和处理的脚本与工具，如 Kippo-Graph、Honeyd-Viz、DionaeaFR、ELK 堆栈等。HoneyDrive 还集成了近 90 种知名的恶意软件分析、取证和网络监控工具。 * **Kippo:** 一个中等交互式的 SSH 蜜罐，用于记录暴力破解攻击以及攻击者整个 Shell 会话的交互过程。 * **Snort:** 一款开源、免费且轻量级的网络入侵检测系统（NIDS）软件，支持 Linux 和 Windows，用于检测新兴威胁。 * **DNSSEC (Domain Name System Security Extensions):** 一套扩展，通过支持 DNS 响应验证来增强 DNS 协议的安全性，确保来源权威性、数据完整性以及认证的否认存在。
Cyberhacker Series: Honeypots, IDS and FW's: Honeypots, IDS and FW's This course is for beginners and IT pros looking to learn more about Honeypots, IDS and Firewalls. Each chapter closes with exercises putting your new learned skills into practical use immediately. What are the pre-requisites for this course? Students should have a working understanding of TCP/IP and networking concepts. What will you be able to do after taking this course? Honey drive - HoneyDrive is the premier honeypot Linux distro. It is a virtual appliance (OVA) with Xubuntu Desktop 12.04.4 LTS edition installed. It contains over 10 pre-installed and pre-configured honeypot software packages such as Kippo SSH honeypot, Dionaea and Amun malware honeypots, Honeyd low-interaction honeypot, Glastopf web honeypot and Wordpot, Conpot SCADA/ICS honeypot, Thug and PhoneyC honeyclients and more. Additionally it includes many useful pre-configured scripts and utilities to analyze, visualize and process the data it can capture, such as Kippo-Graph, Honeyd-Viz, DionaeaFR, an ELK stack and much more. Lastly, almost 90 well-known malware analysis, forensics and network monitoring related tools are also present in the distribution.Kippo - Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.Snort - Snort is an open-source, free and lightweight network intrusion detection system ( NIDS) software for Linux and Windows to detect emerging threats.DNSSec - Domain Name System Security Extensions (DNSSEC) is a suite of extensions that add security to the Domain Name System (DNS) protocol by enabling DNS responses to be validated. Specifically, DNSSEC provides origin authority, data integrity, and authenticated denial of existence.
