Network security and packet analysis

Synopsis

Network security is a broad topic that affects many aspects relating to end-users, applications, and infrastructure. The objective of this workshop is to examine key concepts, protocols, policies, and practices to protect data and assets from potential abuse.

The workshop will include packet analysis, a skill involving capturing live data over the network and analysing them for detecting network issues, monitoring potential misuse or intrusion attempts, and examining security problems.

Target audience

This course is targeted to network managers and operators, engineers and policy makers who are interested in network security and want to gain an understanding of security operations. The topics covered range from basic to intermediate level that aims to educate and challenge participants.

Pre-requisites

It is assumed that participants have a basic understanding of:

• Network operations, Internet technologies, OSI reference model and TCP/IP.
• Basic command line (CLI) skills.

Course outline

• Intro to Security & Cryptography
• Device & Infrastructure Security
• Packet Analysis
• Intrusion Detection
• DDoS Attacks and Countermeasures
• Secure Internet Routing

Dave Phelan

Ulsaa Enkhtaivan

Routing Infrastructure and Security Operations Workshop

Goals / objectives

This five-day training course teaches the skills required for the configuration of scalable and secure routing, as well as best practice operation of the networks making up today's Internet.

Participants in this course will learn more about:

• BGP Best Practices, including Aggregation
• BGP Multihoming techniques (redundancy and load balancing)
• BGP Communities as used by Network Operators
• BGP Security Operations Best Practices
• Remotely Triggered Black Hole Filtering
• Unicast Reverse Path Forwarding
• Route Origin Validation using the RPKI 

Pre-requisites

Workshop participants must be currently using BGP in their network, or planning to deploy BGP on existing external connections.

Workshop participants must be proficient with a router command line interface, have a good understanding of OSPF or IS-IS, as well as experience with using BGP in an operational network.

This workshop is not an introduction.

The lab exercises use Cisco IOS configuration syntax.

Participants must also have reviewed the Video Tutorials at learn.nsrc.org, specifically those covering:

• Internet Routing
• Routing Protocols
• All the IS-IS clips, starting from IS-IS Introduction 

Technical Requirements

Participants laptops/PCs must have:

• a modern web browser installed (Chrome/Firefox/Safari/Opera)

Philip Smith

Tashi Phuntsho

Network Automation for Network Engineers

This training course introduces the principles of Network Automation for network engineers who wish to learn more about automating many of the tedious tasks involved in the day to day operation of a network. The course introduces
- Docker,
- Ansible,
- YAML,
- GIT,
- and the writing of playbooks to carry out tasks. It also covers the integration of common network tools and Gitlab CI/CD pipelines.

Anurag Bhatia