NETWORK AND DATA SECURITY TRAINER
The Benchmark i-SECURIT is a network and data security training system that has been jointly developed by Benchmark Electronic Systems and AU-KBC Research Centre, Anna University, to educate and train users on different real world network security threats and data encryption methods.
- Training for Network Administrators and Security Experts
- Emulates a real-life network to give hands on training on live security threats
- Complete courseware for classroom or self-paced learning
The Benchmark i-SECURIT is a complete system with two interconnected real life networks – the “Trusted Network” and the “Black Network”. These networks are isolated from the real world i.e. any corporate or campus LAN and the Internet. The i-SECURIT Central Control Unit (CCU) runs the network services, administration and control methods. The Black Network users attempt to compromise the services by different attacks, such as Intrusions, Password Cracking, and Denial of Service. The trusted network users simultaneously work on, and are trained to deploy, suitable counter measures to keep network services running properly.
The Benchmark i-SECURIT covers a large gamut of network security threats and its users can obtain hands-on experience with a wide variety of network security issues and cryptography methods. The course design allows the learner to read about a concept, witness a demonstration and then actually practice its execution. This meets the study flow of beginners as well as industry professionals.
Through a single Benchmark i-SECURIT, you can connect up to 15 PCs, with one slot reserved for the network administrator, and can start working with as little as two to three PCs.
Training Design ApproachBenchmark i-SECURIT Experiment Topics are designed at three levels:
Level I: Running Network Services- Network services to be run and procedures to be adopted are discussed.
- The methods used in attacking network services and shutting them down are explained in this level. The manual explains the same with step-by-step instructions.
- The user is trained on Network administration and monitoring methods used to protect a network from cyber attacks – as experienced in Level II – as well as on different techniques such as cryptography, honeypots, etc., to ensure data and information security.
- Networking basics – Setting up and invoking network elements
- Ethics and Legality – Policies & practices that need to be followed in security practices including exploits, reporting methods, necessity of ethical hacking, social engineering practices, etc.
- Denial of Service (DoS)
- Distributed Denial of Service (DDoS)
- Sniffing – Packet / Mail sniffing
- Spoofing – IP, MAC
- Web based password capturing, SQL injection (injection discovery, form validations), buffer overflow demo
- Honeypots – Active, anti-intrusion technique
- Trojans & Backdoors
- Virus & AV methods
- Enumeration – TCP ping, Ping sweep, ICMP ping, NULL Scan, Fast Scan, UDP port scan, Syn Stealth, Fin Stealth
- OS detection
- Symmetric encryption scheme, Stream Cipher – RC4
- Symmetric encryption scheme, Block Cipher – S-DES, 3-DES
- Asymmetric encryption scheme, Block Cipher – RSA Hashing scheme – MD5
- Block Cipher modes – ECB, CBC, CFB, OFB
- PKI
- Authentication schemes – Different authentication schemes including password based authentication, IP Based Authentication and Challenge Handshake Authentication Protocol (CHAP)
- Steganography
- System threats - Identification & hacking, backdoors, virus, worms & trojans
- Web Vulnerabilities
- Cryptography
- Intrusion threats - Sniffing, Spoofing, SQL injection
- Remote login, packet handling, routing, etc.
- Technical manual emphasizing practical aspects of network and information security. Can be used as reference and for self study
- Experiment manual - Step-by-step instructions covering all levels of experiments
- One each to connect to switches of Trusted and Black networks
- RJ45 interface, auto negotiating
- Windows – 2 machines
- Linux with FTP server – 1 machine
- Windows – 7 machines
- Linux with FTP server – 1 machine
- Windows / Linux – 6 nos
- Windows 2000 with SP4 or Windows XP with SP2
- Redhat Linux ver 7.3 or ver 9.0
- Java Runtime Environment ver 1.5 (or above), WinPCap (for Windows)
- Ethereal Packet Sniffer (for Windows)
- Internet Explorer 6.0 or above / Netscape Navigator 7 or above / Firefox 1.0 or above
- Macromedia Flash Player 6.0 or above
- (CCU): 1 no
- Manual: 1 set (Technical manual and Experiment manual)
- Network cable: 2 nos