Date: 19-20 Nov 2011

Time: 9am to 5pm

Description

This is a two day workshop focusing on advance web security.

Course

Network Monitoring and Traffic Analysis (Advanced)

Instructors

Koichiro "Sparky" Komiyama and Suguru Yamaguchi, JPCERT/CC

Abstract

Network monitoring is one of the ways to understand what is happening within the network. This session will cover the basic knowledge of network monitoring and issues that we should know (Ex: legal issues, privacy issues, encryption, covert channel, etc.). This training course provide participants hands-on experience on analyzing traffic generated by malware, botnet and other malicious tools.

Schedule

Nov 19 Saturday

Session 1: (120 minutes)

Introduction - Network monitoring

Session 2: (120 minutes)

Hands-on Part.1

Nov 20 Sunday

Session 3: (120 minutes)

Hands-on Part.2

Session 4: (120 minutes)

Hands-on Part.3

Note:

* This course requires participants to have the basic knowledge about TCP and IP.

** Participants have to bring a Windows PC for hands-on.

*** Those who attended our "CERT Instructor Training Course for Technical Staff (http://www.africaasia.net/2010-11-cert-training.html)" in last Afrinic meeting in Johannesburg can skip the first day.