Hacking Uncovered: VMware®
Hacking Uncovered - VMware® Ultimate BootcampŽ
Overview
A critical and often overlooked aspect of migrating to a virtualized environment is security and setting up security properly. Like physical machines, virtualization technologies are not secure “out of the box” and VMware is no exception. The Advanced Virtualization Security course focuses on “where the vulnerabilities lie” and how to reduce the attack surfaces in the virtualized environment. It goes beyond the typical security protocols administrators use to secure their environments and delves much deeper into the actual working (and short comings) of the VMware environment. Students will take a 360 degree look at the potential threats, how to defend and defeat them, and establish a solid foundation to build secure virtual data centers from the ground up.
Course Objectives
- Learn the actual internal workings of VMware, and compare them to physical and virtual devices.
- Discover how to securely set up port groups and VLANS.
- Understand the aspect of securing failover configurations
- Distinguish between Denial of Service Failovers that wide open failovers and closed failovers.
- Dive deep into the different layers of security and explore features to include how traffic routes between VM’s and different hosts, common denominators of Physical and Virtual Environments, and how to make the virtual environment the most secure.
- Walk away knowing how to secure a VMware environment in a DMZ and how to protect yourself from the common vulnerabilities of VMware attack surfaces from the eyes of an attacker.
- Receive in depth information on how to harden you ESX environment, and comprehensively understand all aspects of how to do that.
- Demonstrate their proficiency in class working on a state-of-the-art data center and performing hands-on labs to reinforce the learning objectives.
- Course developed and taught by a Licensed Penetration Tester who has a long history of vulnerability audits with US National Security Teams and audits of many foreign governments.
- Designed and taught from the perspective of how an attacker would get into your Virtual Environment from an attacker who has done JUST THAT!
Who Should Attend
System Administrators and Security Administrators using virtualization software.
Prerequisites
Virtual Infrastructure 3.5 Ultimate Bootcamp® or equivalent. In lieu of hands-on classroom training, an in-depth knowledge of VMware’s ESX virtualization environment is required.
Course Length
5 Days
Hacking Uncovered - VMware® Ultimate Bootcamp®
Hacking Uncovered: VMware® Course Outline* |
|
Chapter 1 - Primer and reaffirming our knowledge
Chapter 2 - Penetration Testing 101
Chapter 3 - Routing and the Security Design of VMware
Chapter 4 – Information Gathering, Scanning and Enumeration
Chapter 5 – DMZ Virtualization
Chapter 6 – Remote DataStore Security
|
Chapter 7 – Penetration Testing and the Tools of the Trade
Chapter 8 – Hardening your ESX Server
|
Hacking Uncovered - VMware® Class Comments
"I was never instructed on how to take a test, I was taught how to penetrate a network. With what I have learned in the class I have no doubt that I will pass the certification."
"This was some of the best training I've ever had."
"This guy is the Darth Vader of the network world. I'm glad he's on our side since this was a security course. He was amazing and bar far the best instructor we've seen here. This guy is world class."
"Tim Pierson is one of the 2 best IT instructors I have ever had. It's a toss-up between him and another instructor as to who's the best. His ability to demonstrate and explain the various security issues was outstanding."
"Tim's wealth of security knowledge and real world experience made this an exceptional learning experience. His demonstrations got our attention and proved just how dangerous the IT world can be."
"Excellent Instructor!"
"Tim Pierson did an outstanding job, he demonstrated very deep understanding of the subject and did an excellent job presenting the material in a manner which made it easy to understand."
"I understand this was a beta course. For the most part, I loved the class. The only thing the course needs is a bit of fine-tuning to work out the pace. The amount of material in the guides could easily cover five days. Also, I think the lab machines should be pre-configured to allow more lab time and less "setup" time, especially if the class is to remain a three day class."
Hacking Uncovered - VMware® Instructor Spotlight
Tim Pierson
Tim Pierson has been a technical trainer for the past 23 years and is an industry leader in both Security and Virtualization. He has been the noted speaker at many industry events including Novell's Brainshare, Innotech, GISSA, many military venues including the Pentagon, and numerous nuclear facilities addressing security both in the US and Europe.
He is a contributor to Secure Coding best practices and Co-author of the Global Knowledge Windows 2000 bootcamp. His current projects include contributing author of "VMware Virtual Infrastructure Security: Securing ESX and the Virtual Environment" to be released April 2009 by Pearson publishing and has done work for the bi-monthly Virtualization Security Roundtable Podcast available as a download on iTunes and Talk Shoe as well as the Featured Speaker on Secure Coding and Virtualization Practices at Hacker-Halted in Miami September 2009 and the Hacker-Halted in Kuala Lumpur Malaysia in November 2009.
"I have always been on the defense when it comes to security; it seems to always be a game of catch up. Since I have little understanding of the attack or the vulnerability; I am at the mercy of the patch and coder that wrote it. With this deficiency in my background I needed more information on what the exploits are and the frame of mind on the person creating them."
"I was introduced to Tim my instructor who was also presented as a professional penetration tester and security expert...A class is only as good as the instructor. If I am able to stump the instructor on my first day, then I usually lose confidence in the class. Tim was right on the money with anything that I threw at him. He knew the industry and was current with security practices and procedures. Tim’s best asset was the ability to think out of the box to exploit secure networks and the people that maintain them."
"The atmosphere was professional and light hearted in that I was able to freely ask questions. Tim was able to keep the whole class involved with questions and stories from his experiences. Students would also give input from situations that they experienced in the past."
"I learned the methodology on the exploits that I was performing. I learned how to exploit web pages, web servers, Windows and UNIX environments. I was taught networking concepts (LAN, WAN) and different packet exploits. The Lab environment was sound and real world. Most importantly is that the labs worked. I cannot tell you how many times in training the labs did not produce the required results. We would then go over the labs to see what was happening and learn the concepts that went into the exploit."
"By the third day I had enough training to change the way I looked at a network. The class was changing the way I saw a network. I was not just learning about an exploit, I wanted to know how to modify it. I was not thinking like a security specialist, I was thinking like a penetration tester. This was the most important thing that I took away from this class. I would go back to my hotel thinking about my own enterprise environment. I would cringe at potential vulnerabilities that I might have. I was introduced to a frame of mind, not a tool set."
"After the lecture Tim took time out of his lunch to show me more code. All I had to do was ask, Tim was happy to answer all my questions. By looking at exploits and vulnerabilities I am now better able to secure my corporate environment."
"After taking this class I have an opportunity to take the CPTS test and become certified. The problem with many certification classes is that they tend to teach you how to pass a test. I was never instructed on how to take a test, I was taught how to penetrate a network. With what I have learned in the class I have no doubt that I will pass the certification."
"I now have a better understanding on what I am up against to secure my corporate computing environment."
-Tim Gallagher, Systems Engineer (excerpt)
VMTraining Hacking Uncovered - VMware® Ultimate Bootcamp®
For more information, to schedule a class, or students who wish to get information about attending or request a class in a specific location, please contact our Sales Department at (815) 715-8443.