DESCRIPTION AND BENEFITS

On this brand new three-day HANDS-ON workshop you will:

• find out just how vulnerable e-commerce systems are to internet-related risks
• configure a secure internet connection
• build and maintain a secure web-based e-commerce trading site
• find out everything you need to know about auditing your organisation's internet and e-commerce activities

We start with a briefing on the technical components involved, then we really open your eyes to the enormous variety of new risks which now endanger internet-based business systems. You'll see how easily risks materialise and just how exposed you are without proper defences.

Through your workstation you'll build secure defences to protect your systems from penetration and disruption. You'll learn how to secure a web server and restrict access to its vital services. You'll have a chance to try out PKI cryptographic software, access a web site, examine web browser and web server configurations, play with a firewall and undertake a host of other hands-on activities.

You'll find out how secure digital payment systems operate and discover the secrets of digital certification methods and cryptographic techniques.

Most important of all, we'll show you exactly how to conduct an audit of your internet connections and e-commerce activities, so you know exactly what questions to ask and tests to perform when you return to base.

WHAT WILL BE COVERED

Introducing e-commerce
• disasters and what could have been done to prevent them
• strategy, goals and objectives

Technical briefing
• TCP/IP based threats
• port scanning and detection
• network services
• intruder techniques - hacking and spoofing

E-Commerce risks
• denial of service
• ISP risks
• authentication and penetration risks
• e-mail risks
• commercial and legal issues

Web browsers and servers
• browser operation and settings
• security risks
• cookies, JAVA, Active X and other untrusted code
• web server security

Auditing the security defences
• cryptographic security
•••• encryption for the internet (PKI)
•••• SSL
• hash check-summing
• digital certification
•••• authenticating internet sites
•••• secure payments
•••• e-wallets
• firewalls and perimeter content checking
• application level filtering

To Course Index Page

To Bookings Page