Classes :: class description :

Child Care

Overview

Upon successful completion of this course, students will obtain the necessary knowledge and skill to perform the daily tasks of a Child Care Worker.  This course introduces students to a developmental-appropriate early childhood program for children ages from birth to ten.  Students will learn routines, scheduling, and activities that encourage children’s healthy growth and development.

Prerequisites

Students must like children

Outline

Module 1 - Introduction To Child Care

·        Families and Child Care

·        Your Role in Child Care

Module 2 - Child Growth And Develpment

·        Child Development Theories and Principles

·        Child Development Part I

(An overview broken down into birth-6 months, 6-12 months, 12-18 months,18-36 months, 3-5 years; details on social, emotional, physical, and intellectual development.)

·        Gathering user information from newsgroups and mailing lists

Module 3 - Network Scanning

·        Courseware topics

·        ICMP Scanning to find hosts

·        TCP and UDP Scanning to identify ports

·        Mapping Firewall rules with port scanning

Lab

·        ICMP scan target hosts

·        TCP/UDP scan target hosts

·        Tools include - Fscan, Superscan, nmap

Module 4 - Operating System and Application Identification

·        Courseware topics

·        Discuss why determining the operating system is necessary

·        Discuss how to determine an application and give example responses

Lab

·        OS fingerprinting and Banner grabbing

·        Tools include - nmap, queso, telnet, netcat

Module 5 - Remediation of Fingerprinting

·        Courseware topics

·        High level overview of how to stop/protect against each type of fingerprinting

·        Exploit Identification

Module 6 - Using Scanners to find vulnerabilities

·        Courseware topics

·        Discuss what scanners can provide you and when they should be used

·        Discuss how to use Sara and Nessus

Lab

·        Vulnerability scan using Sara

·        Vulnerability scan using Nessus

·        Tools include - Sara, Nessus

Module 7 - Exploiting Routers

·        Courseware topics

·        SNMP enumeration

·        Modifying Access lists for additional access

·        Cracking passwords that can be used throughout the network

Lab

·        SNMP Scans

·        Exploit of the web interface

·        Tools include - Network View, Solarwinds

Module 8 - Exploiting Windows NT 4.0

·        Courseware topics

·        Enumerating Windows NT

·        Exploiting default NT permissions and services

·        Password vulnerabilities

Lab

·        Use null session to dump user, group, account policy information

·        SNMP scanning

·        Manual and automated brute force to obtain administrator

·        Password cracking

·        Tools included - Dumpsec, enum, NAT, etc.

Module 9 - Exploiting Windows 2000 Server

·        Courseware topics

·        Enumeration through directory traversal

·        Buffer overflows and recent worms

·        NT 4.0 and Windows 2000 comparison

Lab

·        Use directory traversal for web site defacement and root kit placement

·        Use buffer overflows to obtain admin privileges

·        Password cracking

·        Tools include - various exploit scripts

Module 10 - Exploiting Solaris

·        Courseware topics

·        Common weaknesses

·        SMTP vulnerabilities

Lab

·        SMTP Relay attack

·        RPC vulnerabilities

·        Print services vulnerabilities

·        Tools include - various exploit scripts

Module 11 - Remediation of Operation System Exploits

·        Courseware topics

·        Preventative measures

·        Patching your system

·        System hardening

Module 12 - Advanced Attack techniques

·        Courseware topics

·        Cascaded access

·        Backdoor / Remote Control through available ports

·        HTML exploits

Module 13 - Security Best Practices

·        Courseware topics

·        Network design

·        Security Policies

·        Intrusion Detection