 |
|
CWSP - Certified Wireless Security Professional
Wireless security training is critical for today's wireless LANs. As wireless LANs explode in popularity and implementation, so does the need for securing these networks. Wireless security, and the lack thereof, is a daily headline in IT news. Security for wireless solutions cannot come from a single software protocol or hardware solution, but from educated wireless networking professionals implementing multiple safeguards.
The Certified Wireless Security Professional™ (CWSP™) certification builds on the foundation of wireless LAN knowledge from the CWNA certification by educating the candidate about the security threats to and weaknesses of wireless LANs. The main topics of this course and the certification exam are hardware, software, protocols, procedures, and design techniques used in reducing wireless LAN security risks. Wireless Security Certification & Training is an essential step in developing your expertise in wireless technologies.
Benefits
Benefits of CWSP Training & Certification include:
|
 |
 |
 |
Solid understanding of the security weaknesses of and threats to wireless LANs
|
 |
Hands on training in implementation of the best available security techniques
|
 |
Standardized training in the latest security software and protocols for wireless LANs
|
 |
Getting a step ahead of the competition for wireless integration business
|
 |
Achievement of the only certification for wireless security.
|
 |
Becoming your organization's resource for wireless security issues and decisions
|
|
|
Prerequisites: The required prerequisite for enrolling in the CWSP
class is passing the CWNA exam, which is available at Prometric Testing
Centers worldwide.
Duration: The course consists of 45 hours of hands on learning.
Recommended: We recommend that all CWSP candidates achieve either
the SCP or Security + certifications prior to attending a CWSP class.
About the Certification Exam: The CWSP exam is available with
number PW0-200. The exam will consist of 60 questions, and requires a
passing grade of 70%. Instructors must pass the CWSP exam with a score
of at least 80%.
Topics Covered
Risk Assessment
|
 |
Assets to protect
|
 |
Threats to protect against
|
 |
Legal protection
|
 |
Costs
|
 |
Basic security measures
|
 |
Threat analysis
|
 |
Impact analysis
|
|
|
Threat Analysis & Hacking Methodology
|
 |
Target profiling
|
 |
Physical security
|
 |
Social engineering
|
 |
Wireless bridges
|
 |
Packet analysis
|
 |
Information theft
|
 |
Malicious data insertion
|
 |
Denial of Service (DoS)
|
 |
Peer-to-peer hacking
|
 |
Unauthorized control
|
|
|
Rudimentary Security Measures
|
 |
SSID
|
 |
MAC filters
|
 |
Static WEP
|
 |
Default configurations
|
 |
Firmware upgrades
|
 |
Physical security
|
 |
Periodic inventory
|
|
|
Intermediate Security Measures
|
 |
Rogue equipment
|
 |
Cell sizing
|
 |
Protocol filters
|
 |
SNMP
|
 |
Discovery protocols
|
 |
Wireless segment configuration
|
 |
Remove vulnerabilities
|
 |
Client security
|
 |
IP Services
|
|
|
Advanced Security Measures
|
 |
Wireless security policy
|
 |
Authentication & encryption
|
 |
Wireless DMZ and VLANs
|
 |
Audits
|
 |
Traffic pattern analysis
|
 |
Authenticated DHCP
|
|
|
Wireless LAN Auditing Tools
|
 |
Discovery tools
|
 |
Password crackers
|
 |
Share enumerators
|
 |
Network management and control
|
 |
Wireless protocol analyzers
|
 |
Manufacturer defaults
|
 |
Password sniffers
|
 |
Antennas and WLAN equipment
|
 |
OS fingerprinting and port scanning
|
 |
Application sniffers
|
 |
Networking utilities
|
 |
Network discovery and management
|
 |
Hijacking users
|
 |
RF Jamming and Dataflooding tools
|
 |
WEP crackers
|
|
|
Hardware & Software Solutions
|
 |
RADIUS with AAA Support
|
 |
RADIUS Details
|
 |
Kerberos
|
 |
Static and Dynamic WEP and TKIP
|
 |
802.1x
|
 |
Extensible Authentication Protocol (EAP)
|
 |
VPNs
|
 |
Encryption Schemes
|
 |
Routers
|
 |
Switch-Routers
|
 |
Firewalls
|
 |
MobileIP VPN Solutions
|
 |
Enterprise Wireless Gateways
|
 |
Switches, VLANs, & Hubs
|
 |
SSH2 Tunneling & Port Redirection
|
 |
Thin Client Solutions
|
|
|
Prevention & Countermeasures
|
 |
802.1x
|
 |
802.11i
|
 |
TKIP
|
 |
AES
|
 |
Intrusion detection
|
 |
US Federal and state laws
|
|
|
Implementation and Management
|
 |
Design and implementation
|
 |
Equipment configuration and placement
|
 |
Interoperability and layering
|
 |
Security management
|
|