The payment card industry has been working over the past several years to formalize a standard for security practices that are required for organizations who process or handle payment card transactions. The fruit of this labor is the Payment Card Industry Data Security Standard (currently at vers...

Throughout the week, we will cover all aspects of project management from initiating and planning projects through managing cost, time, and quality while your project is active to completing, closing, and documenting as your project finishes. This course follows the basic project management struc...

This one-day session builds on the principles of SANS Security 560 with additional discussion and numerous hands-on exercises designed to help attendees make the most of their penetration tests. The course describes using Metasploit functionality to transform payloads into executable programs tha...

One of the most significant obstacles facing many auditors today is how exactly to go about auditing the security of an enterprise. What systems really matter? How should the firewall and routers be configured? What settings should be checked on the various systems under scrutiny? Is there a set...

Overview

Great programmers have traditionally distinguished themselves by the elegance, effectiveness, and reliability of their code. That's still true, but elegance, effectiveness, and reliability have now been joined by security. Major financial institutions and government agencies have informed the...

New law on privacy, e-discovery, and data security is creating an urgent need for professionals who can bridge the gap between the legal department and the IT department. The needed professional training is uniquely available in SANS' LEG523 series of courses, including skills in the analysis...

Computer attackers continue their relentless march in improving their tools and techniques. The simple scanning of yesteryear has given way to powerful suites of bundled, automated scanning and exploitation tools. Straightforward backdoors have evolved into powerful kernel-mode RootKits, manipula...

By helping you understand attackers' tactics and strategies in detail, giving you hands-on experience in finding vulnerabilities and discovering intrusions, and equipping you with a comprehensive incident handling plan, the in-depth information in this course helps you turn the tables on comp...

IPv6 may be far away for your network but operating systems and network devices will not hold back. Already, modern operating systems implement IPv6 by default. Windows 7, for example, ships with Teredo enabled by default. Your existing firewall may not block it. Learning more about IPv6 is essen...