# Practical Cybersecurity for Internet Operators - 3 day (MasterClass): Agenda # ## Time Schedule ## |Schedule |Time | |------------------|----------------| |Session 1 |09:00 - 10:30 | |Break |10:30 - 11:00 | |Session 2 |11:00 - 12:30 | |Lunch |12:30 - 14:00 | |Session 3 |14:00 - 15:30 | |Break |15:30 - 16:00 | |Session 4 |16:00 - 17:30 | ## Instructors ## | FL | Name | Email | Organization | Country | |----|-----------------------|----------------------------|--------------|---------------| | XY | Named, Appropriately | instructor(at)uoregon(dot)edu | [University of Oregon](http://uoregon.edu)| USA | ## Sessions ## | DAY 1 | Topic | Inst | Presentations | Exercises | |------------------------|---------------------------|---------|---------------------------------------------------|----------------------------------------| | Session 1.1 | Introduction to the PCIO Workshop | TBD | [PDF](networking/pcio/en/presentations/Introduction.pdf) | | | Session 1.2 | Thinking about Security | TBD | [PDF](networking/pcio/en/presentations/Thinking-about-security.pdf) | | | Session 1.3 | Start using a Password Manager | TBD | | [Password Manager Lab](networking/pcio/en/labs/Start-using-a-password-manager.html) | | Session 1.4 | Layer 1, 2 and 3 Best Practices | TBD | [PDF](networking/pcio/en/presentations/Layer-123-best-practices.pdf) | | | Session 1.5 | Management Networks and OOB | TBD | [PDF](networking/pcio/en/presentations/Management-Networks-and-OOB.pdf) | | | Session 1.6 | Router and Host Security Configuration | TBD | [PDF](networking/pcio/en/presentations/Router-Host-Security-Configuration.pdf) | [Router and Host Security Lab](networking/pcio/en/labs/router-host-security-lab.html) | | Session 1.7 | Switching Architectures: VLANs | TBD | [PDF](networking/cndo/en/presentations/Layer2-VLANs.pdf) | [VLAN Lab](networking/cndo/en/labs/l2_vlan_lab.html) | | | | | | [Diagram - VLANs](networking/cndo/diagrams/cnd-campus-handout-vlans.pdf) | | Session 1.8 | Switching Architectures: L2 Protection Features | TBD | [PDF](networking/cndo/en/presentations/Layer2-Protection.pdf) | [L2 Protection Features Lab](networking/cndo/en/labs/l2_protection.html) | | **DAY 2** | | | | | | Session 2.1 | Wireless Security | TBD | [PDF](networking/pcio/en/presentations/Wireless-Security.pdf) | | | Session 2.2 | Layer 3 Device Security on L2 | TBD | [PDF](networking/pcio/en/presentations/Layer3-Device-Security-on-L2.pdf) | | | Session 2.3 | Host AutoConfiguration Best Practices | TBD | [PDF](networking/pcio/en/presentations/Host-AutoConfig-BCP.pdf) | | | Session 2.4 | Introduction to Routing Security | TBD | [PDF](networking/pcio/en/presentations/Intro-to-routing-security.pdf) | | | Session 2.5 | Lab Access | TBD | | [Lab Access](networking/routing-security/en/labs/lab-access.html) | | | | | | [Address Plan](networking/routing-security/en/labs/address-plan.html) | | Session 2.6 | Securing the Router | TBD | | [Securing Router Lab](networking/routing-security/en/labs/securing-router.html) | | Session 2.7 | eBGP with Transit | TBD | | [eBGP Lab](networking/routing-security/en/labs/ebgp.html) | | Session 2.8 | BGP Best Practices | TBD | [PDF](networking/bgp-deploy/en/presentations/BGP-BCP.pdf) | | | **DAY 3** | | | | | | Session 3.1 | Unicast Reverse Path Forwarding | TBD | [PDF](networking/routing-security/en/presentations/uRPF.pdf) | | | Session 3.2 | Unicast Reverse Path Forwarding Lab | TBD | | [uRPF Lab](networking/routing-security/en/labs/uRPF.html) | | Session 3.3 | Remote Trigger Blackhole Filtering | TBD | [PDF](networking/routing-security/en/presentations/RTBH.pdf) | | | Session 3.4 | RTBH within an AS | TBD | | [RTBH within an AS Lab](networking/routing-security/en/labs/RTBH-local.html) | | Session 3.5 | RPKI Operations | TBD | [PDF](networking/routing-security/en/presentations/RPKI-Operations.pdf) | | | Session 3.6 | Configuring RPKI on routers | TBD | | [RPKI Lab](networking/routing-security/en/labs/rpki.html) | | Session 3.7 | Seven Layers of Basic Cybersecurity | TBD | [PDF](networking/cndo/en/presentations/Seven-Layer-Cybersecurity-Strategy.pdf) | | | Session 3.8 | Firewalls, Packet Filters & Proxies | TBD | [PDF](networking/pcio/en/presentations/Firewalls-Packet-Filters-Proxies.pdf) | | | Session 3.9 | DNSSEC Refresher | TBD | [PDF](dns/materials/presos/en/kindns-dnssec-refresher.pdf) | | | Session 3.10 | KINDNS for ISPs | TBD | [PDF](dns/materials/presos/en/dns-kindns-for-isps.pdf) | | | Session 3.11 | Vulnerability Management | TBD | [PDF](networking/pcio/en/presentations/Vulnerability-management.pdf) | | | Session 3.12 | Tabletop Exercises | TBD | [PDF](networking/pcio/en/presentations/Tabletop-exercises.pdf) | | ## Additional Information ## - A ZIP archive of these materials - [RFC8212 - Default External BGP (EBGP) Route Propagation Behavior without Policies](https://tools.ietf.org/html/rfc8212) - [Internet Routing Security Best Practices for Network Operators (MANRS)](https://www.manrs.org/manrs/) - [RIPE 706 MANRS Implementation Guide](https://www.ripe.net/publications/docs/ripe-706) - [BCP 38 - Network Ingress Filtering to Defeat Denial of Service Attacks which employ IP Source Address Spoofing](https://tools.ietf.org/html/bcp38) - [RFC7454 - BGP Operations Security](https://tools.ietf.org/html/rfc7454) - [Internet Routing Security Best Practices for Network Operators (MANRS)](https://www.manrs.org/manrs/) - [BCP 38 - Network Ingress Filtering to Defeat Denial of Service Attacks which employ IP Source Address Spoofing](https://tools.ietf.org/html/bcp38)