vzw BiASC asbl

Cisco Talent Connection Event - 9 March 2018 - Registration

Every year Cisco invites partners and students to the Cisco Talent Connection Event & TAC Visit. This year the event will take place at the Cisco Belgium premises in Diegem on 9 March 2018 from 8:45 am until 16 pm. The aim is to bring graduates into contact with future employers in the networking domain. There will be job opportunities for all education levels, provided the candidates are close to certification or of a very good education level.

Registration: https://goo.gl/forms/qRUykkEV7jWQIqwG3

The Talent Connection Event on 9 March is a great opportunity to meet and greet top players in the IT industry and to visit the Cisco TAC labs. The Cisco Talent Connection Event & TAC Visit is not only dedicated to ICT and engineering students. Cisco partners are also looking for other talents.

Some of the partners that will be present: INGRAM, Rank1, Computacenter, Uptime, EBO Enterprises, Axians, Azlan, IT1, SPOTIT, Conxion, SIMAC, Econocom, Bechtle, … (List not finalized)

The event is free of charge. If you are a student seeking job opportunities, please first put your CV online in order for Cisco partners to prepare for a job interview.

STUDENTS

Please fill in the registration form in order to register for the Cisco Talent Connection Event.

INSTRUCTORS

On the same day BiASC is offering an intensive presentation of emerging technologies. Experienced CCNA teachers are invited to take part.
Please fill in the registration form for teachers to take part in the workshop.

VMware IT Academy Evolution - the BIG picture

A few months ago VMware decided to update the IT Academy Education programme. In the future the learning materials offered by VMware IT Academy will be totally different from commercial VMware training. At any rate, academies will be able to download VMware software to be used in an educational environment.

Here is the big picture.

Get Free vshere Trial

• https://my.vmware.com/en/web/vmware/evalcenter?p=vsphere-6

Other links

• https://vmapss.onthehub.com/WebStore/Welcome.aspx
• https://mylearn.vmware.com/mgrReg/plan.cfm?plan=69513&ui=www_edu/
• https://www.vmware.com/products.html
• https://my.vmware.com/en/web/vmware/info/slug/datacenter_cloud_infrastructure/vmware_vsphere/6_5

To all educational institutions we advise to contact IT-vendors through education coordination centers, like BIASC. Commercial companies do not have the resources to support every individual academy. 

Botnet explained in CyberSecurity Operations

After the CyberSecurity Operations course you will be able to analyse and explain the actions of a botnet.

A botnet consists of a group of "zombie" computers that run robots (or bots) and a master control mechanism that provides direction and control for the zombies. The originator of a botnet uses the master control mechanism on a command-and-control server to control the zombie computers remotely using IRC or other means.

A botnet typically operates as follows:

A botnet operator infects computers by sending them malicious bots. A malicious bot is self-propagating malware that is designed to infect a host and connect back to the command-and-control server. In addition to its worm-like ability to self-propagate, a bot can include the ability to log keystrokes, gather passwords, capture and analyze packets, gather financial information, launch DoS attacks, relay spam, and open back doors on the infected host.

Bots have all the advantages of worms, but are generally much more versatile in their infection vector, and are often modified within hours of publication of a new exploit. Bots have been known to exploit back doors that are opened by worms and viruses, which allows the bots to access networks that have good perimeter control. Bots can infect networks in a way that escapes immediate detection.

The bot on the newly infected host logs in to the command-and-control server and awaits for the commands. Often, the CnC traffic is sent using either IRC, P2P, DNS, HTTP, and HTTPS. When using HTTPS, the CnC traffic will be encrypted using TLS or SSL, making it harder to detect.

Instructions are sent from the CnC server to each bot (zombie) in the botnet to execute actions. When the zombies receive the instructions, they begin generating malicious traffic that is aimed at the victim. Zombies mostly run a covert channel to communicate with the command-and-control server that the attacker controls.

Women of Impact | 7 March 2018 | Cisco Diegem

 

Every year Cisco holds a global event called Women of Impact, which is devoted to the development and advancement of professional women.

On March 7, 2018, Women of Impact will offer nearly 24 hours of global content, including in-person sessions at Cisco sites in 47 countries.

We are inviting Networking Academy students in your area to join the conference in person, free of charge, for activities like:

• Motivational presentations from accomplished women at Cisco and elsewhere
• Mentorship opportunities
• Hands-on challenges in IoT and cybersecurity

Women of Impact is a powerful and inspirational professional development opportunity. Women are underrepresented in technology fields, and Women of Impact is one way we can inspire young women to pursue and thrive in this rewarding career path.

Please share this information with up to 15 students who would benefit from and enjoy this experience. Please ask them to complete this short application by February 9^th to attend Women of Impact: https://www.cvent.com/d/ktqc1m

Members of the Cisco Corporate Affairs team will select 12 attendees from this applicant pool and notify them directly.

Recommended students should meet the following criteria:

• Completed CCNA2 or CCENT equivalent
• Age 18 or older
• Demonstrated interest in learning about career opportunities
• Demonstrated desire to be a role model
• Ability to travel independently to an event on March 7, 2018, at one of these locations:
  • Belgium (Pegasus Parc, De Kleetlaan, 6A, 1831 Diegem, Brabant) [map]
  • California (260 Tasman Drive, San Jose, CA) [map]
  • Cambodia (Phnom Penh, TBD)
  • Myanmar (No. 36-38 A, Myay Nu Street, San Chaung Township, Yangon) [map]
  • Singapore (8 Changi Business Park Avenue 1, Singapore) [map]

If you have any questions, please let me know, or reach out directly to my colleagues Gena Pirtle, Melinda Hall.

Cisco Academy Meeting Wallonie-Bruxelles & Luxembourg

Voici les documents et les photos de la réunion des académies Cisco de Wallonie-Bruxelles & Luxembourg qui s'est tenue à Bruxelles le 19 janvier 2018.  

Introduction Cisco Netacad

PDF:  Download Pres NetAcad Rik Beeker Cisco Brussels Jan 19 2018

Session A - Expérience d'apprentissage Networking Academy/ Portfolio

URL:  http://biasc.be/2018/01/expérience-dapprentissage-networking-academy.html 

Session B - Technologies émergentes / DevNet

PDF:  Download ETW-NET-PdF-Jan18

Photos

URL: https://photos.app.goo.gl/5reeL3NSDFITjrjR2

 

Merci aux organisateurs et aux conférenciers

Pierre de Fooz, Yvan Rooseleer (BiASC)
Frank De Reymaeker, Goswin Weemaes, Rik Bleeker (Cisco)

 

Hardware Bundles CCNA + Security 2018

Hardware Bundles 2018

• CCNA Standard:  Download CCNA Equipment List 2018
• CCNA Security:  Download CCNA Security Equipment List 2018

 

Cisco Live Barcelona Live Broadcast | 30 JAN 2019 - 2 FEB 2018

From 30 January until 2 February Cisco Academies are able to follow live sessions in real time.

Experience Cisco Live 2018 from anywhere! Watch exclusive keynotes and interviews and get up to date with the latest innovations
from Cisco. View the broadcast for free at CiscoLive.com/emea or CiscoLive.com/global.

Cisco DevNet Webinar Series

The Cisco DevNet Webinars are frequently updated

Digitization is disrupting traditional networks and driving the need to adopt evolving technologies. Networks are becoming programmable, virtualized, and software-driven. With these changes happening in the industry, it is important to understand software development concepts and how cross-functional work will be required to help drive network automation. The skills needed for future careers are changing and Cisco Networking Academy is partnering with DevNet to help you. Together we will help you better understand and experience some of these new software-related skills, broaden your thinking about potential career options, and provide opportunities to learn more.

Discover what DevNet has to offer you as a student and digital professional. Find out how DevNet and Networking Academy are collaborating together to create
a vibrant community.

Session 1: Introduction to Software and Programmability through Cisco DevNet
Session 2: Introduction to Coding
Session 3: Intent Networks: How to be a Network Engineer in a Programmable Age
Session 4: Fast Lane: Where Code (Apple) Meets Network Infrastructure (Cisco)
Session 5: APIs with Cisco Spark
Session 6: Network Programmability with APIC-EM

URL: https://www.netacad.com/careers/webinars/opportunities-in-tech/-/asset_publisher/xUXSnCQaZ4Nt/content/cisco-devnet/?utm_source=ks&utm_medium=multi&utm_campaign=webinar&utm_content=career-tb

T2 CAMPUS GENK - LAUNCH - 7 FEB 2018

BiASC neemt deel aan de lancering van de T2 Campus in Genk op 7 februari van 15 tot 18 uur. Leden van BiASC zijn welkom.

Praktisch 
Datum: woensdag 7 februari 2018
Startuur: 15u00
Einduur: 18u00

Locatie
Thor Central
André Dumontlaan 67
3600 Genk

Registratie: http://www.t2-campus.be/uitnodiging-lancering-ecosysteem/

Fosdem 18 - 3 & 4 February 2018

FOSDEM is a free event for software developers to meet, share ideas and collaborate.
Every year, thousands of developers of free and open source software from all over the world gather at the event in Brussels. No registration necessary.

We are looking for volunteers who are able to proctor the Linux LPI Exams talking place during Fosdem. Linux Professional Institute will be very grateful. Please send an email to <[email protected]> with a subject line "Fosdem/ Proctoring LPI Exams"

Typical Attack Compromising a Victim's Computer

In the new CCNA CyberSecurity Operations course you learn how to understand attack patterns and how to deal with it as a network defender. Only six steps are necessary to start malicious activity in which a command and control (C2) server is involved. In the image above you see a typical  network attack in which a victim's computer is being compromized step by step. 

Source

Chris Sanders, Security Onion 2016: The Investigators Labyrinth: A Data-Driven Perspective, 29:38
Published on Youtube 12  SEP 2016 
URL: https://www.youtube.com/watch?v=nW9g2K69qOA

 

VERIS Framework for CyberSecurity Incidents

- - -

How to describe security incidents is an important part in the CCNA CyberSecurity Operations course.
URL: http://veriscommunity.net/index.html

VERIS means"Vocabulary for Event Recording and Incident Sharing"

• Vocabulary for event recording and incident sharing
• Common language for describing security incidents in a structured and repeatable manner

 The VERIS Community Database (VCDB) is an open and free repository of publicly-reported security incidents in VERIS format. 

Example

URL: https://incident.veriscommunity.net/s3/example

More information

GitHub: https://github.com/vz-risk/veris

Common Attack Pattern Enumeration and Classification (CAPEC™)

In the CyberSecurity Operations course there are mutiple descriptions of attack patterns. CAPEC is a good source to understand cyber attacks.

The objective of the Common Attack Pattern Enumeration and Classification (CAPEC™) effort is to provide a publicly available catalog of common attack patterns classified in an intuitive manner, along with a comprehensive schema for describing related attacks and sharing information about them.

Some Well-Known Attack Patterns:
HTTP Response Splitting (CAPEC-34) Session Fixation (CAPEC-61) Cross Site Request Forgery (CAPEC-62) SQL Injection (CAPEC-66) Cross-Site Scripting (CAPEC-63) Buffer Overflow (CAPEC-100) Clickjacking (CAPEC-103) Relative Path Traversal (CAPEC-139) XML Attribute Blowup (CAPEC-229)

 For an experienced security engineer, the value of an attack pattern is not that it presents a new idea, but that it helps communicate a common idea with others. If you and a colleague all know what clickjacking is, then you can communicate a lot by saying: "This attack leverages clickjacking."

This information when captured in such a formalized way can bring considerable value to security considerations for cyber-enabled capabilities through all phases of the development lifecycle and other security-related activities, including:

• Requirements Gathering – Identification of relevant security requirements, misuse and abuse cases.
• Architecture and Design – Provide context for architectural risk analysis and guidance for security architecture.
• Implementation and Development – Prioritize and guide review activities.
• Testing and Quality Assurance – Provide context for appropriate risk-based and penetration testing.
• System Operation – Leverage lessons learned from security incidents into preventative guidance
• Policy and Standard Generation – Guide the identification of appropriate prescriptive organizational policies and standards.

Of course, attack patterns are not the only useful tool for building secure cyber-enabled capabilities. Many other tools, such as misuse/abuse cases, security requirements, threat models, knowledge of common weaknesses and vulnerabilities, and attack trees, can help. Attack patterns play a unique role amid this larger architecture of security knowledge and techniques.

 

Source URL: http://capec.mitre.org/about/index.html

Oracle Academy Registration 2018

Corning FTTH Fundamentals Training

On 5 and 6 February 2018 we are organizing a 2-day training about "Fiber From the Network Node to the Living Room" in Haarlem.nl.
Registration: https://goo.gl/forms/Isf5888BQLA6JQQI2

Expérience d'apprentissage Networking Academy

Expérience éducative orientée métier

• Programme d'apprentissage
• Méthodes d'apprentissage
• Modes de réflexion

Développer des compétences en T

• Compétences numériques au 21e siècle

Formations Networking Academy - parcours flexibles

• Professionnel des réseaux
• Professionel de la sécurité
• Principes fondamentaux de l'IoT
• Big Data et analytique
• Compétences numériques

PDF:  Download NetAcad_Learning Experience_9.7.17-French

Emerging Threats | SGUIL | SNORT

The Emerging Threats website contains "snort" rules for intrusion detection and protection. Every CyberSecurity analyst has to understand the inner workings of these rules.

SNORT RULES MANUAL
Snort uses a simple, lightweight rules description language that is flexible and quite powerful. Most Snort rules are written in a single line. This was required in versions prior to 1.8. In current versions of Snort, rules may span multiple lines by adding a backslash\ to the end of the line. Snort rules are divided into two logical sections, the rule header and the rule options. There are four protocols that Snort currently analyzes for suspicious behavior– TCP, UDP, ICMP, and IP.
URL: https://s3.amazonaws.com/snort-org-site/production/document_files/files/000/000/129/original/snort_manual.pdf

Here is a good start for understanding Cybersecurity rules:
URL: http://docs.emergingthreats.net/bin/view/Main/WhatEveryIDSUserShouldDo

SGUIL and SNORT are practiced in the workshops of the CyberSecurity Operations Networking Academy course.

Example Snort Rule