Designed by the author of the much acclaimed Bulletproof SSL and TLS, this practical course will teach you how to deploy secure servers and encrypted web applications during a day packed with theory and practical work. We’ll focus on what you need in your daily work to deliver best security, availability and performance. And you will learn how to get an A+ on SSL Labs!
Why This Course is for You
- Understand threats and attacks against encryption
- Identify real risks that apply to your systems
- Deploy servers with strong private keys and valid certificates
- Deploy TLS configurations with strong encryption and forward secrecy
- Understand higher-level attacks against web applications
- Use the latest defence technologies, such as HSTS, CSP, and HPKP
This course is for system administrators, developers, and IT security professionals, who want to learn how to protect their systems from eavesdropping and impersonation attacks.
- Level: Intermediate
- Duration: 1 day
- Extras: Lunch and refreshments included
About a month prior to the course we'll send you a digital copy of Bulletproof SSL and TLS, our comprehensive guide to SSL/TLS and Internet PKI. You'll get the paper copy on the day. We'll also give you a bunch of exercises and a hardcopy of the slides.
- Basic Linux command line skills: moving about, invoking commands, editing configuration files.
- A laptop with a SSH client, which you will only need to connect to your assigned virtual server.
- You should be comfortable using a command-line editor.
We'll provide you with your own virtual server and a sample web application to work on
throughout the course.
About Feisty Duck
Feisty Duck is a London-based provider of computer security training and publisher of fine computer security and open source books. Our practical hands-oncourses are held in small classes and led by industry experts.
Courses include SSL/TLS, Internet PKI, Content Security Policy and ModSecurity.
- The need for network encryption
- Understanding encrypted communication
- The role of public key infrastructure (PKI)
- SSL/TLS and Internet PKI threat model
Keys and certificates
- RSA and ECDSA: selecting the right key algorithm and size
- Certificate hostnames and lifetime
- Practical work:
- Private key generation
- Certificate Signing Request (CSR) generation
- Selfsigned certificates
- Obtaining valid certificates from Let’s Encrypt
- Sidebar: Revocation
Protocols and cipher suites
- Protocol security
- Key exchange strength
- Forward security
- Cipher suite configuration
- Practical work
- Secure web server configuration
- Server testing using SSL Labs
- Sidebar: Server Name indication (SNI)
- Sidebar: Performance considerations
- Man-in-the-middle attacks
- Mixed content
- Cookie security
- CRIME: Information leakage via compression
- HTTP Strict Transport Security
- Content Security Policy
- HTTP Public Key Pinning
- Practical work:
- Deploying HSTS to deploy robust encryption
- Deploying CSP to deal with mixed content
Putting it all together: Getting an A+ in SSL Labs
We will also provide you with many additional exercises that you can work on in your own time. You'll be able to ask us for help via email. And if you're already familiar with the basics, we'll challenge you with some of the advanced exercises on the day.
Scott Helme is a security researcher, consultant and international speaker. He can often be found talking about web security and performance online and helping organisations better deploy both.
In August 2015, Skills Matter opened the doors to CodeNode, our new 23,000 sqft Tech Events and Community venue. CodeNode provides fantastic meetup, conference, training and collaboration spaces with unrivalled technology capabilities for our tech, digital and developer communities - a long held dream coming true !
With fantastic transport links and located in the heart of London's Tech City, we could not think of a better location for our 60,000 strong engineering community!
With seven event rooms, including a 300 seater lecture room, thousands more community members will be able to visit CodeNode to learn and share skills, code and collaborate on projects.
CodeNode features a 5,000 sqft break-out space, complete with fully-licensed bar, plenty of power sockets, meeting and collaboration spaces and entertainment areas.
CodeNode will also see the opening of a permanent Hack Space, stacked with microprocessors and the latest tools and devices to play with. A community film studio will be opening too, which you can use to record any tutorials or demo's you may want to share with our community.
If you're interested in hiring CodeNode for your upcoming event, check out more details here.
Hold tight, skillscasts coming soon!