====== LKNOG 8 Workshops ====== LKNOG8 host the following three workshop tracks. ---- ===== Network Security ===== The objective of this workshop is to examine the concepts, protocols and the policies involved in establishing and maintaining security for a network. The workshop includes Cryptography fundamentals, VPN, Access control, Packet analysis, DDoS, Intrusion Detection, RPKI and Routing Security. On completion, you will be able to discover security vulnerabilities across a network and be able to architect and configure your network for maximum security while also being able to monitor for any malicious activities in your network. The Hands-on labs are used to enhance understanding and familiarity about device and network infrastructure security. ==== Workshop Topics ==== The workshop will be a combination of theory and lab. The course will cover the following: * Network Security Fundamentals * Cryptography * Infrastructure Security * DDoS Attacks and Countermeasures * Honeypots and Honeynet * Packet Analysis * Intrusion Detection * Flow Monitoring * BGP Operational Security * RPKI * IPv6 Security Considerations * DNS security * VPN Technologies * Vulnerability Assessment and Penetration Testing Detailed Agenda can be found [[https://academy.apnic.net/en/events?id=a0BOc000000Tag1MAC|here]]. ---- ===== DNS | DNSSEC ===== This course will discuss the DNS operations, configurations and security in detail. To protect DNS data, it is important for DNS operators to understand DNS Security Extensions (DNSSEC). The course will also discuss the DNSSEC concepts in detail covering the signing and validation of DNS data. Participants will be involved in lab exercises to configure DNS servers and apply various security considerations. ==== Expected Outcome ==== Participants should be able to understand the DNS and DNSSEC operations in detail. ==== Workshop Topics ==== The workshop will be a combination of theory and lab. The course will cover the following: * ⁠DNS Concepts * Recursive Servers * Authoritative Servers * ⁠DNS and Zone file Management * ⁠Internationalized Domain Names * ⁠Transaction Signatures * Reverse DNS * ⁠Registry Operations and Best Practices * Tools and Troubleshooting * DNS Security Extensions (DNSSEC) Detailed Agenda can be found [[lknog:dnssec|here]]. ---- ===== Network Monitoring ===== A comprehensive 4-day workshop on Network Systems Monitoring (NSM). This hands-on course is designed to equip participants with practical skills in implementing and managing robust monitoring solutions for modern network infrastructures. ==== Expected Outcome ==== By the end of this workshop, attendees will have the skills to implement comprehensive monitoring solutions, interpret monitoring data, and respond effectively to network issues. This course is ideal for IT professionals looking to enhance their network monitoring capabilities and improve overall network reliability and performance. ==== Workshop Topics ==== The workshop will be a combination of theory and lab. The course will cover the following: * Overview of NSM * Wireshark Analysis * SNMP Basics * Linux Basics * Device Configuration hands-on * LibreNMS Hands-on * Icinga2 Hands-on * Alerts Hands-On * RRD Tools Detailed Agenda can be found [[lknog8:nsm|here]].