Oreilly - VMware Advanced Security

Oreilly - VMware Advanced Security

by Integrity Training | Publisher: Stone River eLearning | Release Date: January 2019 | ISBN: 300000006A0144

https://www.oreilly.com/library/view/vmware-advanced-security/300000006A0144/

The VMware Advanced Security course is an advanced level course as compared to any other network or IT security course as it covers the security protocols and techniques to secure a virtual environment. The course teaches the students about the various types of threats that can effect a virtual datacenter and then explains the prevention techniques to protect and secure the VMware deployment. The VMware Advanced Security course is an ideal course for the system administrators working in a virtual datacenter or a public/private cloud infrastructure. The course covers the in-depth concepts of effectively securing the VMware based virtualized environment. The course is equally helpful for the IT professionals working at system integrator organizations and providing technical support to various organizations.

Course Introduction
- Course Introduction 00:01:42
- Instructor Introduction 00:01:19
- Instructor Introduction 00:01:01
Chapter 01 - Primer and Reaffirming Our Knowledge
- Primer and Reaffirming Our Knowledge 00:01:04
- ESX Networking Components 00:03:32
- How Virtual Ethernet Adapters Work 00:03:00
- How Virtual Switches Work 00:02:26
- VMsafe Overview 00:01:59
- Current VMsafe Partners 00:00:58
- Virtual Switch vs. Physical Switch Part1 00:00:53
- Virtual Switch vs. Physical Switch Part2 00:06:43
- Spanning Tree Protocol Not Needed 00:01:49
- Virtual Ports 00:01:20
- Uplink Ports 00:00:54
- Port Groups 00:01:24
- Uplinks 00:00:26
- Virtual Switch Correctness 00:01:18
- VLANs in VMWare Infrastructure 00:00:49
- NIC Teaming 00:00:32
- Load Balancing 00:01:08
- Failover Configurations 00:01:47
- Normal Operation 00:00:41
- Connection Fails 00:00:32
- Signaling Process - Beaconing 00:00:23
- Data Rerouted 00:00:09
- Layer 2 Security Features 00:03:17
- Forged Transmits 00:03:10
- Managing the Virtual Network 00:02:43
- Symmetric vs. Asymmetric Encryption 00:07:50
- Demo - Security in vSwitches 00:05:09
- Hashes 00:04:59
- Demo - Hashes 00:03:21
- Digital Signatures 00:04:16
- Breaking SSL Traffic 00:07:13
- Demo - Lab Environment 00:04:38
- Demo - ARP Cache Poison Part1 00:20:41
- Demo - ARP Cache Poison Part2 00:08:33
- File System Structure Part1 00:02:08
- File System Structure Part2 00:01:54
- File System Structure Part3 00:02:41
- Kernel 00:01:01
- Processes Part1 00:00:58
- Processes Part2 00:01:24
- Starting and Stopping Processes 00:01:40
- Interacting with Processes Part1 00:00:40
- Interacting with Processes Part2 00:00:35
- Accounts and Groups 00:01:58
- Password & Shadow File Formats 00:01:15
- Accounts and Groups (cont.) 00:03:04
- Linux and UNIX Permissions Part1 00:01:03
- Linux and UNIX Permissions Part2 00:01:01
- Linux and UNIX Permissions Part3 00:02:46
- Linux and UNIX Permissions Part4 00:00:20
- Demo - Intro to Linux 00:19:43
- Set UID Programs 00:01:03
- Logs and Auditing Part1 00:00:50
- Logs and Auditing Part2 00:01:38
- Chapter 01 Review 00:00:53
Chapter 02 - Routing and the Security Design of VMware
- Routing and the Security Design of VMware 00:01:10
- Security of Routing Data 00:00:20
- How Traffic Routes Between VMs on ESX Hosts 00:02:01
- Different vSwitches, Same Port Group and VLAN 00:01:44
- Same vSwitch, Different Port Group and VLAN 00:00:43
- Same vSwitch, Same Port Group and VLAN 00:01:15
- Security Design of the VMware Infrastructure Architecture Part1 00:01:10
- Security Design of the VMware Infrastructure Architecture Part2 00:00:54
- Security Design of the VMware Infrastructure Architecture Part3 00:01:23
- VMware Infrastructure Architecture and Security Features 00:00:34
- Virtualization Layer Part1 00:01:27
- Virtualization Layer Part2 00:03:05
- Virtualization Layer Part3 00:00:58
- Virtualization Layer Part4 00:00:45
- Virtualization Layer Part5 00:01:58
- CPU Virtualization Part1 00:03:34
- CPU Virtualization Part2 00:02:24
- CPU Virtualization Part3 00:03:07
- CPU Virtualization Part4 00:10:42
- Memory Virtualization Part1 00:00:56
- Memory Virtualization Part2 00:02:11
- Memory Virtualization Part3 00:00:59
- Memory Virtualization Part4 00:04:58
- Cloud Burst Part1 00:01:29
- Cloud Burst Part2 00:02:10
- Virtual Machines Part1 00:00:56
- Virtual Machines Part2 00:00:37
- Virtual Machines Part3 00:01:04
- Service Console Part1 00:01:00
- Service Console Part2 00:02:09
- Service Console Part3 00:00:58
- Virtual Networking Layer 00:00:29
- Virtual Switches 00:00:39
- Virtual Switch VLANs Part1 00:00:30
- Virtual Switch VLANs Part2 00:00:38
- Virtual Switch VLANs Part3 00:00:58
- Virtual Switch VLANs Part4 00:00:33
- Demo - Using VLAN’s 00:05:05
- Major Benefits of Using VLANs 00:01:29
- Major Benefits of Using VLANs 00:02:17
- Standard VLAN Tagging 00:00:58
- Virtual Ports 00:00:24
- Virtual Network Adapters 00:00:30
- Virtualized Storage 00:01:31
- VMware VirtualCenter Part1 00:02:09
- VMware VirtualCenter Part2 00:01:59
- VMware VirtualCenter Part3 00:01:44
- Chapter 02 Review 00:00:36
Chapter 03 - Remote DataStore Security
- Remote DataStore Security 00:00:25
- ESX / ESXi and Fibre Channel SAN Environment and Addressing 00:01:39
- Mask and Zone SAN Resources Appropriately 00:00:55
- LUN Masking and Zoning Part1 00:01:03
- LUN Masking and Zoning Part2 00:01:16
- LUN Masking and Zoning Part3 00:02:18
- LUN Masking and Zoning Part4 00:01:12
- LUN Masking and Zoning Part5 00:00:29
- LUN Masking and Zoning Part6 00:00:27
- LUN Masking and Zoning Part7 00:01:26
- Fiber Channel 00:01:19
- DH-CHAP 00:00:39
- Switch Link 00:00:36
- What is FC-SP (Fiber Channel - Security Protocol)? 00:01:05
- ESP Over Fiber Channel 00:00:38
- Fiber Channel Attacks - The Basics 00:03:35
- Steps in Securing Fiber Channel 00:02:20
- iSCSI vs. Fiber Channel 00:01:46
- ESX / ESXi and iSCSI SAN Environment and Addressing 00:01:48
- Hardware vs. Software Initiators 00:01:18
- iSCSI Security Features 00:01:18
- Secure iSCSI Devices Through Authentication 00:01:08
- Demo - Storage Security Settings 00:02:44
- IPSec 00:02:00
- IPSec Implementation 00:01:17
- Steps in Securing iSCSI 00:02:45
- Chapter 03 Review 00:01:19
Chapter 04 - Penetration Testing 101
- Penetration Testing 101 00:00:42
- What is a Penetration Test 00:01:54
- Benefits of a Penetration Test 00:03:12
- What Does a Hack Cost You? 00:02:07
- Cost of a Hack - Example 00:01:30
- Current Issues Part1 00:04:02
- Current Issues Part2 00:03:21
- Current Issues Part3 00:02:42
- Current Issues Part4 00:02:29
- Current Issues Part5 00:01:58
- Current Issues Part6 00:03:17
- Chained Exploit Example 00:02:58
- Demo - Gonzalez Indictment 00:03:29
- The Evolving Threat 00:05:28
- Methodology for Penetration Testing / Ethical Hacking 00:06:22
- Penetration Testing Methodologies 00:01:43
- Types of Tests 00:02:34
- Website Review 00:01:22
- Demo - Website Review 00:13:08
- Seven Management Errors 00:02:47
- Some VMware Issues 00:04:28
- Not Just About the Tools 00:02:32
- Chapter 04 Review 00:01:20
Chapter 05 - Information Gathering, Scanning and Enumeration
- Information Gathering, Scanning and Enumeration 00:00:21
- What is the Hacker Wanting to Know? 00:02:15
- Methods of Obtaining Information 00:01:11
- Footprinting 00:01:44
- Maltego 00:01:03
- Maltego GUI 00:02:35
- Demo - Maltego 00:12:32
- Firecat v1.6.2 00:01:57
- Demo - Firecat 00:06:43
- FireFox Fully Loaded 00:00:55
- Johnny.Ihackstuff.com hackersforcharity.org 00:01:26
- Google and Query Operators 00:02:11
- Google 00:01:02
- Shodan - You Have to be Kidding Me! Part1 00:01:37
- Shodan - You Have to be Kidding Me! Part2 00:00:34
- Demo - Shodan 00:06:16
- Introduction to Port Scanning 00:02:59
- Popular Port Scanning Tools 00:01:21
- ICMP Disabled 00:01:12
- NMAP TCP Connect Scan 00:00:31
- TCP Connect Port Scan 00:01:03
- Nmap 00:01:06
- Half-open Scan 00:00:28
- Firewalled Ports 00:00:32
- NMAP and Your VMware Servers 00:02:06
- Additional NMAP Scans 00:01:01
- NMAP UDP Scans 00:00:21
- Demo - NMAP 00:17:16
- UDP Port Scan 00:00:30
- Enumeration Overview 00:01:48
- Banner Grabbing 00:00:49
- Banner Grabbing with Telnet 00:00:27
- SuperScan 4 Tool: Banner Grabbing 00:01:07
- DNS Enumeration 00:01:04
- Zone Transfers 00:02:33
- Backtrack DNS Enumeration 00:01:05
- Active Directory Enumeration 00:01:37
- LDAPMiner 00:01:00
- Null Sessions 00:01:41
- Syntax for a Null Session 00:00:34
- Viewing Shares 00:00:39
- Enumeration with Cain and Abel 00:02:15
- NAT Dictionary Attack Tool 00:01:03
- THC-Hydra 00:00:48
- Injecting Abel Service 00:01:00
- Demo - Cain 00:21:59
- Chapter 05 Review 00:00:43
Chapter 06 - Penetration Testing and the Tools of the Trade
- Penetration Testing and the Tools of the Trade 00:00:41
- Vulnerabilities in Network Services 00:02:35
- BackTrack4 00:01:10
- Vulnerability Scanners 00:00:28
- Nessus 00:01:13
- Nessus Report 00:00:58
- Saint 00:01:16
- SAINT - Sample Report 00:00:43
- OpenVAS 00:01:03
- OpenVAS Infrastructure 00:01:02
- OpenVAS Client 00:02:30
- Demo - OpenVAS 00:29:00
- Windows Password Cracking 00:02:48
- Syskey Encryption 00:00:57
- Cracking Techniques 00:02:53
- Rainbow Tables 00:01:30
- Disabling Auditing 00:01:11
- Clearing the Event log 00:00:45
- NTFS Alternate Data Stream 00:02:14
- Stream Explorer 00:00:40
- Encrypted Tunnels 00:01:37
- Port Monitoring Software Part1 00:00:42
- Port Monitoring Software Part2 00:00:48
- RootKit 00:02:21
- The Metasploit Project 00:01:06
- Defense in Depth 00:02:18
- Meterpreter 00:01:41
- VASTO 00:00:35
- VASTO Modules 00:03:17
- Fuzzers 00:01:57
- SaintExploit at a Glance 00:00:55
- Core Impact Overview 00:01:35
- Core Impact 00:01:39
- Total Exploits from NVD Included in the Penetration Testing Tool 00:01:44
- Wireshark 00:01:25
- TCP Stream Re-assembling 00:01:04
- ARP Cache Poisoning 00:02:08
- ARP Cache Poisoning (Linux) 00:01:24
- Cain and Abel 00:02:37
- Ettercap 00:01:12
- Chapter 06 Review 00:01:02
Chapter 07 - DMZ Virtualization and Common Attack Vectors
- DMZ Virtualization and Common Attack Vectors 00:01:42
- DMZ Virtualization with VMware Infrastructure 00:02:31
- Virtualized DMZ Networks Part 1 00:01:52
- Virtualized DMZ Networks Part 2 00:02:44
- Three Typical Virtualized DMZ Configurations 00:00:38
- Partially Collapsed DMZ with Separate Physical Trust Zones 00:02:42
- Partially Collapsed DMZ with Virtual Separation of Trust Zones 00:02:02
- Fully Collapsed 00:03:06
- Best Practices for Achieving a Secure Virtualized DMZ Deployment 00:01:07
- Harden and Isolate the Service Console 00:02:21
- Clearly Label Networks for Each Zone within the DMZ 00:01:25
- Set Layer 2 Security Options on Virtual Switches 00:01:09
- Enforce Separation of Duties 00:02:04
- Use ESX Resource Management Capabilities 00:01:24
- Regularly Audit Virtualized DMZ Configuration 00:01:52
- Common Attack Vectors 00:01:06
- How We Understand Fake Certificate Injection to Work 00:01:29
- Generic TLS Renegotiation Prefix Injection Vulnerability 00:05:28
- Testing for a Renegotiation Vulnerability 00:01:11
- Vulnerability Requirements 00:01:50
- Generic Example 00:02:12
- Patched Server with Disabled Renegotiation 00:00:44
- Schmoo Con 2010: Virtualization Vulnerabilities Found! 00:01:28
- Schmoo Con 2010: Timeline 00:01:17
- Schmoo Con 2010: Identification 00:01:04
- Schmoo Con 2010: Server Log In 00:00:11
- Schmoo Con 2010: Server on the Internet 00:00:16
- Schmoo Con 2010: Vulnerability Part1 00:00:48
- Schmoo Con 2010: Vulnerability Part2 00:00:19
- Schmoo Con 2010: Redirection Proxy 00:00:25
- Schmoo Con 2010: Vulnerable Versions 00:00:34
- Schmoo Con 2010: Gueststealer Part1 00:01:08
- Schmoo Con 2010: Gueststealer Part2 00:00:31
- Schmoo Con 2010: Gueststealer Part3 00:00:20
- Chapter 07 Review 00:01:13
Chapter 08 - Hardening Your ESX Server
- Introduction 00:00:29
- Hardening Your ESX Server 00:00:35
- Section 1 - Virtual Machines 00:00:11
- Secure Virtual Machines as You Would Secure Physical Machines 00:01:28
- Disable Unnecessary or Superfluous Functions 00:01:49
- Take Advantage of Templates 00:00:58
- Prevent Virtual Machines from Taking Over Resources 00:01:59
- Isolate Virtual Machine Networks 00:00:49
- Example Network Architecture 00:02:30
- Arp Cache Poisoning 00:02:14
- VM Segmentation 00:01:01
- Minimize Use of the vSphere Console 00:00:59
- Virtual Machine Files and Settings 00:01:39
- Disable Copy and Paste Operations 00:01:08
- Limit Data Flow from the Virtual Machine to the Datastore Part1 00:00:59
- Limit Data Flow from the Virtual Machine to the Datastore Part2 00:00:52
- Limit Data Flow from the Virtual Machine to the Datastore Part3 00:01:38
- SetInfo Hazard Part1 00:01:00
- SetInfo Hazard Part2 00:01:12
- Do Not Use Nonpersistent Disks Part1 00:01:23
- Do Not Use Nonpersistent Disks Part2 00:02:43
- Ensure Unauthorized Devices are Not Connected 00:01:11
- Prevent UnAuthorized Removal or Connection of Devices 00:00:59
- Avoid Denial of Service Caused by Virtual Disk Modification Operations 00:01:17
- Specify the Guest Operating System Correctly 00:00:49
- Verify Proper File Permissions for Virtual Machine Files 00:02:16
- Demo - Security on your Virtual Machines 00:28:24
- Section 2 - Configuring the ESX/ESXi Host 00:00:21
- Configuring the Service Console in ESX 00:02:30
- Demo - Control VIC Access 00:07:10
- Demo - Service Console Administration 00:12:35
- Configure the Firewall for Maximum Security Part1 00:01:07
- Configure the Firewall for Maximum Security Part2 00:01:08
- Demo - Firewall Configuration 00:15:48
- Limit the Software and Services Running in the Service Console Part1 00:01:06
- Limit the Software and Services Running in the Service Console Part2 00:01:26
- Processes Running in SC 00:01:13
- Use vSphere Client & vCenter to Administer the Hosts Part1 00:02:05
- Use vSphere Client & vCenter to Administer the Hosts Part2 00:01:47
- Use a Directory Service for Authentication Part1 00:01:13
- Use a Directory Service for Authentication Part2 00:00:53
- Use a Directory Service for Authentication Part3 00:00:57
- Demo - AD Integration 00:17:54
- Strictly Control Root Privileges Part 1 00:01:24
- Strictly Control Root Privileges Part 2 00:01:27
- Strictly Control Root Privileges Part 3 00:02:32
- Control Access to Privileged Capabilities 00:02:33
- Demo - SSH Access and SUDO - Part 1 00:17:29
- Demo - SSH Access and SUDO - Part 2 00:18:22
- Demo - SSH Access and SUDO - Part 3 00:13:09
- Demo - SSH Access and SUDO - Part 4 00:12:50
- Establish a Password Policy for Local User Accounts 00:00:55
- ESX/Linux User Authentication 00:01:18
- Configuring ESX Authentication 00:01:30
- ESX Authentication Settings 00:01:50
- Reusing Passwords 00:01:54
- Configuring Password Complexity 00:03:32
- Do Not Manage the Service Console as a Linux Host 00:00:45
- Maintain Proper Logging 00:01:10
- ESX4 Log File Locations 00:01:51
- Maintain Proper Logging (cont.) 00:01:38
- ESX Log Files 00:01:17
- Establish and Maintain File System Integrity Part 1 00:01:18
- Establish and Maintain File System Integrity Part 2 00:01:58
- Secure the SNMP Configuration 00:01:11
- Protect Against the Root File System Filling Up 00:01:19
- Disable Automatic Mounting of USB Devices 00:01:23
- Isolate the Infrastructure-related Networks Part1 00:02:37
- Isolate the Infrastructure-related Networks Part2 00:01:31
- Isolate the Infrastructure-related Networks Part3 00:01:09
- VLAN1 00:01:12
- Configure Encryption for Communication Between Clients and ESX/ESXi 00:01:34
- Label Virtual Networks Clearly 00:01:20
- Do Not Create a Default Port Group 00:00:37
- Do Not Use Promiscuous Mode on Network Interfaces 00:00:56
- Protect Against MAC Address Spoofing Part1 00:01:15
- Protect Against MAC Address Spoofing Part2 00:01:37
- Secure the ESX/ESXi Host Console 00:01:05
- Chapter 08 Review 00:01:13
Chapter 09- Hardening Your ESXi Server
- Hardening Your ESXi Server 00:00:25
- Differences: VMware ESX vs. ESXi 00:02:59
- Differences: VMware ESX and ESXi 00:01:15
- Configuring Host-level Management in ESXi 00:00:24
- ESXi - Strictly Control Root Privileges 00:01:22
- Control Access to Privileged Capabilities ESXi Part1 00:00:54
- Control Access to Privileged Capabilities ESXi Part2 00:01:58
- Control Access to Privileged Capabilities ESXi Part3 00:00:49
- DCUI 00:00:49
- Control Access to Privileged Capabilities ESXi (cont.) 00:01:43
- Maintain Proper Logging - ESXi 00:01:04
- Establish and Maintain Configuration File Integrity ESXi 00:01:33
- Secure the SNMP Configuration ESXi 00:01:40
- Ensure Secure Access to CIM 00:00:56
- Audit or Disable Technical Support Mode 00:01:47
- Chapter 09 Review 00:00:22
Chapter 10 - Hardening Your vCenter Server
- Hardening Your vCenter Server 00:00:20
- VirtualCenter 00:01:03
- Set Up the Windows Host for Virtual Center with Proper Security 00:01:33
- Limit Network Connectivity to Virtual Center 00:01:07
- Use Proper Security Measures When Configuring the Database for Virtual Center 00:01:41
- Enable Full and Secure Use of Certificate-based Encryption 00:00:56
- Default Certificates 00:02:48
- Replacing Server‐Certificates 00:01:03
- vCenter Log Files and Rotation 00:00:52
- Collecting vCenter Log Files 00:00:50
- Use VirtualCenter Custom Roles 00:01:34
- Document and Monitor Changes to the Configuration 00:00:30
- VirtualCenter Add-on Components 00:01:22
- VMware Update Manager 00:01:37
- VMware Converter Enterprise Part1 00:01:02
- VMware Converter Enterprise Part2 00:01:03
- VMware Guided Consolidation 00:01:18
- General Considerations 00:01:14
- Client Components 00:00:39
- Verify the Integrity of VI Client 00:02:23
- Monitor the Usage of VI Client Instances 00:01:13
- Avoid the Use of Plain-Text Passwords 00:02:12
- vShield Zones Overview 00:01:31
- vShield VM Wall Features 00:01:03
- vShield VM Flow Features 00:01:04
- Demo - vShield Zones 00:55:45
- Chapter 10 Review 00:00:21
Chapter 11 - 3rd Party Mitigation Tools
- 3rd Party Mitigation Tools 00:00:29
- Virtualization: Greater Flexibility, Diminished Control 00:01:15
- Making Sense of the Virtualization Security Players 00:01:02
- 1K View of Players Part1 00:01:05
- 1K View of Players Part2 00:01:19
- 1K View of Players Part3 00:01:57
- 1K View of Players Part4 00:01:48
- 1K View of Players Part5 00:01:26
- 1K View of Players Part6 00:00:46
- In-depth Look - Authors Picks HyTrust Appliance 00:01:11
- HyTrust Appliance - Key Capabilities (cont.): Unified Access Control 00:00:57
- HyTrust Appliance - Key Capabilities (cont.): Policy Management 00:01:09
- HyTrust Appliance - Key Capabilities (cont.): Audit-quality Logging 00:01:02
- HyTrust Appliance - Key Capabilities (cont.): Hypervisor Hardening 00:00:56
- In-depth Look - Authors Picks Catbird 00:02:51
- Catbird - Policy-driven Security 00:00:57
- Catbird - Continuous Compliance 00:00:41
- What's Missing? 00:00:36
- Making Sense of It All 00:02:17
- Chapter 11 Review 00:00:34
- Course Closure 00:00:38