This introductory course is the fastest way to get up to speed in information security. Written and taught by battle-scarred security veterans, this entry-level course covers a broad spectrum of security topics and is liberally sprinkled with real life examples. A balanced mix of technical and managerial issues makes this course appealing to attendees who need to understand the salient facets of information security basics and the basics of risk management.
Who Should Attend
- Cybersecurity professionals
Course Objectives
- Communicate with confidence regarding information security topics, terms, and concepts
- Understand and apply the Principles of Least Privilege
- Understand and apply the Confidentiality, Integrity, and Availability (CIA) for prioritization of critical security resources
- Build better passwords that are more secure while also being easier to remember and type
- Grasp basic cryptographic principles, processes, procedures, and applications
- Understand how a computer works
- Understand computer network basics
- Have a fundamental grasp of any number of technical acronyms: TCP/IP, IP, TCP, UDP, MAC, ARP, NAT, ICMP, and DNS, and the list goes on.
- Utilize built-in Windows tools to see your network settings
- Recognize and be able to discuss various security technologies, including anti-malware, firewalls, intrusion detection systems, sniffers, ethical hacking, active defense, and threat hunting.
- Understand wireless technologies including WiFi, Bluetooth, mobile phones and the Internet of Things (IoT)
- Explain a variety of frequent attacks such as social engineering, drive-by downloads, watering hole attacks, lateral movement, and other attacks
- Understand different types of malware
- Understand browser security and the privacy issues associated with web browsing
- Explain system hardening
- Discuss system patching
- Understand virtual machines and cloud computing
- Understand backups and create a backup plan for your personal life that virtually guarantees you never have to pay ransom to access your data
Course Outline
- Security's Foundation
- Learn the fundamentals
- SEC301 starts by instilling familiarity with core security terms and principles
- Understand the Principle of Least Privilege and why it drives all security decisions
- Know about the Confidentiality, Integrity, and Availability (CIA) method of prioritizing your security program
- Understand the fundamentals of risk management, security policy, and authentication/authorization/accountability (AAA)
- Lab: Introducing the lab environment
- Lab: Building Better
- Computer Function and Networking
- Basic knowledge of how they work
- To work in cyber security, you have to understand the valid functions to understand the potential for invalid misuse
- Cover the difference between the hard drive and Random Access Memory (RAM)
- Compare, and contrast the Transmission Control Protocol (TCP)
- User Datagram Protocol (UDP)
- Dynamic Host Control Protocol (DHCP)
- Domain Name System (DNS)
- Network Address Translation (NAT)
- Lab: Computer Number Conversions
- Lab: Networking
- An Introduction to Cryptography
- Explain what steganography is
- Covered the "work factor" - the length of time necessary to break cryptography
- Covered hashing, symmetric & asymmetric cryptography and how each works
- Covered email encryption, secure remote administration, secure file transfer
- Lab: Crypto by Hand
- Lab: Visual Crypto
- Cyber Security Technologies- Part- 1
- Compare and contrast the security models of Apple's iPhone and Google's Android phones
- What is ransomware, and what is Cryptojacking
- What is a virus versus a worm or a trojan horse
- Covered both anti-malware and host firewalls that try to counter these problems
- Lab: Configure a Wireless Access Point (A.K.A. Wireless Router)
- Lab: Run the anti-malware scanner "Malwarebytes"
- Cyber Security Technologies- Part- 2
- Discussion of Cyber Security Technologies
- Talk about the browser and Web security, and the difficulties of securing the web environment
- Lab: Firewall Configuration with Firewall Builder
This course is available for "remote" learning and will be available to anyone with access to an internet device with a microphone (this includes most models of computers, tablets). Classes will take place with a "Live" instructor at the date/times listed below.
Upon registration, the instructor will send along additional information about how to log-on and participate in the class.