Dates:
Introduction to Cybersecurity Programme:
22 Jan, 24 Jan, 26 Jan 2024 | 9am-5.30pm | Online
Ethical Hacking and System Hardening:
26 Feb, 27 Feb, 28 Feb 2024 | 9am-5.30pm | Classroom Learning
Duration: 6 Days
Course Objectives
This programme is designed for those who need to grasp the foundations of cybersecurity, and subsequently plan and conduct vulnerability assessment and penetration testing.
The first course covers the foundations of cybersecurity, and explains important key cybersecurity concepts and basic techniques, including: cryptography, Public-Key Infrastructure (PKI), secure channel using TLS/SSL, network security protocols, access control in Operating Systems, secure programming, as well as Web security. It also illustrates the fundamentals of how systems can fail due to malicious attacks, and how they can subsequently be protected and hardened. Several cybersecurity tools are also used to demonstrate how relevant cybersecurity techniques can work in practice.
The second course is practice-oriented which demonstrates how cyberattacks can target hosts, networks, and web servers. It also demonstrates how the target systems can subsequently be hardened. With its hands-on approach, the course puts cybersecurity knowledge and concepts into practice by employing various offensive and defensive tools in attacking and defending systems, respectively.
At the end of the programme, the learner will be able to:
- Explain the CIA security requirements and recognise their breaches in recent security incidents
- Describe and apply key concepts and mechanisms of principal protection mechanisms in cybersecurity, such as encryption, authentication, and secure channel
- Identify the limitations of classical cryptographic schemes, and also recognize well-known attacks on vulnerable hosts, networks, and web servers
- Utilise some basic security tools (e.g., OpenSSL, Wireshark) and security-related Linux commands to perform encryption and network traffic analysis
- Pinpoint flaws in programs due to common insecure programming practices, and suggest improvements using more secure practices instead
- Explain ethical hacking’s objectives, stages, and available tools
- Utilise cybersecurity tools for footprinting and enumerating target systems
- Utilise cybersecurity tools for scanning for and exploiting vulnerabilities in target systems
- Utilise cybersecurity tools for performing post-exploitation steps on exploited systems
- Explain and apply possible counter measures against attacks
Job Role Readiness
It will prepare learners in the following job roles to perform their responsibilities more effectively/ It will prepare learners for the following job roles:
- Associate Security Analyst
- Penetration Tester
Programme Structure
Who Should Attend
Mid-career PMETs and anyone would like to take up the role as Associate Security Analyst / Penetration Tester / Cyber Incident Investigator.
Prerequisites
- Knowledge of basic computer programming, and preferably some experience in using Linux Operating System
- Basic Computer networking
What To Bring
Windows notebook equipped with Oracle VirtualBox software (available at https://www.virtualbox.org/).
Course Convener
(Click photo to view biography)
Dr Sufatrio
Dr Sufatrio
Dr Sufatrio is a Lecturer with the School of Computing (SoC) of the National University of Singapore (NUS). He obtained his M.Sc. and Ph.D. in Computer Science from SoC, NUS. Previously, he was a Scientist and Acting Lab Head of the Mobile Forensics & Security Lab, at the Cyber Security & Intelligence (CSI) Department, Institute for Infocomm Research (I2R), A*STAR. Prior to that, he was an Associate Scientist and then a Research Scientist with the Temasek Laboratories at the National University of Singapore (TL@NUS).
He is interested in many areas of computer security, and have published numerous papers on systems, network and mobile security.
Course Fees
Total Nett Programme Fee Payable, Including GST, after additional funding from the various funding schemes
GST shall apply at prevailing rates
Participants must fulfill at least 75% attendance and pass all assessment components to be eligible for SSG funding.
To enquire, email soc-ace@nus.edu.sg
To register, click Register
Course Codes:
Introduction to Cybersecurity Programme: TGS-2022012743 (Synchronous e-learning)
Ethical Hacking and System Hardening: TGS-2022012263 (Classroom Learning)