Cybersecurity Training and Awareness (EDU)

Description

The offered courses include both theoretical and practical parts. During the theoretical sessions, all the involved technological and functional aspects will be illustrated. In the practical sessions, attendees will be provided with tests (challenges and capture the flag competitions) to execute.

Such challenges consist of real-world applications and systems to be examined or hardened (depending on the course type). Every test will have a time limit according to its difficulty level. Finally, a participation certificate will be given to the students, attesting to their acquired abilities.

The topics of the courses provided by ISGroup deal with:

• Secure Coding, Web Application Code Review
• Web Application Penetration Testing
• Mobile Application Security Testing
• Network Hardening
• Hardening Linux, Windows, Solaris

Offensive

Offensive security courses concentrate on methods useful for subverting or violating systems and applications to take full control of the machine (the so-called "takeover"). In particular, what is already explained in the theoretical part will be discussed practically, showing meaningful examples of vulnerabilities in real applications.

The Offensive course offered by ISGroup guarantees training for highly qualified technicians who are actually able to examine system security and can possibly exploit existing vulnerabilities.

Defensive

Defensive security courses concentrate on methods useful for making systems and applications safe. In the theoretical part, concepts like systems hardening or safe code writing will be discussed, according to the kind of course.

In the practical part, some systems or vulnerable applications will be presented, and the participant will have to be able to make them safe or, as for the applications, to understand where the programming error has been committed. Examples will be taken directly from real vulnerabilities affecting well-known applications.

Available Courses

• Application Security for Architects

  The course focuses on the importance of application security, giving participants the skills and knowledge needed to integrate security practices effectively throughout the software development lifecycle.

• OWASP Top 10 Bootcamp

  The OWASP Top 10 Bootcamp is designed to increase employee and collaborator awareness of these threats.

• Security Awareness

  The course aims to increase employee and collaborator awareness, providing the knowledge and tools needed to defend against cyber threats.

• Software Security Requirements

  The Secure SDLC course is designed to address the growing threat of cyberattacks by improving developer awareness and preparedness.

• OWASP Top 10 Laboratory

  OWASP Top 10 Laboratory trains developers on the ten most common programming mistakes in web applications. The course is hands-on.

• Code Review

  The course strengthens participants' awareness of code review practices, giving them the skills and tools needed to identify and resolve vulnerabilities in code.

• REST Service Security

  The REST service security course gives participants an in-depth understanding of the threats and vulnerabilities specific to these services.

• Network Penetration Testing

  The course provides the knowledge needed to understand penetration testing practice, applied methodology, and the tools used.

• Cyber Risk Prevention

  This intensive course provides the knowledge and tools needed to prevent cyber risks and protect your company, data, and privacy.

• Ethical Hacking

  We address the constant evolution of the field, exploring new technologies and best practices to ensure data and system security.