Sector-specific

IT Security

Cybersecurity

100 h

Introduction

Thanks to this Course in IT Security You will explore in depth the most important aspects of information security in digital environments. Given that it is essential nowadays to protect data in sensitive sectors such as hospitals and banks, this course will enable you to apply the key principles necessary for protect information. Emphasis will be placed on physical and network security, including cryptography and the implementation of IDS/IPS systems y SIEM, which are the most widely used systems for managing and preventing intrusions into a computer system, with the aim of mitigating the cyber threats. What’s more, you’ll be supported by a team of highly qualified lecturers who specialise in the subject.

Objectives

Understanding the the importance of safety across all levels of communication.
Master the fundamental concepts of the cryptography and its practical applications.
To develop the ability to implement and manage an infrastructure for public key (PKI).
Identifying and preventing intrusions using IDS/IPS systems.
Set up and maintain IDS/IPS systems for continuous protection.
To know the SIEM systems and its role in event and records management.
Assess and select suitable SIEM solutions for the requirements of specific safety measures.

TEACHING UNIT 1. SECURE COMMUNICATIONS: SECURITY BY LEVEL

1. Physical Security
2. Link-level security
3. Network-level security
4. Transport-level security
5. Application-Level Security

TEACHING UNIT 2. CRYPTOGRAPHY

1. Historical background and objectives of cryptography
2. Information theory
3. Security properties that can be controlled through the use of cryptography
4. Private-key or symmetric cryptography
5. Public-key or asymmetric cryptography
6. The most commonly used cryptographic algorithms
7. Hash functions and the criteria for their use
8. Key exchange protocols
9. Encryption tools

TEACHING UNIT 3. IMPLEMENTATION OF A PUBLIC KEY INFRASTRUCTURE (PKI)

1. Identification of the components of a PKI and their relationship models
2. Certification Authority and its components
3. Certificate Policy and Statement of Certification Practices (CPS)
4. Certificate Revocation List (CRL)
5. How certificate signing requests (CSRs) work
6. Privilege Management Infrastructures (PMI)
7. Attribute certificate fields
8. Applications that rely on the existence of a PKI

TEACHING UNIT 4. INTRUSION DETECTION AND PREVENTION SYSTEMS (IDS/IPS)
1. General concepts of incident management, intrusion detection and prevention
2. Identification and characterisation of system operational data
3. The most common IDS architectures
4. List of the different types of IDS/IPS by location and functionality
5. Security criteria for determining the location of IDS/IPS systems

TEACHING UNIT 5. IMPLEMENTATION AND DEPLOYMENT OF IDS/IPS SYSTEMS

1. Preliminary analysis
2. Defining policies for blocking intrusion attempts in IDS/IPS systems
3. Analysis of events recorded by the IDS/IPS
4. List of IDS/IPS audit logs
5. Establishment of the required levels of updating, monitoring and testing of the IDS/IPS

TEACHING UNIT 6. INTRODUCTION AND PRELIMINARY CONCEPTS: SIEM SYSTEMS

1. What is a SIEM?
2. The evolution of SIEM systems: SIM, SEM and SIEM
3. Architecture of a SIEM system

TEACHING UNIT 7. CAPABILITIES OF SIEM SYSTEMS

1. Problems to be resolved
2. Log management
3. IT Regulations
4. Correlation of events
5. SIEM solutions on the market

IT Security

Introduction

Objectives

Table of Contents

More related courses

Malware and malicious code

Masterclass – The Russia–Ukraine Conflict: History’s First Cyberwar

Digital identity, reputation, fake news, social media analytics and docking