CSEC212
Introduction to Cyber Security
Faculty
Sergey Gordeychik
CEO at CyberOK
Course length
Duration
Total hours
Credits
Language
Course type
Fee for single course
Fee for degree students
Skills you’ll learn
Overview
This is an introductory course on cybersecurity covering core domains required in day-by-day security practice. It focuses on network, host and application security and modern challenges such as APT and Critical Infrastructure Protection. The course provides both theoretical knowledge and practical experience.
Learning highlights
- Understand network, host and enterprise security basics
- Implement their own security design using built-in security tools as well as use existing tools for security hardening and incident detection.
- Configure hosts, detect and prevent common security threats.
Course outline
15 classes
Definitions, CIA triangle.
- Risk, Threats, Vulnerabilities, Attacks.
- Security controls.
- Predictive, Preventive, Detective and Corrective controls.
- Authorization, Authentication, Accounting.
- Formal security models.
Introduction to Cryptography.
- Physical security.
- Layered security (Defense in Depth).
- Symmetric-key algorithms.
- Public Key cryptography.
- Hash Functions.
Network security.
- Physical and MAC layer.
- Network sniffers and MITM attacks.
- Sniffer detection. MAC address security.
- ARP spoofing. VLAN Security. 802.1X.
Network and Transport layer.
- IP Address Spoofing and ICMP attacks.
- Fragmentation attacks. Session hijacking.
- Flood attacks. NAT. Firewalls and proxies.
- iptables Basics.
Application layer.
- DHCP and DNS attacks. Email security.
- SSL/TLS, SSH. Reverse shell. VPN basics.
- Intrusion detection and prevention. Snort. NG and Application Firewalls.
Windows Security.
- User management and access control.
- Data encryption.
- Network services.
- Network authentication.
- NTLM attacks.
- Security hardening.
Linux host security.
- Local System Security.
- Security hardening.
Application security.
- Web application basics.
- Server side and client side attacks.
- OWASP top 10.
Embedded/IOT security.
- Firmware security.
- Out of Band management.
- Network device security.
Security operations
- Red, Blue, Purple team.
- Threat modeling.
- Security Architecture and Engineering.
Enterprise infrastructure infrastructure.
- Policies and compliance.
- Security Awareness.
- PCI DSS. ISO 27001/27002.
- Common Criteria.
Security Assessment and Testing.
- Security assessment.
- Scanners.
- Pentest.
- Application Security Testing.
Forensic and threat hunting.
- Network and host forensic basics.
- Logs analysis.
- Traffic analysis.
- Behaviour analytics.
Targeted attacks and critical infrastructure.
- Telecom security.
- Banks and payment systems.
- Industrial control systems.
- Targeted attacks.
- Supply chain attacks.
Test
Test
Prerequisites
Understanding of basic computing concepts and how computers work.
Understanding of TCP/IP stack.
Basic admin experience with Linux and Windows.
Methodology
The course consists of on-site/online lectures, homework, weekly quizzes and a final exam, which are all counted towards the course grading.
Grading
Sergey Gordeychik is CEO and Co-Founder of CyberOK, a cybersecurity company delivering advanced services and research. He is also a Visiting Professor at Harbour.Space University (Barcelona, Spain), contributor of different social and educational initiatives. Previously, he was CIO at the Inception Institute of Artificial Intelligence (UAE), where he led AI-driven product development and secure infrastructure design. As Deputy CTO at Kaspersky Lab, he launched Security Intelligence Services and Managed Detection and Response solutions. Earlier, as CTO of Positive Technologies, he led development of award-winning enterprise security products and co-created Positive Hack Days (PHDays), the largest cybersecurity event in Eastern Europe.
Sergey is the author of two books and multiple scientific publications, with three patents in cybersecurity. He has created several training programs including "Critical Infrastructure Protection" and "Web Application Security Assessment." A regular speaker at top-tier conferences such as S4, CCC, CodeBlue, POC, and ZeroNights, Sergey holds CISSP, MCSE, MCT, CWNA, and was recognized as a Microsoft MVP in Enterprise Security R&D.
See full profileApply for this course
Introduction to Cyber Security
by Sergey Gordeychik
Total hours
45 Hours
Dates
Jun 14 - Jul 02, 2021
Fee for single course
€1500
Fee for degree students
€750
How to secure your spot
Complete the form below to kickstart your application
Schedule your Harbour.Space interview
If successful, get ready to join us on campus
FAQ
Will I receive a certificate after completion?
Yes. Upon completion of the course, you will receive a certificate signed by the director of the program your course belonged to.
Do I need a visa?
This depends on your case. Please check with the Spanish or Thai consulate in your country of residence about visa requirements. We will do our part to provide you with the necessary documents, such as the Certificate of Enrollment.
Can I get a discount?
Yes. The easiest way to enroll in a course at a discounted price is to register for multiple courses. Registering for multiple courses will reduce the cost per individual course. Please ask the Admissions Office for more information about the other kinds of discounts we offer and what you can do to receive one.