Executive Cyber Security Awareness Training Course

This instructor-led, live training in South Korea (online or onsite) is designed for system administrators who want to use 389 Directory Server to configure and manage LDAP-based authentication and authorization.

Upon completion of this training, participants will be able to:

• Install and configure 389 Directory Server.
• Understand the features and architecture of 389 Directory Server.
• Learn how to configure the directory server using the web console and CLI.
• Set up and monitor replication for high availability and load balancing.
• Manage LDAP authentication using SSSD for faster performance.
• Integrate 389 Directory Server with Microsoft Active Directory.

This instructor-led live training in South Korea, offered online or onsite, targets system administrators seeking to utilize Microsoft Active Directory for managing and securing data access.

By the conclusion of this course, participants will be capable of:

• Setting up and configuring Active Directory.
• Creating domains and defining access rights for users and devices.
• Managing users and machines through Group Policies.
• Controlling file server access.
• Establishing a Certificate Service and managing certificates.
• Implementing and managing services such as encryption, certificates, and authentication.

Building a secure networked application presents challenges, even for developers experienced with cryptographic primitives like encryption and digital signatures. To help participants grasp the role and application of these tools, this course first establishes a solid foundation in the core requirements of secure communication: secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also highlights common threats to these principles alongside practical solutions.

Since cryptography is central to network security, the curriculum covers essential algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on complex mathematics, the content takes a developer-focused approach, illustrating typical use cases and practical considerations such as public key infrastructures (PKI). Additionally, major security protocols are introduced, with a detailed examination of widely used families like IPsec and SSL/TLS.

The course also examines common cryptographic vulnerabilities associated with specific algorithms and protocols, including BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each issue, practical implications and consequences are explained without delving into deep mathematical theory.

Given that XML technology is vital for data exchange in networked applications, the final section addresses XML security. This covers XML usage in web services and SOAP messages, along with protection mechanisms like XML Signature and XML Encryption. It also discusses weaknesses in these measures and XML-specific vulnerabilities such as XML injection, XML External Entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Grasp the fundamental concepts of security, IT security, and secure coding
• Comprehend the requirements for secure communication
• Learn about network attacks and defenses across various OSI layers
• Develop a practical understanding of cryptography
• Understand essential security protocols
• Recognize recent attacks targeting cryptosystems
• Gain knowledge of recent related vulnerabilities
• Understand the security concepts underlying web services
• Access resources and further readings on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ code demands rigorous defenses against malicious exploitation, memory corruption, and input validation bypasses. This program explores vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will apply secure coding guidelines, utilize static analysis tools, and employ defensive programming techniques to eliminate weaknesses, enforce input sanitization, and deliver hardened software that is resilient against cyberattacks.

Even seasoned Java developers do not necessarily master every security service provided by Java, nor are they always fully aware of the various vulnerabilities pertinent to Java-based web applications.

In addition to introducing the security components of the Standard Java Edition, this course addresses security issues within Java Enterprise Edition (JEE) and web services. Before diving into specific services, the course covers the foundations of cryptography and secure communication. Through various exercises, participants will explore declarative and programmatic security techniques in JEE, as well as both transport-layer and end-to-end security for web services. Practical exercises allow participants to experiment with the discussed APIs and tools firsthand.

The course also examines and explains the most common and severe programming flaws and web-related vulnerabilities associated with the Java language and platform. Beyond typical bugs made by Java programmers, the security vulnerabilities covered include both language-specific issues and problems arising from the runtime environment. All vulnerabilities and corresponding attacks are demonstrated through accessible exercises, followed by recommended coding guidelines and mitigation strategies.

Participants attending this course will

• Understand the fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to avoid them
• Understand the security concepts of web services
• Learn to utilize various security features of the Java development environment
• Gain a practical understanding of cryptography
• Understand the security solutions of Java EE
• Learn about typical coding mistakes and how to avoid them
• Receive information on some recent vulnerabilities in the Java framework
• Acquire practical knowledge in using security testing tools
• Obtain resources and further readings on secure coding practices

Audience

Developers

Today, a variety of programming languages can compile code for the .NET and ASP.NET frameworks. While this environment offers robust security development capabilities, developers must understand how to apply architectural and coding-level techniques to implement the desired security features, prevent vulnerabilities, and limit their potential exploitation.

This course aims to teach developers through extensive hands-on exercises how to prevent untrusted code from executing privileged actions, secure resources via strong authentication and authorization, facilitate remote procedure calls, manage sessions, and introduce various implementations for specific functionalities.

The introduction to various vulnerabilities begins by examining typical programming errors associated with .NET. The discussion on ASP.NET vulnerabilities also covers diverse environment settings and their impacts. Furthermore, the topic of ASP.NET-specific vulnerabilities addresses not only general web application security challenges but also specialized issues and attack methods, such as ViewState attacks and string termination attacks.

Participants attending this course will

• Understand the fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to avoid them
• Learn to utilize various security features within the .NET development environment
• Gain practical knowledge in using security testing tools
• Identify typical coding mistakes and learn how to avoid them
• Receive information on recent vulnerabilities in .NET and ASP.NET
• Access sources and further reading materials on secure coding practices

Audience

Developers

This course equips PHP developers with the critical skills needed to build applications that are resilient against modern internet-based threats. It explores web vulnerabilities through practical PHP examples, moving beyond the OWASP Top Ten to address a wide range of issues including various injection attacks, script injections, session handling flaws, insecure direct object references, and file upload risks. PHP-specific vulnerabilities are categorized into standard types such as missing or improper input validation, inadequate error and exception handling, misuse of security features, and time- and state-related problems. For the latter, the course examines specific attack vectors like open_basedir circumvention, denial-of-service via magic floats, and hash table collision attacks. Participants will learn the essential techniques and functions required to mitigate these risks.

The curriculum places significant emphasis on client-side security, addressing vulnerabilities in JavaScript, Ajax, and HTML5. It introduces key PHP extensions for cryptography (such as hash, mcrypt, and OpenSSL) and input validation (including Ctype, ext/filter, and HTML Purifier). Best practices for hardening the environment are covered in the context of PHP configuration (php.ini), Apache settings, and general server security. The course also provides an overview of various security testing tools and techniques available to developers and testers, including security scanners, penetration testing methods, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the explanation of vulnerabilities and configuration strategies are reinforced with hands-on exercises. These practical sessions demonstrate the impact of successful attacks, illustrate how to implement mitigation techniques, and guide participants in using various extensions and tools effectively.

Learning Outcomes

• Grasp the fundamental concepts of security, IT security, and secure coding.
• Identify web vulnerabilities beyond the OWASP Top Ten and learn how to avoid them.
• Understand client-side vulnerabilities and adopt secure coding practices.
• Gain a practical understanding of cryptography principles.
• Learn to utilize various security features inherent to PHP.
• Recognize typical coding mistakes and understand how to prevent them.
• Stay informed about recent security issues affecting the PHP framework.
• Acquire practical skills in using security testing tools.
• Access resources and further reading materials on secure coding practices.

Target Audience

Software Developers

This comprehensive SDL core training provides an in-depth look at secure software design, development, and testing practices through the lens of the Microsoft Secure Development Lifecycle (SDL). The course offers a Level 100 overview of the fundamental building blocks of the SDL, followed by design techniques aimed at detecting and resolving flaws during the early stages of the development process.

Focusing on the development phase, the curriculum covers typical security-related programming bugs in both managed and native code. It presents attack vectors for the discussed vulnerabilities alongside corresponding mitigation techniques, all illustrated through hands-on exercises that offer participants engaging, practical hacking experiences. Following an introduction to various security testing methods, the course demonstrates the effectiveness of different testing tools. Participants will gain a deep understanding of how these tools operate by applying them to previously discussed vulnerable code through practical exercises.

Upon completion of this course, participants will:

Understand the core concepts of security, IT security, and secure coding

Gain familiarity with the essential steps of the Microsoft Secure Development Lifecycle

Acquire knowledge of secure design and development practices

Learn the principles of secure implementation

Understand security testing methodologies

• Access sources and further readings on secure coding practices

Target Audience

Developers, Managers

In this instructor-led, live course in South Korea, participants will learn how to formulate an effective security strategy to address the challenges of DevOps security.

The EC-Council Certified DevSecOps Engineer (ECDE) program is a practical course tailored to empower professionals with the expertise required to embed security measures throughout the DevOps lifecycle, facilitating secure software development from the initial planning phases through to deployment.

This instructor-led, live training session, available both online and onsite, targets intermediate-level software engineers and DevOps specialists aiming to incorporate security protocols into their CI/CD pipelines, thereby ensuring the delivery of compliant and secure code.

Upon completion of this training, participants will be equipped to:

• Grasp the core principles and best practices of DevSecOps.
• Secure all stages of the CI/CD pipeline through the utilization of automated tools.
• Apply secure coding standards and execute vulnerability assessments.
• Effectively prepare for the ECDE certification via practical labs and comprehensive reviews.

Course Format

• Engaging lectures and interactive discussions.
• Practical application of DevSecOps tools within simulated pipeline environments.
• Supervised exercises centered on secure development and deployment methodologies.

Customization Options

• To arrange a customized training session aligned with your team’s specific workflows or toolchains, please reach out to us.

This instructor-led live training in South Korea (online or onsite) is designed for system administrators who wish to use FreeIPA to centralize authentication, authorization, and account information for their organization's users, groups, and machines.

Upon completion of this training, participants will be able to:

• Install and configure FreeIPA.
• Manage Linux users and clients from a single centralized location.
• Utilize FreeIPA’s CLI, Web UI, and RPC interface to establish and manage permissions.
• Enable Single Sign-On (SSO) authentication across all systems, services, and applications.
• Integrate FreeIPA with Windows Active Directory.
• Backup, replicate, and migrate a FreeIPA server.

This instructor-led, live training in South Korea (online or onsite) is designed for system administrators who wish to utilize Okta for identity and access management.

By the end of this training, participants will be able to:

• Configure, integrate, and manage Okta.
• Integrate Okta into an existing application.
• Implement security measures using multi-factor authentication.

OpenLDAP is open-source software used to implement the Lightweight Directory Access Protocol (LDAP), which enables management and access to information directories. It is a popular directory server that can be used to store and share data about users, groups, network resources, and other network objects.