Cyber Crime - Protect

Curriculum

Core Concepts

Scripting

Automating operating system and network activities for the extraction and analysis of data from computing devices.

Information security management

Risk and threat and how these concepts inform policy in the modern enterprise regarding the protection of information stored in computing infrastructures.

Computer systems security

The security and resilience of computer systems, their vulnerability level and the exploitation opportunity they present to perpetrators.

Incident response and forensic readiness

Responding to incidents originating from the cyber-domain while adhering to digital forensic principles regarding data attributes.

Enumeration of network devices

Mapping out the logical incident scene, identifying internal and external network boundaries.

Linux security architecture

Kernel security modules and how they support ISM principles.

Windows security architecture

Windows security modules and how they support ISM principles .

Security audit

Systematic evaluation of the security of an enterprise environment by measuring how well it conforms to a set of established criteria.

Performance and practice

Perform a security audit of an information infrastructure.

Example Terms, Techniques and Technologies

CIA, Bell-LaPadula, risk and threat

Information security models for access controls as part of a defence in depth strategy. Risk and threat management of informational infrastructures.

Foot printing, port scanning and enumeration of computer systems

Identifying and assessing vulnerability levels of computing devices.

Incident response and readiness, network monitoring, infrastructure auditing

Establish capability in the business environment for securely gathering legally admissible evidence, establish policy for secure storage and handling of potential evidence, ensure monitoring and auditing is targeted to detect and deter major incidents.

Advanced network security

Understanding Firewalls, IDS, IPS, Netflow, Wireshark data captures.

Learning Objectives

Knowledge and understanding

• Networking topologies and digital devices how they interconnect at the different OSI levels and be able to identify and secure vulnerabilities
• Concepts of deterrence, detection, protection and reaction to access inform IR&FR policy

Performance and practice

• Work effectively with others in undertaking complex tasks for identifying network topologies and digital devices