Duration 5 Days 30 CPD hours This course is intended for This course is targeted towards the information technology (IT) professional that has a minimum 1 year IT Security and Networking experience. This course would be ideal for Information System Owners, Security Officers, Ethical Hackers, Information Owners, Penetration Testers, System Owner and Managers as well as Cyber Security Engineers. Overview Upon completion, the Certified Professional Ethical Hacker candidate will be able to competently take the CPEH exam. The CPEH certification training enables students to understand the importance of vulnerability assessments and how to implement counter response along with preventative measures when it comes to a network hack. Security Fundamentals Overview The Growth of Environments and Security Our Motivation? The Goal: Protecting Information! CIA Triad in Detail Approach Security Holistically Security Definitions Definitions Relationships Method: Ping The TCP/IP Stack Which Services Use Which Ports? TCP 3-Way Handshake TCP Flags Malware Types of Malware Types of Malware Cont... Types of Viruses More Malware: Spyware Trojan Horses Back Doors DoS DDoS Packet Sniffers Passive Sniffing Active Sniffing Firewalls, IDS and IPS Firewall ? First Line of Defense IDS ? Second Line of Defense IPS ? Last Line of Defense? Firewalls Firewall Types: (1) Packet Filtering Firewall Types: (2) Proxy Firewalls Firewall Types ? Circuit-Level Proxy Firewall Type of Circuit- Level Proxy ? SOCKS Firewall Types ? Application-Layer Proxy Firewall Types: (3) Stateful Firewall Types: (4) Dynamic Packet-Filtering Firewall Types: (5) Kernel Proxies Firewall Placement Firewall Architecture Types ? Screened Host Multi- or Dual-Homed Screened Subnet Wi-Fi Network Types Wi-Fi Network Types Widely Deployed Standards Standards Comparison 802.11n - MIMO Overview of Database Server Review Access Controls Overview Role of Access Control Definitions More Definitions Categories of Access Controls Physical Controls Logical Controls ?Soft? Controls Security Roles Steps to Granting Access Access Criteria Physical Access Control Mechanisms Biometric System Types Synchronous Token Asynchronous Token Device Memory Cards Smart Card Cryptographic Keys Logical Access Controls OS Access Controls Linux Access Controls Accounts and Groups Password & Shadow File Formats Accounts and Groups Linux and UNIX Permissions Set UID Programs Trust Relationships Review Protocols Protocols Overview OSI ? Application Layer OSI ? Presentation Layer OSI ? Session Layer Transport Layer OSI ? Network Layer OSI ? Data Link OSI ? Physical Layer Protocols at Each OSI Model Layer TCP/IP Suite Port and Protocol Relationship Conceptual Use of Ports UDP versus TCP Protocols ? ARP Protocols ? ICMP Network Service ? DNS SSH Security Protocol SSH Protocols ? SNMP Protocols ? SMTP Packet Sniffers Example Packet Sniffers Review Cryptography Overview Introduction Encryption Cryptographic Definitions Encryption Algorithm Implementation Symmetric Encryption Symmetric Downfalls Symmetric Algorithms Crack Times Asymmetric Encryption Public Key Cryptography Advantages Asymmetric Algorithm Disadvantages Asymmetric Algorithm Examples Key Exchange Symmetric versus Asymmetric Using the Algorithm Types Together Instructor Demonstration Hashing Common Hash Algorithms Birthday Attack Example of a Birthday Attack Generic Hash Demo Instructor Demonstration Security Issues in Hashing Hash Collisions MD5 Collision Creates Rogue Certificate Authority Hybrid Encryption Digital Signatures SSL/TLS SSL Connection Setup SSL Hybrid Encryption SSH IPSec - Network Layer Protection IPSec IPSec Public Key Infrastructure Quantum Cryptography Attack Vectors Network Attacks More Attacks (Cryptanalysis) Review Why Vulnerability Assessments? Overview What is a Vulnerability Assessment? Vulnerability Assessment Benefits of a Vulnerability Assessment What are Vulnerabilities? Security Vulnerability Life Cycle Compliance and Project Scoping The Project Overview Statement Project Overview Statement Assessing Current Network Concerns Vulnerabilities in Networks More Concerns Network Vulnerability Assessment Methodology Network Vulnerability Assessment Methodology Phase I: Data Collection Phase II: Interviews, Information Reviews, and Hands-On Investigation Phase III: Analysis Analysis cont. Risk Management Why Is Risk Management Difficult? Risk Analysis Objectives Putting Together the Team and Components What Is the Value of an Asset? Examples of Some Vulnerabilities that Are Not Always Obvious Categorizing Risks Some Examples of Types of Losses Different Approaches to Analysis Who Uses What? Qualitative Analysis Steps Quantitative Analysis ALE Values Uses ALE Example ARO Values and Their Meaning ALE Calculation Can a Purely Quantitative Analysis Be Accomplished? Comparing Cost and Benefit Countermeasure Criteria Calculating Cost/Benefit Cost of a Countermeasure Can You Get Rid of All Risk? Management?s Response to Identified Risks Liability of Actions Policy Review (Top-Down) Methodology Definitions Policy Types Policies with Different Goals Industry Best Practice Standards Components that Support the Security Policy Policy Contents When Critiquing a Policy Technical (Bottom-Up) Methodology Review Vulnerability Tools of the Trade Vulnerability Scanners Nessus SAINT ? Sample Report Tool: Retina Qualys Guard http://www.qualys.com/products/overview/ Tool: LANguard Microsoft Baseline Analyzer MBSA Scan Report Dealing with Assessment Results Patch Management Options Review Output Analysis and Reports Overview Staying Abreast: Security Alerts Vulnerability Research Sites Nessus SAINT SAINT Reports GFI Languard GFI Reports MBSA MBSA Reports Review Reconnaissance, Enumeration & Scanning Reconnaissance Overview Step One in the Hacking ?Life-Cycle? What Information is Gathered by the Hacker? Passive vs. Active Reconnaissance Footprinting Defined Social Access Social Engineering Techniques Social Networking Sites People Search Engines Internet Archive: The WayBack Machine Footprinting Tools Overview Maltego GUI Johnny.Ihackstuff.com Google (cont.) Domain Name Registration WHOIS Output DNS Databases Using Nslookup Traceroute Operation Web Server Info Tool: Netcraft Introduction to Port Scanning Which Services use Which Ports? Port Scan Tips Port Scans Shou
An 8 week coaching programme like no other. Discover how to build your business, free your time all the while making more money and doing more of the stuff you love. Stop not-earning when you're off on holiday, off for the weekend or off sick... Create a business that works for you, even when you're not there.
Duration 2 Days 12 CPD hours This course is intended for The intended audience for this comprehensive course on Information Assurance and STIGs includes professionals with roles such as: IT professionals - System administrators, network engineers, and security analysts who are responsible for maintaining and securing IT infrastructure and web applications. Developers - Software engineers and web developers who design, implement, and maintain web applications, and need to integrate security best practices throughout the development process. Project teams - Cross-functional teams that collaborate on application development projects, including members from development, testing, and deployment teams. Technical leads - Senior software engineers or architects who oversee technical aspects of projects and ensure the implementation of secure design and coding practices. Project managers - Professionals responsible for planning, executing, and closing projects, ensuring that security requirements are met throughout the project lifecycle. Overview Working in an interactive learning environment, guided by our application security expert, you'll explore: The concepts and terminology behind defensive coding Threat Modeling as a tool in identifying software vulnerabilities based on realistic threats against meaningful assets The entire spectrum of threats and attacks that take place against software applications in today's world The role that static code reviews and dynamic application testing to uncover vulnerabilities in applications The vulnerabilities of programming languages as well as how to harden installations The basics of Cryptography and Encryption and where they fit in the overall security picture The requirements and best practices for program management as specified in the STIGS The processes and measures associated with the Secure Software Development (SSD) The basics of security testing and planning Understand the concepts and terminology behind defensive coding Understand Threat Modeling as a tool in identifying software vulnerabilities based on realistic threats against meaningful assets Learn the entire spectrum of threats and attacks that take place against software applications in today's world Discuss the role that static code reviews and dynamic application testing to uncover vulnerabilities in applications Understand the vulnerabilities of programming language as well as how to harden installations Understand the basics of Cryptography and Encryption and where they fit in the overall security picture Understand the fundamentals of XML Digital Signature and XML Encryption as well as how they are used within the web services arena Understand the requirements and best practices for program management as specified in the STIGS Understand the processes and measures associated with the Secure Software Development (SSD) Understand the basics of security testing and planning The Information Assurance (STIG) Overview is a comprehensive two-day course that delves into the realm of Information Assurance, empowering you to enhance your cybersecurity skills, understand the essentials of STIGs, and discover cutting-edge web application security practices. This immersive experience is tailored for IT professionals, developers, project teams, technical leads, project managers, testing/QA personnel, and other key stakeholders who seek to expand their knowledge and expertise in the evolving cybersecurity landscape. The course focuses on the intricacies of best practices for design, implementation, and deployment, inspired by the diverse and powerful STIGs, ultimately helping participants become more proficient in application security.The first half of the course covers the foundations of DISA's Security Technical Implementation Guides (STIGs) and learn the ethical approach to bug hunting, while exploring the language of cybersecurity and dissecting real-life case studies. Our expert instrtors will guide you through the importance of respecting privacy, working with bug bounty programs, and avoiding common mistakes in the field.The next half delves into the core principles of information security and application protection, as you learn how to identify and mitigate authentication failures, SQL injections, and cryptographic vulnerabilities. You?ll gain experience with STIG walkthroughs and discover the crucial steps for securing web applications.Throughout the course, you'll also explore the fundamentals of application security and development, including checklists, common practices, and secure development lifecycle (SDL) processes. You?ll learn from recent incidents and acquire actionable strategies to strengthen your project teams and IT organizations. You'll also have the opportunity to explore asset analysis and design review methodologies to ensure your organization is prepared to face future cybersecurity challenges. DISA's Security Technical Implementation Guides (STIGs) The motivations behind STIGs Requirements that the various software development roles must meet Implementing STIG requirements and guidelines Why Hunt Bugs? The Language of CyberSecurity The Changing Cybersecurity Landscape AppSec Dissection of SolarWinds The Human Perimeter Interpreting the 2021 Verizon Data Breach Investigation Report First Axiom in Web Application Security Analysis First Axiom in Addressing ALL Security Concerns Lab: Case Study in Failure Safe and Appropriate Bug Hunting/Hacking Working Ethically Respecting Privacy Bug/Defect Notification Bug Bounty Programs Bug Hunting Mistakes to Avoid Principles of Information Security Secuity Is a Lifecycle Issue Minimize Attack Surface Area Layers of Defense: Tenacious D Compartmentalize Consider All Application States Do NOT Trust the Untrusted Identification and Authentication Failures Applicable STIGs Quality and Protection of Authentication Data Proper hashing of passwords Handling Passwords on Server Side Session Management HttpOnly and Security Headers Lab: STIG Walk-Throughs Injection Applicable STIGs Injection Flaws SQL Injection Attacks Evolve Drill Down on Stored Procedures Other Forms of Server-Side Injection Minimizing Injection Flaws Client-side Injection: XSS Persistent, Reflective, and DOM-Based XSS Best Practices for Untrusted Data Lab: STIG Walk-Throughs Applications: What Next? Common Vulnerabilities and Exposures CWE/SANS Top 25 Most Dangerous SW Errors Strength Training: Project Teams/Developers Strength Training: IT Organizations Cryptographic Failures Applicable STIGs Identifying Protection Needs Evolving Privacy Considerations Options for Protecting Data Transport/Message Level Security Weak Cryptographic Processing Keys and Key Management Threats of Quantum Computing Steal Now, Crack Later Threat Lab: STIG Walk-Throughs Application Security and Development Checklists Checklist Overview, Conventions, and Best Practices Leveraging Common AppSec Practices and Control Actionable Application Security Additional Tools for the Toolbox Strength Training: Project Teams/Developers Strength Training: IT Organizations Lab: Recent Incidents SDL Overview Attack Phases: Offensive Actions and Defensive Controls Secure Software Development Processes Shifting Left Actionable Items Moving Forward Lab: Design Study Review Asset Analysis Asset Analysis Process Types of Application-Related Assets Adding Risk Escalators Discovery and Recon Design Review Asset Inventory and Design Assets, Dataflows, and Trust Boundaries Risk Escalators in Designs Risk Mitigation Options
Course Overview This comprehensive course in Digital Marketing offers an in-depth exploration of the strategies that define modern online success. From brand positioning and content creation to platform-specific approaches across Facebook, Instagram, and YouTube, this guide covers every key area to help learners thrive in a fast-evolving marketing landscape. You will examine essential digital concepts such as SEO, mobile outreach, and email campaign structuring, all while gaining the strategic mindset needed to implement effective marketing solutions. By the end of this course, learners will have a strong understanding of how to structure marketing plans, reach targeted audiences through various channels, and evaluate digital performance metrics. This course is ideal for those looking to enhance their marketing knowledge, keep up with digital trends, and align themselves with career opportunities in a digitally driven economy. Course Description The course delves into the strategic core of digital marketing, equipping learners with the knowledge to understand consumer behaviour, design impactful campaigns, and master various online platforms. You will begin with the fundamentals before advancing through growth hacking techniques, customer journey mapping, and platform-specific strategies across Facebook, Instagram, Twitter, and more. Topics such as SEO, email communication, content strategy, and mobile marketing are presented with clarity, ensuring learners develop a thorough grasp of marketing logic and campaign planning. This course also explores how to build audience engagement and interpret campaign performance using reliable frameworks. Whether you're aiming to support a brand, manage digital channels, or enhance visibility through marketing strategies, this course offers a structured foundation that meets the demands of today’s digital environment. Course Modules Module 01: Fundamentals of Digital Marketing Module 02: Growth Hacking Module 03: Customer Journey Module 04: Content Marketing Module 05: SEO Module 06: E-Mail Marketing Module 07: Facebook Marketing Module 08: Instagram Marketing Module 09: Twitter Marketing Module 10: YouTube Marketing Module 11: Mobile Marketing (See full curriculum) Who is this course for? Individuals seeking to understand digital marketing strategy from the ground up. Professionals aiming to expand their expertise in multi-channel marketing. Beginners with an interest in online promotion, brand development, or digital outreach. Entrepreneurs, freelancers, and content creators wanting to enhance their marketing knowledge. Career Path Digital Marketing Executive Social Media Manager SEO Specialist Content Marketing Strategist Email Marketing Coordinator Digital Campaign Analyst Brand Engagement Consultant Online Marketing Assistant
Course Overview The Social Media Marketing Level 5 course provides a comprehensive exploration of the modern digital landscape, equipping learners with the expertise to design, implement, and manage strategic marketing campaigns across major social platforms. Through a structured learning journey, this course offers in-depth insights into the latest marketing techniques, consumer behaviour analysis, and brand growth strategies. Learners will develop a strong understanding of how to engage audiences, optimise content, and leverage data-driven approaches to drive results. By the end of the course, participants will be equipped to contribute to business success through innovative marketing initiatives, whether for personal ventures or organisational objectives. Designed for individuals at various stages of their career, this programme empowers learners to stay ahead in a competitive market by mastering dynamic digital tools and techniques essential for success in the ever-evolving world of social media marketing. Course Description Throughout the Social Media Marketing Level 5 course, learners will delve into a broad range of topics crucial to achieving success in the digital marketing arena. Starting with the fundamentals of digital marketing, the programme moves through growth hacking strategies, customer journey mapping, content development, and search engine optimisation. Dedicated modules explore platform-specific marketing techniques for Facebook, Instagram, Twitter, and YouTube, as well as mobile and e-mail marketing approaches. The course fosters the development of strategic thinking, analytical capabilities, and content management skills essential for enhancing brand visibility and audience engagement. Learners will also explore how to optimise marketing efforts based on key performance metrics and consumer insights. With a curriculum tailored to current industry standards, this course prepares individuals to navigate the complex social media landscape confidently and innovatively, ensuring they are well-positioned for career advancement and professional growth in the digital marketing sector. Course Modules Module 01: Fundamentals of Digital Marketing Module 02: Growth Hacking Module 03: Customer Journey Module 04: Content Marketing Module 05: SEO Module 06: E-Mail Marketing Module 07: Facebook Marketing Module 08: Instagram Marketing Module 09: Twitter Marketing Module 10: Youtube Marketing Module 11: Mobile Marketing (See full curriculum) Who is this course for? Individuals seeking to build a strong foundation in digital and social media marketing. Professionals aiming to enhance their marketing strategies and career progression. Beginners with an interest in exploring the world of digital branding and communication. Entrepreneurs and business owners wanting to boost their online presence. Marketing students and graduates looking to deepen their practical knowledge of social media trends. Career Path Social Media Manager Digital Marketing Executive Content Strategist SEO Specialist Brand Communications Officer Online Community Manager E-Commerce Marketing Coordinator Digital Advertising Specialist Influencer Marketing Executive Marketing Consultant
Course Overview This comprehensive course on Coding (HTML, C++, Python, JavaScript & IT) offers a structured introduction to the world of coding and information technology. It covers an expansive array of programming languages and technologies, including HTML, CSS, JavaScript, C++, Python, and PHP, alongside key IT concepts such as cybersecurity, cloud computing, and network security. Learners will develop a deep understanding of programming logic, software development, web development, and essential IT operations. Whether you're aiming to explore programming for the first time or expand your technical skill set, this course equips you with the knowledge required to navigate modern computing systems and coding environments. Upon completion, learners will be better prepared to pursue roles in web development, programming, system administration, and IT support across various industries. Course Description This course delivers an in-depth exploration of both coding and IT fundamentals, offering a diverse curriculum that spans core programming languages such as HTML, C++, Python, JavaScript, and R. It extends into cybersecurity, Linux scripting, ethical hacking, and computer networking—creating a well-rounded foundation for digital fluency. Learners are introduced to the design and development of web applications, front-end and back-end technologies, and essential tools such as GitHub, Heroku, and MySQL. The course further includes IT administration, encryption methods, cloud infrastructure, and system troubleshooting, ensuring coverage of key concepts necessary in today’s tech-driven world. With a focus on conceptual clarity and structured progression, learners will gain valuable knowledge aligned with current industry needs and expectations. Course Modules Module 01: Introduction to Coding With HTML, CSS, & Javascript Module 02: C++ Development: The Complete Coding Guide Module 03: Python Programming: Beginner To Expert Module 04: Learn Ethical Hacking From A-Z: Beginner To Expert Module 05: Bash Scripting, Linux and Shell Programming Module 06: JavaScript Project – Game Development with JS Module 07: R Programming for Data Science Module 08: Secure Programming of Web Applications Module 09: Advanced Diploma in PHP Web Development with MySQL, GitHub & Heroku Module 10: The Complete Front-End Web Development Course! Module 11: The Complete MySQL Server from Scratch: Bootcamp Module 12: Cyber Security Awareness Training Module 13: Cloud Computing / CompTIA Cloud+ (CV0-002) Module 14: CompTIA A+ (220-1001) Module 15: Building Your Own Computer Module 16: Computer Networks Security from Scratch to Advanced Module 17: IT Administration and Networking Module 18: Encryption Module 19: Advance Windows 10 Troubleshooting for IT HelpDesk Module 20: Microsoft Excel Complete Course (See full curriculum) Who is this course for? Individuals seeking to understand programming languages and IT fundamentals. Professionals aiming to transition into coding or expand their IT knowledge. Beginners with an interest in computing, programming, or digital technologies. Students or career changers preparing for roles in the tech sector. Career Path Web Developer Software Programmer IT Support Technician Network Administrator Cybersecurity Analyst Cloud Computing Technician Data Analyst Systems Engineer Helpdesk Specialist IT Consultant