The course provides IT-specialists an introduction to smartphone security and forensics as well as a good technical overview of challenges and solutions in countering threats from mobile devices

CDMCS Module 2: Semantic Network Security Monitoring Course

The course will provide deep technical insights for cyber defenders into techniques modern malware uses to exploit vulnerabilities and to intrude into systems.

This course provides an introduction to digital forensics, including methodology, reporting and legal considerations. Major part of the course is hands-on investigations of Windows machines using free/open source tools.

Course Overview: This four-day unclassified course is intended for mid-level managers responsible for the protection of Critical Information Infrastructure. Students should be from NATO countries and be civilians of GS 13-15 equivalent or military officers at the O-4 to O-6 level. A maximum 30 students can be accommodated at the site reserved.

This intensive hands‐on course concentrates on a single solution from a number of important Cyber defence monitoring techniques and solutions. We focus only on rule‐based threat detection, more widely known as Intrusion Detection. We will use Suricata, an open‐source free software tool, to build network security monitoring for different scales, from SOHO/SME up to enterprise level.

This  training  focusses  on  infiltration  and  mitigation  of  botnets.  This  very  hands‐on  5‐day intermediate course introduces state‐of‐the‐art botnet concepts and teaches how the botnet threat can be countered. Since most modern botnets are designed as spyware, this course focusses on the detection of data‐exfiltration and modern IDS evasion techniques.

This 4‐day course provides an understanding of basic principles of web application security. Most of the times we will be focusing on penetration testing, although the course will also deal with prevention measures and advice for developers. 

IT Systems Attack and Defence is a practical 5‐day introductory course considering the methods and tools used by attackers to gain access to IT systems, and the potential countermeasures to cope with those attacks. 

This 5‐day course provides IT‐specialists with an introduction into smartphone security and forensics as well as a good technical overview of challenges and solutions in countering threats from mobile devices.

The course is targeted at technical IT staff who are used to working with IT in roles such as administrator, auditor and whose normal duties do not include forensic analysis. Experienced digital forensic staff doing forensics on a regular basis are not the target group and will receive only limited benefit from attending.   

The aim of this 3‐day course is to explain security issues of ICS/SCADA environments, and to provide students with the knowledge necessary to protect Programmable Logic Controllers (PLC) and industrial field devices. It offers hands‐on exercises for training as well as taught content.  

This  training  focusses  on  infiltration  and  mitigation  of  botnets.  This  very  hands‐on  5‐day intermediate course introduces state‐of‐the‐art botnet concepts and teaches how the botnet threat can be countered. Since most modern botnets are designed as spyware, this course focusses on the detection of data‐exfiltration and modern IDS evasion techniques.

The course is targeted at technical IT staff who are used to working with IT in roles such as administrator, auditor and whose normal duties do not include forensic analysis. Experienced digital forensic staff doing forensics on a regular basis are not the target group and will receive only limited benefit from attending.