Curso: Percurso Cyber Security

Curso: Percurso Cyber Security

Área formativa: Outros

Sobre o curso

Este percurso fornecer-lhe as competências técnicas necessárias para construir uma carreira sustentada na área da Segurança de Informação.

Ao longo do percurso as matérias, e respetivo nível, vão evoluindo. O percurso inicia com as temáticas da identificação de ameaças e vulnerabilidades de segurança, configuração de soluções que permitam reduzir a superfície de ataque de variados tipos de sistemas informáticos, bem como a implementação de diferentes tipos de metodologias de hardening. Culmina de forma a proporcionar a experiência e credibilidade para projetar, implementar e gerir um programa de segurança da informação para proteger as organizações de crescentes ataques sofisticados.

Este curso tem como objetivos:

Esta formação pretende munir os participantes com os conhecimentos e experiência em configuração de equipamentos de networking e segurança (Switches, Firewalls, VPNs, IPS e Load Balancers) bem como a implementação soluções que permitam reduzir a superfície de ataque de servidores, clientes, dispositivos de rede, sistemas industriais e dispositivos moveis (AV, HIDS, SIEM, Threat Analytics, …); preparar Administradores de Segurança para desenhar e implementar soluções de monitorização, análise, prevenção de intrusões, firewalls, controle de acesso e alarmística. Lidar com sistemas críticos e criar planos de resposta a incidentes e recuperação de desastres. Desenvolver competências na análise de incidentes e malware aumentando a capacidade de resposta a novas ameaças. Realizar análise de vulnerabilidades e testes de intrusão de forma a testar as soluções implementadas; preparar auditores para realização de testes de intrusão a ambientes com elevado nível de segurança, adotando a perspetiva de um adversário avançado como modo de operação, permitindo uma melhor identificação, quantificação e gestão do risco; obter as competências e os conhecimentos necessários para conduzir auditorias de acordo com os requisitos da ISO 27001 para sistemas de gestão de segurança da informação e relatar e acompanhar os resultados.

O Percurso Cyber Security inclui 6 exames de certificação.

Os exames de certificação deverão ser realizados no final dos respetivos módulos de formação. As datas para a realização dos exames de certificação são sugeridas pela Rumos, no entanto, a marcação é feita pelo formando no momento em que se sentir preparado para tal.

A marcação deve ser efetuada com 4 dias úteis de antecedência à data pretendida e o resultado do exame é conhecido aquando da finalização do mesmo.

Destinatários

Destina-se a todos os interessados em aprofundar conhecimentos e desenvolver competências na área de Segurança de Redes e Sistemas, para consolidar uma carreira especializada em Segurança de Informação.

Pré-requisitos

Conhecimentos de Inglês.

O percurso não apresenta quaisquer pré-requisitos a nível de habilitações académicas ou experiência profissional.

Metodologia

Programa

CompTIA Security+ Certification Prep (35h)

●

Marketing Pessoal e Comunicação (7h)

●

Hardening Desktop e Mobile (14 h)

●

Hardening de Servidores e Infraestruturas (21h)

●

Resposta a incidentes, análise e deteção de Malware (35h)

●

Ethical Hacking com Kali (35h)

●

Noções básicas de direito + Lei do Cibercrime (7h)

●

Monitorização, Análise, Deteção e Prevenção de Intrusões (35 h)

●

ISO/IEC 27002 (35h)

●

Risk Management (35h)

●

Testes de penetração avançada (35 h)

● Fundamentos IT e Segurança (35h) Hardware ● BIOS/UEFI ❍

Components, their purpose, and properties

❍

Operating Systems

❍

Types of Operating Systems & Technologies

❍

Hypervisors and types of hypervisors

❍ Boot methods ❍ Type of installations ❍ Partitioning ❍

File system types/formatting

Programs and features ❍ Best practices ❍ Tools ❍ Features ❍

Basic Windows and Linux commands

❍

Mobile devices

❍

Basic cloud concepts

❍

Network

●

Understanding Network Infrastructures

❍

Understand the concepts of Internet, intranet, and extranet

❍

Understand local area networks (LANs)

❍

Understand wide area networks (WANs)

❍

Understand wireless networking

❍

Understand network topologies and access methods

❍

Understanding Network Hardware

❍

Understand switches

❍

Understand routers

❍

Understand media types

❍

Understanding Protocols and Services

❍

Understand the OSI model

❍

Understand IPv4

❍

Understand IPv6

❍

Understand names resolution

❍

Understand networking services

❍

Understand TCP/IPTools for Designing and Developing XAML-Based Applications

❍

Anatomy of a XAML-Based Application

❍

Lab : Building a Security Test Lab

●

Hardware and Hardware requirements

❍ Hypervisor installation ❍ Network topology ❍ Network setup ❍

Installing Virtual Machines

❍

CompTIA Security+ Certification Prep (35h)

Security Fundamentals

●

Identifying Security Threats and Vulnerabilities

●

Managing Data, Application, and Host Security

●

Implementing Network Security

●

Implementing Access Control, Authentication

●

Managing Certificates

●

Implementing Compliance and Operational Security

●

Risk Management

●

Troubleshooting and Managing Security Incidents

●

Business Continuity and Disaster Recovery Planning

●

Lab : Security Fundamentals

●

Examining a Security Policy

❍

Identifying Social Engineering Attacks and types of Malware

❍

Network-Based Threats

❍

Configuring a Web Browser and Implementing Auditing

❍

Configuring a Network Intrusion Detection System

Installing an IIS Web Server

❍

Securing Wireless Traffic

❍

Backing Up Active Directory

❍

Implementing Account Management Security Controls

❍

Installing a CA and Enrolling Certificates

❍

Securing Network Traffic with Certificates

❍

Examining the Components of Physical Security

❍

Examining Security Awareness and Training

❍

Capturing Network Data with Microsoft Message Analyzer

❍

Scanning for Vulnerabilities

❍

Creating a DRP

❍

Executing DRPs and Procedures

❍

Marketing Pessoal e Comunicação (7h)

Marketing Pessoal: definição e exploração do conceito

●

Identificação da importância do Marketing Pessoal no crescimento pessoal e profissional

●

A análise Swot aplicada aos objetivos pessoais e profissionais

●

Abordagem ativa ao mercado de trabalho

●

Hardening Desktop e Mobile (14 h)

Checklists, Guides and Benchmarks

●

Windows Desktop Hardening

●

*NIX Desktop Hardening

●

OS X Hardening

●

Hardening devices with Apple iOS

●

Hardening devices with Google Android

●

Hardening devices with Windows Phone

●

Application Hardening

●

Lab : Desktop and Mobile Hardening

●

Examining DISA STIGs

❍

Examining CIS Benchmarks

❍

Examining NSA Security Configuration Guides

❍

Hardening Windows Desktop

❍

Hardening OS X

❍

Hardening Mobile devices

❍

Hardening de Servidores e Infraestruturas (21h)

Checklists, Guides and Benchmarks

●

Security Content Automation Protocol (SCAP)

●

Hardening *NIX Servers

●

Hardening Windows Servers

●

Hardening Virtualization Servers

●

Hardening Firewalls

●

Hardening Routers and Switches

●

Hardening Wireless

●

Hardening Applications and Databases

●

Lab : Infrastructure Hardening

●

Examining NIST – NCP National Checklist Program

❍

Using OpenSCAP

Hardening Linux Server

❍

Hardening Windows Server

❍

VMware Security Hardening Guides

❍

Hardening a Firewall

❍

Hardening Cisco IOS Devices

❍

Resposta a incidentes, análise e deteção de Malware (35h)

Building an Incident Response Kit

●

Incident Detection

●

First Steps

●

Containment and quarantine

● Data Collection ● Data Analysis ● Malware Analysis ●

Eradication and rebuild

●

Recovery

●

Documentation

●

Lab : Incident Response

●

Building an Incident Response Kit

❍

Detecting a incident

❍

Triage and incident handling

❍

Large scale incident handling

❍

Automation in incident handling

❍

Advanced Persistent Threat

❍

Digital forensics

❍

Malware Analysis

❍

Eradication and Recovery

❍

Ethical Hacking com Kali (35h)

Kali Linux

●

What is Kali Linux

❍

Planing and Recon

●

Scoping

❍

Whois

❍

Document Metadata Analysis

❍

DNS Analysis

❍

Load Balancing Detection

❍

Firewall Detection

❍

Recon with Recon-NG

❍ Scanning ● Network sweeping ❍ Network tracing ❍ Port scanning ❍ OS fingerprinting ❍ Version scanning ❍ Vulnerability Scanning ● Discovering Vulnerabilities ❍ Vulnerability Databases ❍ Exploit Databases ❍

Nmap Scripting Engine ❍ Nessus ❍ Nikto ❍ Exploitation ● Exploit Categories ❍ Exploit Databases ❍ Metasploit ❍ Armitage ❍ BeEF ❍ SET ❍ Password Attacks ● Definitions ❍

Password Guessing with THC-Hydra

❍

Obtaining Password Hashes

❍

John the Ripper

❍

Rainbow Table Attacks

❍

Pass-the-Hash Attacks

❍

Wireless Attacks

●

Bypassing WLAN Authentication

❍

Cracking WLAN Encryption

❍

Attacking the WLAN Infrastructure

❍

Advanced Enterprise Attacks

❍

Attacking the Wireless Client

❍

Web Apps

●

Defining a Web App

❍

Burp Suite

❍

Injection Attacks Overview

❍ Cross-Site Scripting ❍ Command Injection ❍ SQL Injection ❍

Lab : Pentesting Lab

●

Installing Kali Linux

❍

Creating a security lab

❍

Planing and Recon

❍ Scanning ❍ Vulnerability Scanning ❍ Exploitation ❍ Password Attacks ❍ Network Attacks ❍ Wireless Attacks ❍ Web Apps ❍

Noções básicas de direito + Lei do Cibercrime (7h)

Monitorização, Análise, Deteção e Prevenção de Intrusões (35 h)

Fundamentals of Traffic Analysis

●

TCP/IP communications model

●

Data encapsulation

●

Introduction to tcpdump

●

Writing tcpdump Filters

Introduction to Wireshark

●

Application Protocols and Traffic Analysis

●

IDS/IPS Evasion Theory

●

Real-World Traffic Analysis

● Packet Crafting ● Introduction to IDS ● Introduction Suricata ● Writing rules ● Introduction to Bro ●

Monitoring Network Traffic

●

ELK Stack

●

Monitor Netflow with Kibana

●

Suricata and Kibana

●

NetFlow

●

HIDS

●

AIDE (Advanced Intrusion Detection Environment)

●

OSSEC

●

Beeswarm IDS

●

Auditd (The Linux Audit daemon)

●

Honeypots

●

NetworkMiner

●

Google – GRR Rapid Response

●

Offensive Countermeasures and Hacking Back

●

Lab :

●

Traffic Analysis

❍

Introduction to tcpdump and writing filters

❍

Introduction to Wireshark

❍

Traffic Analysis

❍

Monitoring Network Traffic

❍

Real-World Traffic Analysis

❍ Installing Elasticsearch ❍ Installing Logstash ❍ Installing Kibana ❍

Suricata and Kibana

❍ Installing AIDE ❍ Installing OSSEC ❍ Auditd ❍ Installing Honeypots ❍

Offensive Countermeasures and Hacking Back

❍

ISO/IEC 27002 (35h)

Introduction to the ISO 27000 standards family Introduction to management systems and the process

●

approach

General requirements of ISO/IEC 27002

●

Implementation phases of the ISO/IEC 27002 framework

●

Introduction to risk management according to ISO 27005

●

Continual improvement of information security

●

Conducting an ISO/IEC 27002 certification audit

●

Lab : Conducting an ISO/IEC 27002 certification audit

●

Introduction to the ISO 27000 standard

Exploring the ISO/IEC 27002

❍

Conducting an ISO/IEC 27002 certification audit

❍

Risk Management (35h)

Explain the terminology that is used within M_o_R

●

Understand the principles for the development of good risk management practices

●

Design an approach to risk management to improve performance

●

Identify and assess risks, then plan and implement risk responses

●

Establish current practices using M_o_R healthcheck and maturity model

●

Identify opportunities and ways to improve Risk management

●

Understand the importance of Risk Specialisms

●

Lab : Risk Management

●

Create Risk Management Plan

❍

Identify Risks

❍

Conducting Risk Analysis

❍

Risk Response Planning

❍

Risk Monitoring and Control

❍

Privacidade (7h)

Online Privacy

●

Use website and browser privacy controls effectively

●

Delete content from websites

●

Recover from and prevent identity theft

●

Set up safe online profiles

●

Remove data from people-finder websites

●

How to be Anonymous Online

●

OPSEC

●

Testes de penetração avançada (35 h)

Advanced Network Attacks

●

Bypassing network controls

●

Attack software updates with Evilgrade

●

Bypassing Load Balancers, IPS and WAFs

●

VLAN Hopping

●

MITM (man-in-the-middle) and Sslstrip

●

Pivoting and tunneling with Socks, ICMP, SSH and IPV6

●

Data-Mining and Exfiltration

●

Mastering Metasploit

●

Writing a Auxiliary Module

●

Writing a Post Module

●

Bypassing Anti-Virus Tools

●

Evading Countermeasures

●

Introduction to Exploit Development

●

C and Assembly Language Basics

●

Debuggers

●

Stack-Based Buffer Overflow in Linux

●

Stack-Based Buffer Overflow in Windows

●

Structured Exception Handler Overwrites

●

Introduction to format string bugs

Introduction to heap overflows

●

Shellcode

●

Generating Shellcode with Metasploit

●

Fuzzing

●

Porting Exploits, and Metasploit Modules

●

Lab : Advanced Attacks and Exploit development

●

Advanced Network Attacks

❍

Attack software updates with Evilgrade

❍

VLAN Hopping with Yersinia

❍

Writing a Metasploit Auxiliary Module

❍

Writing a Metasploit Post Module

❍

C and Assembly Language Basics)

❍

Debuggers

❍

Intro to gdb

❍

Intro to Immunity Debugger

❍

Exploit development in Linux

❍

Exploit development in Windows

❍

Fuzzing

❍

Porting Exploits