Cursos de Práticas de Segurança em Vitória

The Certified Digital Forensics Examiner vendor neutral certification is designed to train Cyber Crime and Fraud Investigators whereby students are taught electronic discovery and advanced investigation techniques. This course is essential to anyone encountering digital evidence while conducting an investigation. The Certified Digital Forensics Examiner training teaches the methodology for conducting a computer forensic examination.  Students will learn to use forensically sound investigative techniques in order to evaluate the scene, collect and document all relevant information, interview appropriate personnel, maintain chain-of-custody, and write a findings report. The Certified Digital Forensics Examiner course will benefit organizations, individuals, government offices, and law enforcement agencies interested in pursuing litigation, proof of guilt, or corrective action based on digital evidence.

As a developer, your duty is to write bulletproof code. What if we told you that despite all of your efforts, the code you have been writing your entire career is full of weaknesses you never knew existed? What if, as you are reading this, hackers were trying to break into your code? How likely would they be to succeed? What if they could steal away your database and sell it on the black market? This Web application security course will change the way you look at code. A hands-on training during which we will teach you all the attackers’ tricks and how to mitigate them, leaving you with no other feeling than the desire to know more. It is your choice to be ahead of the pack, and be seen as a game changer in the fight against cybercrime. Delegates attending will:

• Understand basic concepts of security, IT security and secure coding
• Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
• Learn client-side vulnerabilities and secure coding practices
• Learn about Node.js security
• Learn about MongoDB security
• Have a practical understanding of cryptography
• Understand essential security protocols
• Understand security concepts of Web services
• Learn about JSON security
• Get practical knowledge in using security testing techniques and tools
• Learn how to handle vulnerabilities in the used platforms, frameworks and libraries
• Get sources and further readings on secure coding practices

Description: This class will immerse the students into an interactive environment where they will be shown how to scan, test, hack and secure their own systems. The lab intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. Students will begin by understanding how perimeter defences work and then be lead into scanning and attacking their own networks, no real network is harmed. Students then learn how Intruders escalate privileges and what steps can be taken to secure a system. Students will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation. Target Audience: This course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.

Esta formação ao vivo orientada por um instrutor em Vitória apresenta as arquitecturas de sistemas, sistemas operativos, redes, armazenamento e questões criptográficas que devem ser consideradas na conceção de sistemas incorporados seguros. No final deste curso, os participantes terão uma sólida compreensão dos princípios, preocupações e tecnologias de segurança. Mais importante ainda, os participantes estarão equipados com as técnicas necessárias para desenvolver software incorporado seguro e protegido.

Interactive Application Security Testing (IAST) é uma forma de teste de segurança de aplicativos que combina técnicas de teste de segurança de aplicativos estáticos (SAST) e teste de segurança de aplicativos dinâmicos (DAST) ou auto-proteção de aplicativos em tempo real (RASP). A IAST é capaz de relatar as linhas específicas de código responsáveis por uma exploração de segurança e reproduzir os comportamentos que levam a e seguem tal exploração. Neste treinamento ao vivo liderado por instrutores, os participantes aprenderão como garantir uma aplicação, instrumentando agentes de tempo de execução e indutores de ataque para simular o comportamento da aplicação durante um ataque.   No final do curso, os participantes poderão:

• Simular ataques contra aplicações e validar suas capacidades de deteção e proteção
• Use RASP e DAST para obter visibilidade de nível de código na rota de dados tomada por um aplicativo em diferentes cenários de tempo de execução
• Corrigir rapidamente e com precisão o código de aplicação responsável pelas vulnerabilidades detectadas
• Priorizar as descobertas de vulnerabilidade a partir de scans dinâmicos
• Use alertas RASP em tempo real para proteger aplicações na produção contra ataques.
• Reduzir os riscos de vulnerabilidade da aplicação ao mesmo tempo que manter os objetivos do horário de produção
• Desenvolver uma estratégia integrada para a detecção e proteção de vulnerabilidades em geral

Auditoria

• DevOps Engenheiros
• Engenheiros de Segurança
• Desenvolvedores

Formato do curso

• Parte de palestras, parte de discussão, exercícios e prática pesada

Overview This Public Key Infrastructure – Implement and Manage course helps any individual to gain knowledge in managing robust PKI and having better understanding of topics surrounding public key infrastructure. Moreover, the PKI course is a preparation for the increasingly critical component – which ensures confidentiality, integrity, and authentication in an enterprise. Our PKI course provides the knowledge and skills necessary to select, design and deploy PKI, to secure existing and future applications within your organization. It also gives a deeper look into the foundations of cryptography and the working principles of the algorithms being used. Throughout the whole course, participants will gain in-depth knowledge on the following topics:

• Legal aspects of a PKI
• Elements of a PKI
• PKI management
• Trust in a digital world
• Digital signature implementation
• Trust models

After completing the PKI course, each individual will be able to successfully design, setup, deploy, and manage a public key infrastructure (PKI). This is a 3-day course is considered essential for anyone who needs to understand Public Key Infrastructure (PKI) and the issues surrounding its implementation. It covers the issues and technologies involved in PKI in-depth and gives hands-on practical experience of setting up and maintaining a variety of PKI solutions. Detailed knowledge of issues surrounding PKI helps to put recent attacks which have appeared in the news headlines into context and enable valid decisions to be made about their relevance to your organisation. Objectives To introduce the student to the theoretical aspects of the foundations and benefits of Public Key Infrastructure (PKI), including different types of encryption, digital signatures, digital certificates and Certificate Authorities. To give students hands on experience of implementing and using PKI solutions with a variety of applications. To give students an understanding of the concepts of evaluating and selecting PKI technologies Audience Anyone involved in Public Key Infrastructure | PKI decision-making, implementing and securing e-commerce and other Internet applications, including CIOs, Chief Security Officers, MIS Directors, Security Managers and Internal Auditors.

Este treinamento ao vivo conduzido por instrutor em Vitória (no local ou remoto) é destinado a SysAdmins, engenheiros de sistemas, arquitetos de segurança e analistas de segurança que desejam escrever, executar e implantar scripts e comandos do PowerShell para automatizar o gerenciamento de segurança do Windows em sua organização. No final desta formação, os participantes serão capazes de

• Escreva e execute comandos do PowerShell para simplificar as tarefas de segurança do Windows.
• Use o PowerShell para execução remota de comandos para executar scripts em milhares de sistemas em uma organização.
• Configurar e fortalecer o Windows Server e o Firewall do Windows para proteger os sistemas contra malware e ataques.
• Gerenciar certificados e autenticação para controlar o acesso e a atividade do usuário.

  Target Audience would be - Network server administrators, firewall administrators, information security analysts, system administrators, and risk assessment professionals 

Description: This course will give the participants thorough understanding about security concepts, web application concepts and frameworks used by developers in order to be able to exploit and protect targeted application. In today’s world, that is changing rapidly and thus all the technologies used are also changed at a fast pace, web applications are exposed to hackers attacks 24/7. In order to protect the applications from external attackers one has to know all the bits and pieces that makes the web application, like frameworks, languages and technologies used in web application development, and much more than that. The problem is that attacker has to know only one way to break into the application and developer (or systems administrator) has to know all the possible exploits in order to prevent this from happening. Because of that it is really difficult to have a bullet proof secured web application, and in most of the cases web application is vulnerable to something. This is regularly exploited by cyber criminals and casual hackers, and it can be minimized by correct planning, development, web application testing and configuration. Objectives: To give you the skill and knowledge needed to understand and identify possible exploits in live web applications, and to exploit identified vulnerabilities. Because of the knowledge gained through the identification and exploitation phase, you should be able to protect the web application against similar attacks. After this course the participant will be able to understand and identify OWASP top 10 vulnerabilities and to incorporate that knowledge in web application protection scheme. Audience: Developers, Police and other law enforcement personnel, Defense and Military personnel, e-Business Security professionals, Systems administrators, Banking, Insurance and other professionals, Government agencies, IT managers, CISO’s, CTO’s.