Executive Cyber Security Awareness Training Course

This live, instructor-led training, delivered in Denmark (either online or onsite), is designed for system administrators seeking to utilize 389 Directory Server for the configuration and administration of LDAP-based authentication and authorization systems.

Upon completion, participants will be equipped to:

• Install and configure 389 Directory Server.
• Grasp the features and architectural components of 389 Directory Server.
• Configure the directory server using both the web console and CLI tools.
• Establish and oversee replication mechanisms for high availability and load balancing.
• Optimize LDAP authentication performance through the use of SSSD.
• Integrate 389 Directory Server with Microsoft Active Directory.

This live, instructor-led training delivered in Denmark (either online or onsite) targets system administrators seeking to utilize Microsoft Active Directory for the management and protection of data access.

By the end of this course, participants will be able to:

• Install and configure Active Directory.
• Establish a domain and specify access permissions for users and devices.
• Oversee users and machines via Group Policies.
• Regulate access to file servers.
• Deploy Certificate Services and administer certificates.
• Implement and maintain services including encryption, certification, and authentication.

Building a secure networked application presents significant challenges, even for developers experienced with cryptographic primitives like encryption and digital signatures. To help participants grasp the role and application of these foundational elements, the course first establishes a robust understanding of the core requirements for secure communication—including secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also examines typical threats that can undermine these requirements, alongside practical, real-world solutions.

Given that cryptography is a critical pillar of network security, the course covers essential algorithms in symmetric encryption, hashing, asymmetric cryptography, and key agreement. Rather than delving into complex mathematical theory, these topics are explored from a developer's perspective, highlighting typical use cases and practical considerations, such as public key infrastructures. The curriculum also introduces security protocols across various domains, with a detailed focus on widely adopted protocol families like IPSEC and SSL/TLS.

Common cryptographic vulnerabilities are analyzed, covering both algorithm-specific weaknesses and protocol-level exploits, such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding Oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each issue, the course outlines the practical implications and potential consequences, maintaining a focus on application rather than deep mathematical detail.

Finally, since XML technology is central to data exchange in networked applications, the security aspects of XML are thoroughly described. This includes its use in web services and SOAP messages, along with protective measures like XML signatures and XML encryption. The discussion also addresses the weaknesses in these protections and XML-specific threats, including XML injection, XML External Entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Comprehend the key requirements of secure communication
• Learn about network attacks and defensive strategies across various OSI layers
• Gain a practical understanding of cryptography
• Understand essential security protocols
• Review notable recent attacks against cryptosystems
• Obtain information on relevant recent vulnerabilities
• Understand security concepts related to web services
• Receive sources and further reading materials on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ applications demands a rigorous approach to defending against malicious exploitation, memory corruption, and bypasses in input validation. This program delves into critical vulnerability patterns, such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Learners will implement secure coding guidelines, leverage static analysis tools, and adopt defensive programming techniques to eradicate weaknesses, enforce strict input sanitization, and deliver hardened software capable of withstanding sophisticated cyberattacks.

Even seasoned Java developers often lack comprehensive mastery of the diverse security services available within the Java ecosystem. Consequently, they may also be unaware of the specific vulnerabilities pertinent to Java-based web applications.

This course explores security challenges in Java Enterprise Edition (JEE) and web services, while also introducing the security components of the Standard Java Edition. The curriculum begins with foundational concepts in cryptography and secure communication before delving into specific security services. Participants will engage in practical exercises focused on both declarative and programmatic security techniques within JEE, as well as discussions on transport-layer and end-to-end security for web services. The application of these components is demonstrated through hands-on sessions, allowing attendees to experiment directly with the relevant APIs and tools.

Furthermore, the course examines and explains the most frequent and severe programming flaws associated with the Java language, platform, and web-related vulnerabilities. Beyond common programming errors, the security vulnerabilities covered include both language-specific issues and problems arising from the runtime environment. Each vulnerability and its associated attack vectors are illustrated through accessible exercises, followed by recommended coding guidelines and effective mitigation strategies.

Participants attending this course will

• Gain a solid understanding of fundamental security concepts, IT security, and secure coding practices
• Explore Web vulnerabilities beyond the OWASP Top Ten and learn strategies to prevent them
• Comprehend the security principles underlying Web services
• Become proficient in utilizing various security features of the Java development environment
• Develop a practical grasp of cryptographic concepts
• Understand the security solutions provided by Java EE
• Identify common coding mistakes and learn how to avoid them
• Review recent vulnerabilities in the Java framework
• Acquire practical skills in using security testing tools
• Access resources and further reading materials on secure coding practices

Audience

Developers

While multiple programming languages can target the .NET and ASP.NET frameworks, the environment offers robust capabilities for security development. However, developers must understand how to effectively apply architecture-level and code-level techniques to implement desired security features, mitigate vulnerabilities, and limit potential exploitation.

This course aims to equip developers with practical skills through numerous hands-on exercises. Topics include preventing untrusted code from executing privileged actions, securing resources via strong authentication and authorization, implementing remote procedure calls, managing sessions, and exploring alternative implementations for specific functionalities.

The curriculum begins by addressing common programming errors in .NET usage. It then covers ASP.NET vulnerabilities, focusing on environment configurations and their security implications. Finally, it examines ASP.NET-specific risks, including general web application security challenges and specific attack vectors such as ViewState manipulation and string termination attacks.

Participants attending this course will

• Grasp the core concepts of security, IT security, and secure coding
• Identify and avoid web vulnerabilities extending beyond the OWASP Top Ten
• Apply various security features available in the .NET development ecosystem
• Develop practical proficiency in using security testing tools
• Recognize common coding mistakes and strategies to prevent them
• Stay informed about recent vulnerabilities affecting .NET and ASP.NET
• Access curated resources for continued learning in secure coding practices

Audience

Developers

This course equips PHP developers with the critical skills required to fortify their applications against modern internet threats. We examine web vulnerabilities through practical PHP-based examples, extending beyond the OWASP Top Ten to address diverse injection attacks, script injections, session handling risks, insecure direct object references, and file upload issues. PHP-specific vulnerabilities are categorized into standard types, including missing or improper input validation, incorrect error and exception handling, misuse of security features, and time- and state-related problems. Specifically, we analyze attacks such as open_basedir circumvention, denial-of-service via magic float, and hash table collision attacks. Throughout the course, participants will master the key techniques and functions needed to mitigate these identified risks.

Particular emphasis is placed on client-side security, addressing issues within JavaScript, Ajax, and HTML5. We introduce essential security-related PHP extensions, including hash, mcrypt, and OpenSSL for cryptography, as well as Ctype, ext/filter, and HTML Purifier for input validation. Furthermore, we outline best practices for hardening PHP configurations (php.ini), Apache, and general server environments. The course concludes with an overview of various security testing tools and techniques available to developers and testers, such as security scanners, penetration testing, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the exploration of vulnerabilities and the implementation of configuration best practices are reinforced through hands-on exercises. These practical sessions demonstrate the consequences of successful attacks, illustrate the application of mitigation techniques, and guide participants in utilizing relevant extensions and tools.

Learning Outcomes

• Grasp the fundamental concepts of security, IT security, and secure coding
• Identify web vulnerabilities beyond the OWASP Top Ten and understand strategies to avoid them
• Explore client-side vulnerabilities and associated secure coding practices
• Develop a practical understanding of cryptography
• Master the use of various PHP security features
• Recognize typical coding errors and learn methods to prevent them
• Stay informed about recent vulnerabilities affecting the PHP framework
• Gain practical experience in utilizing security testing tools
• Access recommended sources and further reading materials on secure coding practices

Target Audience

Developers

This comprehensive SDL core training offers a deep dive into secure software design, development, and testing, aligned with the Microsoft Secure Development Lifecycle (SDL). It begins with a foundational Level 100 overview of SDL's core components, then transitions into practical design techniques for identifying and remedying flaws during the earliest stages of development.

Focusing on the development phase, the course examines common security-related programming errors in both managed and native code. Participants will explore attack vectors for these vulnerabilities alongside corresponding mitigation strategies, reinforced through hands-on exercises that offer live hacking insights. The curriculum also introduces various security testing methods, demonstrating the efficacy of different testing tools. Through practical application to previously discussed vulnerable code, participants gain a working understanding of how these tools function.

Course Outcomes

Grasp the fundamental concepts of security, IT security, and secure coding

Become familiar with the key steps of the Microsoft Secure Development Lifecycle

Master secure design and development practices

Understand principles of secure implementation

Comprehend security testing methodologies

• Access resources and further reading materials on secure coding practices

Target Audience

Developers, Managers

This instructor-led, live course, held in Denmark, equips participants with the knowledge to craft an effective security strategy designed to address the evolving security challenges within DevOps ecosystems.

The EC-Council Certified DevSecOps Engineer (ECDE) is a practical, hands-on course designed to empower professionals to integrate security throughout the entire DevOps lifecycle. This ensures that secure software development is embedded from the initial planning stages right through to final deployment.

This live, instructor-led training, available either online or onsite, is tailored for intermediate-level software and DevOps professionals who aim to weave security practices into their CI/CD pipelines, thereby guaranteeing the delivery of secure and compliant code.

Upon completion of this training, participants will be able to:

• Grasp the core principles and methodologies of DevSecOps.
• Fortify every stage of the CI/CD pipeline by leveraging automated tools.
• Apply secure coding standards and conduct comprehensive vulnerability scanning.
• Get prepared for the ECDE certification through practical labs and comprehensive reviews.

Course Delivery Format

• Engaging interactive lectures and open discussions.
• Practical application of DevSecOps tools within simulated pipeline environments.
• Structured exercises emphasizing secure development and deployment processes.

Customization Possibilities

• For tailored training aligned with your specific team workflows or toolchain, please reach out to us to coordinate the arrangements.

This live, instructor-led training program in Denmark, offered in both online and on-site formats, is intended for system administrators seeking to utilize FreeIPA to centralize authentication, authorization, and account data for their organization's users, groups, and machines.

By the conclusion of this training, participants will be equipped to:

• Install and configure the FreeIPA platform.
• Manage Linux users and clients from a single central point.
• Utilize FreeIPA's CLI, Web UI, and RPC interface to configure and oversee permissions.
• Enable Single Sign-On authentication across all systems, services, and applications.
• Integrate FreeIPA with Windows Active Directory.
• Execute backup, replication, and migration procedures for FreeIPA servers.

This live, instructor-led session, conducted Denmark (online or on-site), is designed for system administrators seeking to apply Okta for identity and access management.

By the conclusion of this training, learners will be proficient in:

• Configuring, integrating, and overseeing Okta.
• Integrating Okta capabilities into current applications.
• Deploying security measures using multi-factor authentication.

OpenLDAP is open-source software used to implement the LDAP (Lightweight Directory Access Protocol) protocol, enabling the management and access to information directories. It is a popular directory server that can be utilised for storing and sharing data about users, groups, network resources, and other objects within a network.