Professional Diploma in Cyber Security Defence & Operations

• Classify the various types of network attacks. 
• Attackers and their tools how networks are attacked. 
• Common Threats and Attacks.

• Use network monitoring tools to identify attacks that against network protocols and services. 
• Observing Network Operation, traffic monitoring. 
• Attacking the Foundation, how TCP/IP vulnerabilities enable network attacks. 
• Attacking What We Do, how common network applications and services are vulnerable to attack. 

• Methods to prevent malicious access to computer networks, hosts, and data. 
• Understanding Defence, approaches to network security. 
• Access Control as a method of protecting a network. 
• Network Firewalls and Intrusion Prevention, how firewalls and other devices prevent network intrusions. 
• How content filtering prevents unwanted data from entering the network. 
• Threat Intelligence, how to locate current security threats. 

• Explain the impacts of cryptography on network security monitoring. 
• Cryptography tools to encrypt and decrypt data. 
• Public Key Cryptography, how the public key infrastructure (PKI) supports network security.

• How to investigate endpoint vulnerabilities and attacks. 
• Endpoint Protection, how to generate a malware analysis report. 
• Endpoint Vulnerability Assessment.

• Technologies and Protocols
• Explain how security technologies affect security monitoring. 
• Log Files Explain the types of log files used in security monitoring. 

• Analyse network intrusion data to identify compromised hosts and vulnerabilities How security-related data is collected. 
• Data preparation for intrusion data analysis. 
• Analyse intrusion data to determine the source of an attack. 

• Explain how network security incidents are handled. 
• Apply incident response models to an intrusion event. 
• Apply standards specified in NIST 800-61r2 to a computer security incident. 
• Case Study - Given a set of logs, isolate a threat actor and recommend an incident response plan. 

Upon successful completion of this course you should be able to; 

• Demonstrate knowledge of the components, concepts of information and data security including:
  • confidentiality, integrity and availability.  
• Appraise the secure operation of common IT infrastructures and services.  
• Classify the various types of cyber attacks and the methodologies used.  
• Use various methods to both prevent and detect malicious access to IT infrastructures.  
• Ensure business continuity by adhering to recommended standards of secure operations.