Duration

3 days

Overview

This training is specially conducted for the participating agencies and Sector Leads to equip them with the intermediate knowledge in Incident handling and Network Security.

Participants will be exposed to the security environment through practitioners’ experience sharing, case studies and hands on exercises by doing relevant analysis with the related tools. Participants will be exposed to the actual drill environment where the previous drill scenario will be simulated. Rephrase to – Participants will be provided with the actual incident scenario, malware samples and handling vulnerabilities.

Objective

Recognize the importance of following well-defined processes, policies, and procedures;
Understand technical, communication, and coordination issues involved;
Analyze and assess the impact of computer security incidents;
Build and coordinate response strategies for various types of computer security incidents;
Gain practical understanding of various methods for analyzing artefacts left on a compromised system;
Obtain practical experience in the analysis of vulnerabilities and the coordination of vulnerability handling tasks.

Target Participant

Computer network incident handling and incident responder professionals
Computer security incident response team members and technical staff
System and network administrators with incident handling experience
IT professionals from private and public sectors

Agenda

Module 1 Introduction Security Incident, Incident Handling

1. Introduction: Security Incident
2. Introduction: Security Incident
3. Six Steps of Incident Handling
4. Sample Incidents

Handling Phishing

Handling Intrusion Incident

Handling Malware Incident

Handling DDOS

Module 2 Malware Analysis

1. Introduction: Malware analysis
2. Malware Analysis Tools
3. Malware Analysis Technique

Static Analysis

Dynamic Analysis

Behavioural Analysis

4. Malware Analysis Hands-On

Module 3 Web Security Module

1. Introduction: Web Security
2. Introduction: Linux Environment & HTTP Request
3. Web Application Vulnerability

Remote/Local File Inclusion (RFI/LFI)

SQL Injection (SQLi)

Cross Site Scripting (XSS)

4. Web Incident Analysis

Programme scope, delivery arrangements and suitability are confirmed during enquiry.