Duration
3 days
Overview
This training exposes participants with skills to assess IoT environment which includes robotic technology, web application, wireless network, and cloud. Participants will be able to identify, perform and mitigate security issues as part of securing IoT environment.
Objective
- To analyse the main components in IoT environment and technology
- To understand the capabilities of components in IoT environment
- To conduct Network Security Assessment involving assessing the security protocol
- To identify possible mitigation processes
- To defend the communication in IoT environment
- To perform application security assessment
- To provide remediation strategies
- To defend the applications in IoT environment
- To determine security risk and incident management plan of IoT environment
Target Audience
IT developer, security analyst, engineer, and cloud security analyst.
Agenda
Module 1: Introduction to IoTModule 1.1: Introduction to IoT Security
- Component of IoT Security
- Robotic
- Wireless
- Web Application
- Cloud Computing
- IoT Security Guideline
- Outcome from IoT Security
Module 1.2: IoT Technology
- History of IoT Technology
- Current IoT Technology
- IoT In Security
- Previous Incident in IoT
Module 2: Robotic TechnologyModule 2.1: Introduction to Robotic Technology
- Introduction to robotic components
- Introduction to robotic communications
Module 2.2: Case Study
- Case Study 1: Manufacturing
- Case Study 2: Autonomous System
Module 2.3: Introduction to type of robotics
- Collaborative Robot
- Industrial Robot
Module 3: Wireless Network AssessmentModule 3.1: Introduction to Wireless Network
- Wi-Fi network fundamentals
- Wireless network standard and organization
- Wireless threats and attacks
Module 3.2: Information Gathering
- Active and Passive Scanning
- Using tool: Kismet
Module 3.3: Penetration Testing
- Wired equivalent privacy (WEP)
- Wi-Fi Protected Access (WPA)
- Wi-Fi Protected Access 2 (WPA2)
- Cracking WEP & WPA
- Wi-Fi protected setup (WPS)
Module 3.4: Wireless Network DefenseMitigation processModule 4: Web Application SecurityModule 4.1: Introduction to Web Application Security
- Use of web applications
- Importance of web applications in IoT
Module 4.2: Web Application Threat in IoT
- OWASP Top 10 2019
- SQL Injection
- Cross Site Scripting (XSS)
Module 4.3: Penetration Testing
- SQL Injection on Vulnerable Web Site
- Cross Site Scripting on Vulnerable Web Site
Module 4.4: Web Application DefenseMitigation processModule 5: CloudModule 5.1 Introduction to Cloud
- Introduction to Cloud
- Type of Cloud Computing
- Public, Private vs Hybrid Cloud
Module 5.2 Cloud as a Services
- Infrastructure as a Services
- Platform as a Services
- Software as a Services
Module 5.3 Concept and Architecture
- Importance of Cloud Computing in IoT
- Secure Cloud Architecture
- Secure Cloud Implementation
Module 6: Security in IoTModule 6.1 Introduction to IoT Security GuidelineThe importance of IoT SecurityModule 6.2 Introduction to IoT Security InfrastructureModule 6.3 Introduction to IoT Security layerModule 6.4 IoT Security RequirementGuideline on IoT Security Requirement
Exam
The CISA examination is certified by the Global ACE Certification. The examination framework is designed to align with a set of relevant Knowledge, Skills and Attitudes (KSA) that are necessary for a Secure Application Professional. Candidates will be tested via a combination of either continual assessment (CA), multiple choice (MC), theory/underpinning knowledge assessment (UK), practical assessment (PA), assignments (AS) and case studies (CS)
as required.Candidates can take the examination at authorized examination centres in participating member countries. Candidates who have successfully passed the CISA examination will be eligible to apply as an associate or professional member by fulfilling the membership criteria defined under the Global ACE Certification.
Programme scope, delivery arrangements and suitability are confirmed during enquiry.