Employee Security Training - Cyber Hacking Threats and Security Activities, Strengthening Personal Information Protection

IT services are rapidly transitioning to cloud environments. You will learn security practices from basic virtual infrastructure construction to security threat monitoring and vulnerability diagnosis for each area to secure the Amazon AWS cloud environment.

This is the first series of integrated courses that cover everything from the introduction to practical application of ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course T1. Certification system, certification standard 1". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

You can learn how to fully utilize Frida, which is used in mock hacking practice.

We cover everything from introduction to utilization of the framework for flexibly running distributed systems in a container environment using “Kubernetes,” an open source virtualization project based on containers.

Network packet analysis is essential when conducting incident analysis and vulnerability analysis. Among the tools available, Wireshark is the most widely used, and this course covers the complete utilization of Wireshark and provides understanding through incident analysis case studies.

This is a basic course for those preparing for bug hunting (bug bounty) and mock hacking work. Web hacking is essential for mock hacking work. After learning web hacking, you can learn various cases from web hacking to system hacking by using a virtual web/server environment where you can study based on scenarios.

The most difficult thing when malware is distributed is script obfuscation. Understand the obfuscation technique and analyze the malware executable file that is distributed after decrypting it.

IT services are rapidly transitioning to cloud environments. This covers everything from basic virtual infrastructure construction to understanding service operation, monitoring, and security areas for each area to secure the MS Azure cloud environment.

This lecture will help you understand cracking methods and solution diagnosis methods through reverse analysis of Windows applications. We will teach you how to apply OllyDBG step by step and the various techniques applied to Windows applications from the basics.

If you want to learn about various malware sample analysis methods after studying introduction to malware analysis and reversing, then you must take this course.

This lecture is designed to make personal information protection education interesting and ‘social engineering-based.’ Rather than covering the revisions to the Personal Information Protection Act, it focuses on real-life information protection threat cases and responses.

This is an introductory malware analysis course that even beginners can easily understand. Based on methodologies such as static analysis, dynamic analysis, and automated analysis of malware analysis, you will analyze various sample cases. It also covers in detail how to use various tools necessary for malware analysis.

I always have this question in my mind: 'What is the fastest way to acquire digital forensics skills?' Many people often ask me, "How can I learn forensics skills quickly?" In this course, you will acquire and understand various forensics skills through the skills required for the digital forensics challenge and solving major challenge problems held in Korea.

Many security hacking incidents are occurring by utilizing OSINT (Open Source Intelligence) search services. We will discuss how to utilize it to first monitor and eliminate potential security threats from an offensive perspective before an attack occurs.

IT services are rapidly transitioning to a cloud environment. You will learn security practices from the basics of building a virtual infrastructure to monitor security threats in each area and diagnose vulnerabilities to secure the domestic Naver cloud environment.

Through the lectures, the Protostar tutorial helps you understand the principles of the system attack techniques through several example programs.

You can learn about the functional utilization of OWASP-ZAP, a web proxy required for running web services, and the virtual environment image Security Onion for analyzing breach response according to attack patterns.

IT infrastructures are being moved to virtualization and cloud environments. Services are becoming more diverse, and many applications are being operated on the infrastructure. In order to respond to the security of increasingly complex infrastructures, various security devices are being introduced. However, this will be a lecture where you can sufficiently practice and prepare using open tools for things that you cannot experience without purchasing security devices.

You can understand the Windows operating system structure and memory structure, and it covers in detail how to analyze malware using information stored in memory. It also covers how to directly create a Volatility plugin that is used as a memory analysis tool and achieve important information acquisition. It is highly recommended for those who have chosen a career as a malware analyst or a breach response analyst.

This training is a hands-on course covering infrastructure construction using Docker container technology, vulnerability analysis, and API web server diagnostics. It is designed to comprehensively learn from the basic concepts of Docker to its application in real-world environments, security vulnerability analysis, and response.

This lecture is designed to make personal information protection education interesting and ‘social engineering-based.’ Rather than covering the revisions to the Personal Information Protection Act, it focuses on real-life information protection threat cases and responses.

Work training to check compliance with personal information-related laws and proactively prevent personal information leaks by analyzing personal information flow, including ISMS-P, ISO27701, and Privacy Impact Assessment. Work education for establishing a personal information management system.

This training is a hands-on course covering infrastructure construction using Docker container technology, vulnerability analysis, and API web server diagnostics. It is designed to comprehensively learn from the basic concepts of Docker to its application in real-world environments, security vulnerability analysis, and response.

Risk assessment plans for network equipment, security equipment, and control systems based on the revised major information and communication infrastructure standards for the second half of 2025, and education for vulnerability elimination through the application of years of know-how and fast and accurate inspection and improvement measures In particular, expectations for efforts to secure inspection speed and improvement plans according to the designation of ISMS-P certification and ISO27001 certification scope Experience with network equipment, security equipment, and control systems that have relatively lower accessibility compared to servers, DB, WEB, WAS, PC, and Cloud (Public, Private), making environment setup difficult

This course carefully selects the core systems that beginners must know in the vast field of information security. Instead of rigid theory, it's structured to help you intuitively understand system principles through clear analogies and practical examples. With this single course, you can grasp the big picture of information security systems as a whole and develop practical skills.

KCA Information Security Risk Manager (ISRM) certification course! The cornerstone for acquiring the top 3 personal information protection certifications: CPPG, ISMS-P!