Developer/Operator Security Training - Hacking Response and Security Enhancement Strategies

Learn how to use Notion, the next hottest app after Evernote, step-by-step from the beginning with a focus on practice.

IT services are rapidly transitioning to cloud environments. You will learn security practices from basic virtual infrastructure construction to security threat monitoring and vulnerability diagnosis for each area to secure the Amazon AWS cloud environment.

Learn about information security professionals. What they do, what the outlook is like, and what to prepare to become one. This will be very helpful for those who are concerned about their career path.

The most commonly used tool for web vulnerability analysis (hacking) is the web proxy server. Among them, BurpSuite is used the most. BurpSuite is planned to be regularly updated to help with web mock hacking.

In mock hacking practice, mock hacking of iOS mobile apps is now essential! This is a basic lecture for those who are new to iOS app diagnosis. It consists of basic prerequisite knowledge required for diagnosis and practical training centered on the mock hacking work.

This is a basic course for those preparing for bug hunting (bug bounty) and mock hacking work. Web hacking is essential for mock hacking work. After learning web hacking, you can learn various cases from web hacking to system hacking by using a virtual web/server environment where you can study based on scenarios.

IT services are rapidly transitioning to a cloud environment. You will learn security practices from the basics of building a virtual infrastructure to monitor security threats in each area and diagnose vulnerabilities to secure the domestic Naver cloud environment.

IT services are rapidly transitioning to cloud environments. This covers everything from basic virtual infrastructure construction to understanding service operation, monitoring, and security areas for each area to secure the MS Azure cloud environment.

You can understand the Windows operating system structure and memory structure, and it covers in detail how to analyze malware using information stored in memory. It also covers how to directly create a Volatility plugin that is used as a memory analysis tool and achieve important information acquisition. It is highly recommended for those who have chosen a career as a malware analyst or a breach response analyst.

Network packet analysis is essential when conducting incident analysis and vulnerability analysis. Among the tools available, Wireshark is the most widely used, and this course covers the complete utilization of Wireshark and provides understanding through incident analysis case studies.

You will be able to open the process and manipulate the values you want through the Cheat Engine tutorial. Have fun practicing from installing the tutorial to the bot that automatically breaks it!

This course is a guide for those who have chosen a career in IT security or those who wish to pursue it.

The most important part of the security response and security control work is to monitor and remove potential security threats to your company/customer services in advance. Let’s establish and utilize a security threat monitoring plan using the OSINT search service Criminal IP.

When you think of IoT (Internet of Things), the first thing that comes to mind is Raspberry Pi. We will cover everything from the basic installation process of Raspberry Pi to sensor control, building and utilizing various servers, and cloud connection.

This training is a hands-on course covering infrastructure construction using Docker container technology, vulnerability analysis, and API web server diagnostics. It is designed to comprehensively learn from the basic concepts of Docker to its application in real-world environments, security vulnerability analysis, and response.

Cyber security threats are increasing every year, stealing personal information and abusing privacy. This course covers security issues and security activities that employees must know and follow in their work and personal lives.

You will learn how to analyze and quickly visualize various types of data using the Python Streamlit library and output it as a web service. You can use it when you want to apply it to your work faster than the existing web development method.

This lecture provides a general guide on how to prepare while studying when you want to choose a career in IT security penetration testing, and what questions and answers to prepare for the interview. I will share my experience working as a penetration testing consultant, at large companies, and in the financial sector, and currently running a penetration testing consulting business.

It would be efficient to automate IT security tasks using Python, wouldn't it? This course follows hands-on practice, applying Python and web Flask development to automate tasks, idea by idea.

This is the fifth series of integrated courses that cover everything from the introduction to practical application of the ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course - Personal information protection laws (2022 version)". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

In the rapidly changing era of AI, IoT, metaverse, and blockchain, understanding technology alone is not sufficient. This course is an introductory guide designed to help you easily identify the security risks brought by the latest digital technologies in just 1 hour. With easy explanations that can be understood even without technical background knowledge and a composition centered on real-world cases, you can organize the security points you must know in the next-generation digital environment all at once.

This is an introductory information security course that breaks down complex cyberattack techniques as easily and engagingly as a movie. From traditional hacking methods to attack techniques occurring in the latest cloud environments, everything is organized for easy understanding based on real-world cases and scenarios. Even if you don't know technical terms, anyone can follow along through the active use of analogies, visual aids, and storytelling, structured so that vague security concepts remain clearly in your mind. "This course is designed for those who only had a vague knowledge of security to understand everything at once—from the principles and flow of hacking to actual attack methods and response strategies."

"Understanding Manufacturing Security in the AI Era through Field Cases" is a course designed to provide an easy understanding of OT security, which is growing in importance within smart factories and AI-based manufacturing environments, focusing on real-world field cases. This lecture explains core concepts frequently encountered in manufacturing sites, such as OT, ICS, PLC, SCADA, HMI, and MES, and compares the differences between IT security and OT security. Furthermore, it examines security threats that can occur on the manufacturing floor—such as ransomware, remote access exploitation, partner account hijacking, production line shutdowns, equipment malfunctions, and data forgery—through case studies. Through this course, students will understand the basic structure of OT security in manufacturing and identify the security perspectives necessary to protect production facilities and industrial control systems. Additionally, it provides a common foundation for further learning in industry-specific manufacturing security courses.

This course puts an end to operational vulnerabilities in Linux servers caused by incorrect permissions. Completely master file and directory permission control based on real-world practical standards.

As the adoption of generative AI accelerates, new security threats such as corporate confidential information leaks and prompt injections are surging. This course covers strategies for embedding security throughout the entire AI lifecycle, based on the National Intelligence Service (NIS) guidelines' 30 core security measures and 15 practical threat cases. It also addresses security issues in the latest AI trends, such as Agentic AI and Physical AI, and presents methods for establishing governance frameworks that can be immediately applied in practice.

**"Digital Forensic Techniques by Byte Detective: Evidence Collection and Securing"** is a course focused on how to collect and preserve digital evidence required in cases of cybercrime, internal information leakage, and security incidents. From the basic concepts of digital forensics to the principles of evidence collection, maintaining integrity, and legal procedures for securing evidence, this course explains everything through case studies and procedural steps so that even beginners can understand. You can systematically learn the forensic mindset and core concepts of securing evidence that are essential to know before using professional analysis tools.

As AI systems become agentic and expand beyond text into image, audio, and multimodal capabilities, security threats are becoming significantly more complex. This lecture analyzes the latest security threats and attack techniques faced by AI Agents and Multimodal LLMs, as well as real-world cases, from an AI Red Teaming perspective.

KCA Information Security Risk Manager (ISRM) certification course! The cornerstone for acquiring the top 3 personal information protection certifications: CPPG, ISMS-P!

This course carefully selects the core systems that beginners must know in the vast field of information security. Instead of rigid theory, it's structured to help you intuitively understand system principles through clear analogies and practical examples. With this single course, you can grasp the big picture of information security systems as a whole and develop practical skills.

This is a lecture [Certification and Practice (Security · Network), Security] prepared for beginners.

[Introduction to Security Incident Response: Learning through Scenarios of Web Server Hacking, Ransomware, and Account Takeover] This course examines why various information security incidents—such as web server hacking, ransomware, account takeover, and internal penetration—occur and how they spread, categorized by incident type. Students will follow each incident scenario to understand the attack flow, analyze the core causes of the incident, and learn how to resolve issues and prevent recurrence through security architectures such as firewalls, DMZ, access control, privilege management, backup, and log monitoring. Rather than a simple explanation of security concepts, this is a scenario-based introduction to information security that provides a comprehensive understanding from root cause analysis to resolution strategies.

Repeatedly study the 100 most frequently appearing CPPG core topics through theory, mind maps, and problem solving.