Understanding Ransomware in One Day: A Practical Security Guide from Infection to Response

We will show you how to use Wireshark to check actual network packets and perform everything from HTTP communication analysis to web vulnerability attack detection and malware communication analysis. We explain everything step-by-step starting from the OSI 7 layers so that even beginners without a network foundation can follow along. After taking the course, you will be equipped with the practical skills to find and analyze the specific packets you want.

As AI rapidly permeates daily life and industries, attack techniques targeting these systems are evolving alongside them. This course is a practical, hands-on program designed to help you understand the latest security threats surrounding Generative AI and LLMs, automate security tasks using AI, and experience LLM jailbreak attacks and defenses firsthand.

This course is a practical guide that concisely summarizes the essential organizational security knowledge that everyone working in a company must know. From remote work security to in-house PC and data management, and IT outsourcing security—you can quickly learn the most realistic practical principles to prevent security incidents that actually occur in the workplace. Even if you're not a security officer and have no specialized knowledge, you can learn security habits and checklists that can be immediately applied to your work.

This course is an essential real-life IT security guide that even non-security majors and general users can follow immediately. It's designed to help you easily and quickly learn only the security practices essential for daily life, from understanding what ransomware is to infection prevention and response methods, smartphone security settings, and practical security configurations for Windows/Mac OS.

In the rapidly changing era of AI, IoT, metaverse, and blockchain, understanding technology alone is not sufficient. This course is an introductory guide designed to help you easily identify the security risks brought by the latest digital technologies in just 1 hour. With easy explanations that can be understood even without technical background knowledge and a composition centered on real-world cases, you can organize the security points you must know in the next-generation digital environment all at once.

Virtual assets and cryptocurrencies have driven financial innovation, but they are also being used as tools for crime, money laundering, and data breaches. This course starts with the basic concepts of virtual assets and blockchain, tracks actual cryptocurrency transaction flows, and analyzes suspicious fund movement structures.

Why do so many people fall for phishing attacks? In this lecture, we will examine how phishing is designed and executed through real-world attack cases, understand various types including smishing, QR phishing, and corporate-targeted attacks, and summarize prevention and response methods from a practical perspective.

This is an introductory course designed so that even people encountering information security and personal data protection for the first time can understand the overall flow within an hour. From security concepts to practical methods in daily life, and even the core content of Korea's Personal Information Protection Act (PIPA), only the essential parts are organized in an easy and simple way. Even without security knowledge, after listening, you'll naturally acquire the basics of safely handling personal information in daily life and work.

When providing global services or handling overseas customer data, knowing only domestic laws is no longer sufficient. This course is an introductory program that organizes the core structures of major global privacy protection laws at a glance within 30 minutes. It's designed to help you understand by comparing privacy protection laws by country, including GDPR, CCPA, APPI, PIPA, PDPA, and others. Additionally, you can briefly explore global data security regulations such as HIPAA, PCI DSS, and APEC CBPR, as well as emerging privacy protection issues in AI environments and trends in guaranteeing data subject rights.

Open-Source Intelligence (OSINT) plays a critical role in cybersecurity and threat intelligence. This practical, hands-on OSINT expert course covers everything from Dark Web environment setup and OSINT fundamentals to information gathering tools, as well as information analysis and automation using LLMs.

As AI systems become agentic and expand beyond text into image, audio, and multimodal capabilities, security threats are becoming significantly more complex. This lecture analyzes the latest security threats and attack techniques faced by AI Agents and Multimodal LLMs, as well as real-world cases, from an AI Red Teaming perspective.

Why do so many people fall for phishing attacks? In this lecture, we will examine how phishing is designed and executed through real-world attack cases, understand various types including smishing, QR phishing, and corporate-targeted attacks, and summarize prevention and response methods from a practical perspective.

When providing global services or handling overseas customer data, knowing only domestic laws is no longer sufficient. This course is an introductory program that organizes the core structures of major global privacy protection laws at a glance within 30 minutes. It's designed to help you understand by comparing privacy protection laws by country, including GDPR, CCPA, APPI, PIPA, PDPA, and others. Additionally, you can briefly explore global data security regulations such as HIPAA, PCI DSS, and APEC CBPR, as well as emerging privacy protection issues in AI environments and trends in guaranteeing data subject rights.

This course puts an end to operational vulnerabilities in Linux servers caused by incorrect permissions. Completely master file and directory permission control based on real-world practical standards.

As AI systems become agentic and expand beyond text into image, audio, and multimodal capabilities, security threats are becoming significantly more complex. This lecture analyzes the latest security threats and attack techniques faced by AI Agents and Multimodal LLMs, as well as real-world cases, from an AI Red Teaming perspective.

As the adoption of generative AI accelerates, new security threats such as corporate confidential information leaks and prompt injections are surging. This course covers strategies for embedding security throughout the entire AI lifecycle, based on the National Intelligence Service (NIS) guidelines' 30 core security measures and 15 practical threat cases. It also addresses security issues in the latest AI trends, such as Agentic AI and Physical AI, and presents methods for establishing governance frameworks that can be immediately applied in practice.

Repeatedly study the 100 most frequently appearing CPPG core topics through theory, mind maps, and problem solving.

"Understanding Manufacturing Security in the AI Era through Field Cases" is a course designed to provide an easy understanding of OT security, which is growing in importance within smart factories and AI-based manufacturing environments, focusing on real-world field cases. This lecture explains core concepts frequently encountered in manufacturing sites, such as OT, ICS, PLC, SCADA, HMI, and MES, and compares the differences between IT security and OT security. Furthermore, it examines security threats that can occur on the manufacturing floor—such as ransomware, remote access exploitation, partner account hijacking, production line shutdowns, equipment malfunctions, and data forgery—through case studies. Through this course, students will understand the basic structure of OT security in manufacturing and identify the security perspectives necessary to protect production facilities and industrial control systems. Additionally, it provides a common foundation for further learning in industry-specific manufacturing security courses.

[Introduction to Security Incident Response: Learning through Scenarios of Web Server Hacking, Ransomware, and Account Takeover] This course examines why various information security incidents—such as web server hacking, ransomware, account takeover, and internal penetration—occur and how they spread, categorized by incident type. Students will follow each incident scenario to understand the attack flow, analyze the core causes of the incident, and learn how to resolve issues and prevent recurrence through security architectures such as firewalls, DMZ, access control, privilege management, backup, and log monitoring. Rather than a simple explanation of security concepts, this is a scenario-based introduction to information security that provides a comprehensive understanding from root cause analysis to resolution strategies.

This course carefully selects the core systems that beginners must know in the vast field of information security. Instead of rigid theory, it's structured to help you intuitively understand system principles through clear analogies and practical examples. With this single course, you can grasp the big picture of information security systems as a whole and develop practical skills.

**"Digital Forensic Techniques by Byte Detective: Evidence Collection and Securing"** is a course focused on how to collect and preserve digital evidence required in cases of cybercrime, internal information leakage, and security incidents. From the basic concepts of digital forensics to the principles of evidence collection, maintaining integrity, and legal procedures for securing evidence, this course explains everything through case studies and procedural steps so that even beginners can understand. You can systematically learn the forensic mindset and core concepts of securing evidence that are essential to know before using professional analysis tools.

This is a lecture [Certification and Practice (Security · Network), Security] prepared for beginners.

KCA Information Security Risk Manager (ISRM) certification course! The cornerstone for acquiring the top 3 personal information protection certifications: CPPG, ISMS-P!