Breaking Down Secure Coding

You can learn the concepts and methods of 'service design' needed when planning applications or web services built on LLM, a type of generative artificial intelligence (generative AI).

What should be done when building a generative AI or LLM-based RAG (Retrieval-Augmented Generation) system, but the desired performance isn't achieved and there's no suitable solution? This lecture presents methods to improve RAG performance based on Cognitive Load theory. Through this lecture, you will understand the limitations of LLM context windows and learn how to effectively manage cognitive load in RAG systems. It is a practical-level theoretical lecture covering Chunk size and structure design, high-quality Chunk generation techniques, dynamic optimization, performance evaluation, and practical techniques.

It explains the fundamental principles of large language models like ChatGPT, focusing on theory.

Without a single formula or line of code, this penetrates the essence of basic statistics necessary for AI development and application.

By enabling junior developers to use AI as a development tool to understand the entire development process—from planning and coding to deployment and verification—we empower them to survive and thrive in the AI era with the full-spectrum capabilities required.

This course systematically teaches prompt engineering, a core technology for effectively utilizing Large Language Models (LLMs) and generative artificial intelligence. It comprehensively covers everything from foundational theory to practical techniques, as well as the latest application cases and security/ethical issues, providing practical help to LLM-based service developers, data scientists, and AI planners alike.

Problematization is a term that can be translated as "raising a problem" or "problem framing." It can also be interpreted as problem setting or problem definition. It is a concept that involves questioning known facts—such as requirements or common sense—from a new perspective, defining the problem, and structuring the process to solve it. While problematization should be the starting point for all development, it is a topic that has not yet been sufficiently discussed in the field. Carrying out a project or developing a program is, in fact, the act of creating a plan to solve a problem. In other words, it is inherently linked to problematization. To solve a problem, the problem must first be clearly defined. However, most problems are given in the form of vague requests. Therefore, having the power to transform vague requests into clear problems can reduce unnecessary "development waste," facilitate smooth collaboration, and accurately identify the true needs of users. This course helps you train your "constructive thinking" regarding problems through practical cases and tools.

"One name change, code transformed." "The key to readable code, 'naming for readability,' summarized from principles to examples." "Easy-to-read names begin collaboration."

You can quickly understand C language's basic concepts and grammar.

👨‍🍳 Like cooking code, neatly and deliciously! 『Clean Coding』 is a code cooking class for chef-like developers, where they joyfully learn clean coding through a cooking analogy. 🍽️

We introduce basic prompt patterns for coding and advanced API prompt patterns for leveraging artificial intelligence.

Starting from the origins of natural language processing technology, this provides a detailed explanation of the various language models developed in the journey leading up to the latest LLM models.

We explore how to create an AI judge by combining knowledge graphs, reasoning systems, and various agent frameworks such as CrewAI, LangChain, and AutoGen, which enable the implementation of LLM-based multi-agent technology.

We will examine methods for collecting and analyzing user requirements to plan LLM services.

We explore the limitations of LLMs, methods to overcome them, and the latest research topics.

Let's explore the types of applications or web services that can be built using LLMs.

Explains why LLMs are needed, their technical background, and basic concepts.

Training on identifying the status of and performing inspections on personal (credit) information processing systems in accordance with the Notification on Measures to Ensure the Safety of Personal Information and Appendix 3 of the Credit Information Supervision Regulations.

The recent Coupang personal information leak has been recorded as the largest data breach in South Korea's history, marking an instance where the personal information of virtually every South Korean citizen was compromised. However, the debate regarding the effectiveness of ISMS-P concluded with meaningless improvement measures such as mock hacking and certification revocation. As of December 11, 2025, companies like Coupang—which were subjects of the Personal Information Processing Policy Evaluation System conducted by the Personal Information Protection Commission in 2024—continue to operate in violation of more than 10 criteria of that evaluation system. The reason for this lies in human error involving Coupang's personal information team (comprised of top domestic and international experts) and ISMS-P auditors (who hold the highest domestic and international qualifications). With basic common knowledge of the Personal Information Protection Act, this recent leak, as well as breaches at Gmarket, Netmarble, SKT, KT, and LG U+, could have all been prevented. In reality, accidents continue to occur because customers' personal information is not protected—or appropriate protective measures are not established and operated—due to human issues such as inadequate preliminary inspections and differences in legal interpretation. Through this lecture, you can acquire the skills to evaluate personal information transparently and objectively, with the hope that personal information protection for customers will be achieved through professional training aimed at proper inspection methods and eliminating blind spots.

This course carefully selects the core systems that beginners must know in the vast field of information security. Instead of rigid theory, it's structured to help you intuitively understand system principles through clear analogies and practical examples. With this single course, you can grasp the big picture of information security systems as a whole and develop practical skills.

This is a theoretical/practical training course to prepare for the certification exam for those who dream of becoming an ISMS-P certification auditor in 2025. It is an extended version that includes general ISMS-P and financial ISMS-P.

KCA Information Security Risk Manager (ISRM) certification course! The cornerstone for acquiring the top 3 personal information protection certifications: CPPG, ISMS-P!

CPPG WIN is the shortcut to obtaining your CPPG certification. This is a theoretical course designed for passing the 2026 CPPG exam, reflecting the trends of the last 13 sittings.

This is an online course where you can learn essential content for certification, from basic concepts of information security to the latest security issues. With theory reflecting the latest exam trends and practical mock tests, you can efficiently prepare for the exam, and it's structured so that even those new to information security can easily follow along.

Cyber security threats are increasing every year, stealing personal information and abusing privacy. This course covers security issues and security activities that employees must know and follow in their work and personal lives.

This lecture is designed to make personal information protection education interesting and ‘social engineering-based.’ Rather than covering the revisions to the Personal Information Protection Act, it focuses on real-life information protection threat cases and responses.

"Nationally Certified Industrial Security Manager" New Renewal Version Final Update Completed!! This course is designed to help you obtain the Nationally Certified Industrial Security Manager certification by providing a systematic understanding of industrial security from a management perspective. Rather than focusing on rote memorization, the content is structured so that even non-security majors can understand the concepts, structure, and flow of industrial security. It is designed not only for exam preparation but also for practical application and career expansion.

This lecture is about automotive ECU cyber security based on a basic understanding of cryptography.

This lecture provides a general guide on how to prepare while studying when you want to choose a career in IT security penetration testing, and what questions and answers to prepare for the interview. I will share my experience working as a penetration testing consultant, at large companies, and in the financial sector, and currently running a penetration testing consulting business.

As AI systems become agentic and expand beyond text into image, audio, and multimodal capabilities, security threats are becoming significantly more complex. This lecture analyzes the latest security threats and attack techniques faced by AI Agents and Multimodal LLMs, as well as real-world cases, from an AI Red Teaming perspective.

Want to work for a long time as a super developer who can handle the entire process of service development and operation on your own? Then build a solid foundation in IT infrastructure knowledge from the ground up, which is just as important as various development languages!

Master AWS networking completely! Learn VPC, subnet, routing, and security with a focus on practical application, and design secure and scalable cloud network architectures. Complete the core skills that every working engineer must know in a short period of time!

This course systematically teaches practical Docker skills (installation→operation→automation→security) and comprehensively covers the latest security threats and countermeasures in each section. It features a hands-on approach where you learn by following along with practical exercises. This curriculum is highly recommended for DevOps engineers, infrastructure engineers, and security practitioners who want to experience the latest container/cloud environments in real-world scenarios.

This is a course where you can learn the basics of web technology. You can learn the basics of web technology in a short period of time. If you are interested in studying or getting a job related to the web, you must take this course!

IT services are rapidly transitioning to cloud environments. You will learn security practices from basic virtual infrastructure construction to security threat monitoring and vulnerability diagnosis for each area to secure the Amazon AWS cloud environment.