Developer/Operator Security Training - Hacking Response and Security Enhancement Strategies

This is the second series of integrated courses that cover everything from the introduction to practical application of ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course T2. Certification criteria 2 (1/2)". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

You can understand the integrated log analysis construction step by step through practice using ELK, and it presents a method to visualize the logs of each system by integrating them. It can be used in various fields such as general data analysis utilization, breach incident analysis response, etc.

This is the first series of integrated courses that cover everything from the introduction to practical application of ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course T1. Certification system, certification standard 1". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

This training is a hands-on course covering infrastructure construction using Docker container technology, vulnerability analysis, and API web server diagnostics. It is designed to comprehensively learn from the basic concepts of Docker to its application in real-world environments, security vulnerability analysis, and response.

We covered everything about Metasploit, a vulnerability analysis framework used for mock hacking and vulnerability analysis work.

You will learn techniques that can be applied in various fields of IT security, starting from the introduction to Python programming.

This is the fourth series of integrated courses that cover everything from the introduction to practical application of ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course T3. Certification criteria 3". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

This is the third series of integrated courses that cover everything from the introduction to practical application of ISMS-P certification auditor qualification examination, "ISMS-P certification auditor qualification examination basic/practical course T2. Certification criteria 2 (2/2)". Based on actual information protection practice cases, you can also learn the detailed work of the certification system and information protection management system.

If you want to learn about various malware sample analysis methods after studying introduction to malware analysis and reversing, then you must take this course.

IT infrastructures are being moved to virtualization and cloud environments. Services are becoming more diverse, and many applications are being operated on the infrastructure. In order to respond to the security of increasingly complex infrastructures, various security devices are being introduced. However, this will be a lecture where you can sufficiently practice and prepare using open tools for things that you cannot experience without purchasing security devices.

Network packet analysis is essential when conducting incident analysis and vulnerability analysis. Among the tools available, Wireshark is the most widely used, and this course covers the complete utilization of Wireshark and provides understanding through incident analysis case studies.

In the second lecture of Python School, apply business automation to various fields such as IT security and IT development.

This is a basic course for those preparing for bug hunting (bug bounty) and mock hacking work. Web hacking is essential for mock hacking work. After learning web hacking, you can learn various cases from web hacking to system hacking by using a virtual web/server environment where you can study based on scenarios.

It includes module analysis and development stages using the vulnerability analysis framework Metasploit. This is the stage where you can freely use and utilize the modules you created after taking the beginner-intermediate Metasploit course. This is a high-level lecture that you cannot hear anywhere else in Korea or abroad.

Prepare for passing the exam by analyzing everything from A to Z to prepare for the recently difficult practical exam.

This lecture will help you understand cracking methods and solution diagnosis methods through reverse analysis of Windows applications. We will teach you how to apply OllyDBG step by step and the various techniques applied to Windows applications from the basics.

It would be efficient to automate IT security tasks using Python, wouldn't it? This course follows hands-on practice, applying Python and web Flask development to automate tasks, idea by idea.

IT services are rapidly transitioning to a cloud environment. You will learn security practices from the basics of building a virtual infrastructure to monitor security threats in each area and diagnose vulnerabilities to secure the domestic Naver cloud environment.

IT services are rapidly transitioning to cloud environments. You will learn security practices from basic virtual infrastructure construction to security threat monitoring and vulnerability diagnosis for each area to secure the Amazon AWS cloud environment.

The most difficult thing when malware is distributed is script obfuscation. Understand the obfuscation technique and analyze the malware executable file that is distributed after decrypting it.

In the rapidly changing era of AI, IoT, metaverse, and blockchain, understanding technology alone is not sufficient. This course is an introductory guide designed to help you easily identify the security risks brought by the latest digital technologies in just 1 hour. With easy explanations that can be understood even without technical background knowledge and a composition centered on real-world cases, you can organize the security points you must know in the next-generation digital environment all at once.

[Reflecting the latest related regulations and guidelines presented by the Korea Financial Security Institute, Financial Supervisory Service, and Personal Information Protection Commission] In the rapidly changing digital financial environment, security has become not an option but a core survival strategy. This course covers the new directions of financial security changing with digital transformation, strategic response methods, and practical approaches to establishing a security culture within organizations. We will examine the policy directions of the Korea Financial Security Institute, the latest regulatory trends, and global security trends together, learning security innovation strategies centered on people and organizations beyond technology-focused approaches.

As AI systems become agentic and expand beyond text into image, audio, and multimodal capabilities, security threats are becoming significantly more complex. This lecture analyzes the latest security threats and attack techniques faced by AI Agents and Multimodal LLMs, as well as real-world cases, from an AI Red Teaming perspective.

This course carefully selects the core systems that beginners must know in the vast field of information security. Instead of rigid theory, it's structured to help you intuitively understand system principles through clear analogies and practical examples. With this single course, you can grasp the big picture of information security systems as a whole and develop practical skills.

KCA Information Security Risk Manager (ISRM) certification course! The cornerstone for acquiring the top 3 personal information protection certifications: CPPG, ISMS-P!

This course puts an end to Linux server operational vulnerabilities caused by incorrect permissions. Master file and directory permission control based on real-world industry standards.

This is a lecture [Certification and Practice (Security · Network), Security] prepared for beginners.

Repeatedly study the 100 most frequently appearing CPPG core topics through theory, mind maps, and problem solving.