인프런 - 라이프타임 커리어 플랫폼

How do the sites we access every day work? Before we start studying data in earnest, let's take some time to learn about servers and the Internet, which are the background knowledge of IT.

Most large corporations and financial institutions are conducting penetration testing in addition to simulated hacking, so recently there is a need to establish new positions and secure capabilities to perform penetration operations using the RED TEAM terminology as is. Therefore, in addition to simple WEB and APP simulated hacking, we are opening an educational course that can provide practical training on large-scale personal information leakage after discovering scenarios that can penetrate servers. +Providing server and website environments where penetration testing can be performed +Sharing hacking tools and hacking methods

This lecture is designed for understanding even if you have no prior knowledge of what Secure Coding (Security Coding) is. After covering basic security coding concepts, it focuses on web service security. This was a special lecture presented under the auspices of OO University. It presents over 160 source codes with rich comments, pinpointing core topics and techniques immediately applicable in practice.

You can easily understand the principles and attack methods of **SQL Injection (SQLi)**, the most frequent and dangerous web vulnerability.

For those who have only seen Ethereum's structure in fragments, we'll organize everything from wallets, transactions, smart contracts, to the EVM into one cohesive flow. You can follow along even without a technical background.

- Provision of penetration testing environment and assessment tools - WEB penetration testing practice according to the 2025 revised edition of Critical Information and Communications Infrastructure - WEB penetration testing practice according to the 2025 revised edition of Electronic Financial Infrastructure - Review and sharing of vulnerabilities existing on websites - Education on penetration testing report writing methods and improvement measures

Risk assessment plans for network equipment, security equipment, and control systems based on the revised major information and communication infrastructure standards for the second half of 2025, and education for vulnerability elimination through the application of years of know-how and fast and accurate inspection and improvement measures In particular, expectations for efforts to secure inspection speed and improvement plans according to the designation of ISMS-P certification and ISO27001 certification scope Experience with network equipment, security equipment, and control systems that have relatively lower accessibility compared to servers, DB, WEB, WAS, PC, and Cloud (Public, Private), making environment setup difficult

Electronic Financial Infrastructure Vulnerability Analysis and Assessment based on 2025 standards, DBMS, WAS(PaaS), PC explained based on the Major Information and Communication Infrastructure standards revised in the second half of 2025 And penetration testing explained based on the standards revised in the second half of 2025 Additionally, mobile penetration testing as well Expected skill improvement through know-how transfer and fast and accurate inspection methods and remediation measures

Training for obtaining ISMS-P and ISO27001/ISO27701 certifications.

This course carefully selects the core systems that beginners must know in the vast field of information security. Instead of rigid theory, it's structured to help you intuitively understand system principles through clear analogies and practical examples. With this single course, you can grasp the big picture of information security systems as a whole and develop practical skills.

This course is a foundational learning program that covers Introduction to Information and Communication Technology, one of the core theories in computer engineering. Through this course, learners can understand the basic structure and operating principles of computers, and learn the principles and applications of information and communication technology based on this foundation. The course is structured to provide comprehensive learning from the processes of information generation, transmission, processing, and storage to data communication methods in network and internet environments. In addition to the basic concepts of information and communication technology, by understanding the trends and roles of information and communication technology utilized in real life and across industries, this course provides a solid theoretical foundation for learners who are first entering the fields of computer engineering and information and communication technology. 👉 By taking this course, learners can build a fundamental foundation in information and communication technology that encompasses computers and networks, and further utilize it for advanced learning or preparation for related certifications.

“Security solutions are numerous, but why can't threats still be stopped?” “Tools are overflowing but not interconnected, Warnings are pouring in, but aren't you missing what's truly important?” Now is the era when not just simple defense, but proactive and active 'action-oriented security' is needed. At its core is Microsoft's unified security. From ID, devices, apps, cloud, to infrastructure, connecting all security elements into one, AI detects, assesses, and eliminates threats in real time. Microsoft Security is not just a 'defense solution' but a real-time response system that protects the entire enterprise. Now, don't regret it after an incident occurs. Start security 'in advance', 'proactively', and 'smartly' with the Microsoft unified security platform, starting today.

This course is designed for practitioners who are just starting infrastructure security audits or are consuming significant resources on manual inspections. It's a hands-on process where we build a fully automated audit system together that automates inspection items based on Electronic Financial Supervisory Regulations, performs batch inspections of dozens to hundreds of servers through Ansible, and visualizes results using Django with filtering and Excel download capabilities.

Complete curriculum for beginners in hacking. From beginner to intermediate level, completed in one course.

This is the first step of the network basics lecture that you can learn even if you don't know the basics of networks, "Network Model".

-Learn about the information security continuous assessment items conducted annually for financial companies, and strengthen preparation and response capabilities as a financial security officer -Learn based on the highest-grade information security continuous assessment cases, and receive education on know-how to achieve and maintain the highest grade in information security continuous assessment

Voice phishing, URL, mobile, accounts, card usage, internet banking, ARS authentication, and other various financial fraud incidents are causing an increase in victims. Recently, hacking and fraud techniques utilizing various vulnerabilities such as open banking, simple payment (pay), strengthened fraud methods, hackers utilizing leaked personal information, and taking control of personal PCs and mobile devices are being reinforced. Financial authorities and various financial companies do not specifically disclose accident procedures and hacking methods related to financial consumers, which has led to growing misunderstandings among people who have never experienced hacking. We have recognized the seriousness of this issue through reports from our surroundings and have produced educational materials. Please, we hope you will recognize accurate hacking methods, and also understand related laws and policies to appropriately establish preventive systems and strengthen response measures in advance. (In case of incidents, it is your own responsibility under current law.)

Training on assessing the current status and inspecting personal (credit) information processing systems, pursuant to the Notification on Personal Information Security Measures and Appendix 3 of the Supervisory Regulations on Credit Information Act.

This is the most realistic and systematic job roadmap for beginners and novices in the information security field. Explore the 5 core job functions (planning, development, operations, assessment, monitoring) and learn how to become a strategic talent that companies seek first. End your vague concerns and design a clear career vision!

This course covers the importance of information security and personal data protection, providing systematic learning from essential knowledge needed in practice to the latest security issues. Based on the practical experience and expertise of personal data protection specialist instructor Jo Ah-young, it provides realistic education with a sense of field experience.