인프런 - 라이프타임 커리어 플랫폼

Insufficient capability to audit new technologies (cloud management systems) due to a lack of theory and knowledge among management system inspection personnel. Training to strengthen the expertise of personnel who proactively prevent incidents by identifying management system deficiencies to protect companies from hacking. Training for existing infrastructure and penetration testing personnel to transition into management system roles. Securing definitive capabilities and materials through the provision of back data!

In cases where there is a lack of experience with electronic financial infrastructure due to only having experience in critical information and communications infrastructure, or where there is a lack of overall understanding of infrastructure projects due to insufficient experience as an Infrastructure PL or PM despite having experience with servers, DBs, networks, and security equipment, it is necessary to secure assessment capabilities for network infrastructure check items and provide assessment back-data.

As PaaS (previously categorized as WEB/WAS) in public and private cloud environments is integrated into in-house PaaS operations, this training is designed for Infrastructure Project Leaders (PLs) overseeing approximately 10 infrastructure inspection personnel, as well as vulnerability assessment specialists. The curriculum covers certification requirements such as ISMS-P, including cloud asset identification, asset classification, importance rating, and risk assessment reflection. It also addresses the 2026 Financial Company Security Standards (for Electronic Financial Infrastructure Vulnerability Analysis and Evaluation), which include the establishment and strengthening of container inspection and private cloud management system inspection items, as well as the addition and modification of virtualization and cloud items within Critical Information and Communication Infrastructure.

Lack of back data for private cloud inspections!! A severe shortage of experienced personnel for IaaS inspections!! Improve practical skills by providing back data and utilize it for various certifications such as Major Information and Communication Infrastructure, Financial Security Institute (FSI) assessments, ISMS-P, ISO27001, etc. Professional training for Infrastructure Project Leaders (PLs) who manage around 10 infrastructure inspection personnel. Providing inspection data and understanding of the technical areas within the cloud management framework!

Providing insights and materials for overall management of penetration testers (WEB, Mobile, HTS) targeted at Project Leaders who oversee financial company mock hacking/penetration testing. Situations have occurred where "blank" reports are repeatedly submitted when no vulnerabilities are found in each part (the same applies to the public sector). Therefore, controls are implemented to ensure that inspection results for each item are produced in the same format as educational materials. Perform inspections tailored to each theme and utilize them for security reviews and internal security deliberations to verify results.

This is the easiest introductory course for those new to information security. You can get a feel for real-world tasks by experiencing the five core roles: planning, development, operations, assessment, and monitoring. Start building your own career roadmap for employment or a career transition.

This is an introductory malware analysis course that even beginners can easily understand. Based on methodologies such as static analysis, dynamic analysis, and automated analysis of malware analysis, you will analyze various sample cases. It also covers in detail how to use various tools necessary for malware analysis.

[2nd Edition scheduled for completion in 2026] This course is designed to be understood even if you have no prior knowledge of Secure Coding. It covers basic secure coding concepts first, followed by a focus on web service security. This lecture was originally conducted as a special seminar hosted by OO University. With over 160 source codes provided alongside rich commentary, it pinpoints core topics and techniques that can be applied immediately in practical work.

Career concerns in security consulting: 5 hours of audio explanations covering career solutions from entry-level to 30-year veterans. Includes mental stability and salary negotiation strategies for new security consultants or those struggling to adapt. Includes methods for upgrading job skills and improving internal/external reputation. A lecture designed to resolve concerns for those considering a job change or career path shift.

Training for establishing risk assessment methods for network equipment, security devices, and control systems based on the revised Critical Information and Communication Infrastructure standards for the second half of 2025, and eliminating vulnerabilities through the integration of years of know-how and fast, accurate inspections and remedial actions. In particular, we expect efforts to secure inspection speed and improvement plans in accordance with the designation of ISMS-P and ISO27001 certification scopes. Gain experience with network equipment, security devices, and control systems—which are relatively less accessible and more difficult to set up environments for compared to Servers, DBs, WEB, WAS, PCs, and Cloud (Public, Private).

Vulnerability analysis and evaluation for electronic financial infrastructure as of 2025, covering DBMS, WAS (PaaS), and PC based on the revised standards for critical information and communications infrastructure in the second half of 2025. Additionally, penetration testing explained according to the standards revised in the second half of 2025, including mobile penetration testing. Expect skill improvement through the transfer of know-how, along with fast and accurate inspection methods and remediation plans.

Victims of various financial fraud incidents, such as voice phishing, malicious URLs, mobile scams, account and card misuse, internet banking fraud, and ARS authentication scams, are on the rise. Recently, hacking and fraud techniques have become more sophisticated, exploiting vulnerabilities in open banking, simple payment services (Pay), enhanced scam methods, hackers' use of leaked personal information, and the takeover of personal PCs and mobile devices. Financial authorities and various financial institutions do not specifically disclose the procedures of these incidents or the hacking methods used to financial consumers. Having received reports from those around me about the growing misunderstandings among people who have never experienced hacking, I recognized the seriousness of the situation and produced this educational material. I sincerely hope you gain an accurate understanding of hacking, comprehend the relevant laws and policies, and properly establish proactive prevention systems and strengthen response measures. (Under current law, you are responsible for any incidents that occur.)

Developed to submit annual performance records, including the establishment of information security regulations and the preparation of various activity evidence, by applying domestic and international certification standards for Information Security Management Systems (ISMS) and internal/external audit criteria to the revised Risk Assessment standards for the Management and Physical sectors of Critical Information and Communication Infrastructure in the second half of 2025. The plan is designed to prepare for changes in the external environment (AI, etc.), internal environment (new systems and changes in employees/external staff), and new evaluation indicators and legal amendments. It aims to establish activity plans to advance information security levels compared to the previous year. Specifically, it involves objectively and meticulously inspecting various activities to strengthen accident prevention systems—such as personal information leaks caused by hacking—and establishing plans for the headquarters to supervise all departments and ensure the secure management of contractors. This includes operating DevSecOps systems following the introduction of AI systems and implementing Privacy by Design (PbD) adequacy review frameworks. The execution is based on expanding monitoring and periodic inspection report areas, external disclosure areas, data linkage system inspections (API, MyData, etc.), establishing network separation improvement plans according to N2SF, and advancing Zero Trust implementation. *Possessing over 150 references for establishing and applying the world's first and highest-level information security and personal information protection activities and system enhancement plans.

You can easily understand the principles and attack methods of **SQL Injection (SQLi)**, the most frequent and dangerous web vulnerability.

This training is a hands-on course covering infrastructure construction using Docker container technology, vulnerability analysis, and API web server diagnostics. It is designed to comprehensively learn from the basic concepts of Docker to its application in real-world environments, security vulnerability analysis, and response.

RTL (Red Team Lite) is an introductory red team course that teaches the concepts and technical elements required for full-chain red team penetration testing—including attacker infrastructure setup, C2 advancement, payload creation, information gathering, initial compromise, foothold establishment, privilege escalation, lateral movement, post-exploitation, and data exfiltration—through real-world attacker TTPs.