Cyber Security Body of Knowledge (CyBOK)

• Basic understanding of cyber security and software engineering

Audience

• Software engineers
• IT professionals

CyBOK is a structured approach to establishing foundational and standardized knowledge on cyber security. It aims to bring the cyber security field into a common academic curriculum and industry training framework, mapping the CyBOK knowledge areas.

This instructor-led, live training (online or onsite) is aimed at software engineers and IT professionals who wish to gain a deeper knowledge on CyBOK and strengthen theoretical and applied skills in cyber security.

By the end of this training, participants will be able to:

• Understand the fundamental concepts, definitions, and principles of cyber security.
• Acquire in-depth expertise in cyber security by implementing the CyBOK knowledge areas.
• Gain extensive and foundational knowledge to operationalize the CyBOK framework.
• Facilitate community and organization enablement to increase focus on data security and privacy.
• Expand opportunities to earn specialization and credentials for cyber security professions.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• Mostly open-source tools will be used. These tools will be based on your operating system (Windows, Linux, Mac, mobile devices, etc.) and organizational requirements.  Please contact us to arrange.
• To request a customized training for this course, please contact us to arrange.

Introduction

• Overview of Cyber Security concepts and definition
• Understanding the CyBOK knowledge areas (KAs)
• Implementing CyBOK knowledge to address security issues

Human, Organisational, and Regulatory Aspects

• Risk management and governance
• Law and regulation
• Human factors
• Privacy and online rights

Attacks and Defences

• Malware and attack technologies
• Adversarial behaviors
• Security operations and incident management
• Forensics

Systems Security

• Cryptography
• Operating systems and virtualisation
• Distributed systems security
• Formal methods for security
• Authentication, authorization, and accountability

Software Platform and Security

• Software security
• Web and mobile security
• Secure software lifecycle

Infrastructure Security

• Applied cryptography
• Network security
• Hardware security
• Cyber-physical systems security
• Physical layer and telecommunications security

Summary and Next Steps