Training

Brief syllabus of the training:

• Intro
• What is a SOC
• Purpose of SOC
• Building an effective SOC
• Where to find help

About lecturer

The content of the training is the list of the most common web application vulnerabilities known as OWASP TOP10 2017, supplemented with specific situations and examples that participants of the 2-day workshop will be able to test on pre-prepared VMS / docker containers using recommended tools. The content is build on the principles and essence of these vulnerabilities, content is agnostic to your favorite programming language. In other words, it doesn't matter if your applications are built on PHP, .Net or AngularJS...

Course outline:

1. Introduction - IT security principles
2. Basics of secure SW development
3. Work with SW tools for vulnerability detection

Individual types of vulnerabilities are the following chapters of the course:

1. Injection
2. Broken Authentication
3. Sensitive Data Exposure
4. XML External Entities (XXE)
5. Broken Access Control
6. Security Misconfiguration
7. Cross-site scripting - exploitation and defense
8. Errors associated with deserialization
9. 1-day vulnerability and patch management
10. Errors associated with logging and monitoring

• 2-day workshop - you can try the lectured examples in a virtual environment that we will create and make available for you even after the end of the course
• Price includes:

- preparation and adaptation of the lecture according to the client's specific requirements

- transport to the training site (Prague and its surroundings)

- preparation and access to LABs - demonstration environment (only 2-day workshop)

- possibility to communicate with the supervisor after the course on the topics contained in the course

About lecturer

Brief syllabus of the training:

• Why SIEM (what is that thing?)
• What do I need? (a.k.a. Hitchhiker guide to the SIEM)
• Regulations
• Analysis (I have logs!! And I can read them! Or maybee not.. )
• Incident handling
• When implementing a SIEM, goes wrong…

About lecturer

Brief syllabus of the training:

• What are privileged users
• How privileged users differ from other types of users
• Risk management for privileged users
• Identity vs. Access Management
• Steps to secure different types of privileged user accounts

About lecturer

Course syllabus (1 day):
 
Morning:
- Introduction to performance testing
- What is performance testing
- Why performance testing
- What areas does performance testing cover?
- Types of performance tests
- How to read test results - metrics and typical patterns
- Introducing Apache JMeter
- Preparation of a comprehensive test scenario
- Common script build components
- Functions and variables
 
Afternoon:
- Advanced settings
- Script upload option
- JMeter Plugins
- Running tests
- Headless mode (no GUI - starting from console)
- Cloud extensions (BlazeMeter)
- How to configure
- Continuous Integration with Jenkins
- REST API testing
- Load distribution from multiple machines
 
Prerequisites per participant:
Basic knowledge of HTTP protocol and principles of operation of web applications (client-server architecture - eg REST etc.) is expected.

About lecturer

Course syllabus (variable):
 
SoapUI Basics
 
- Introduction to SoapUI
- installation
- Integration tests + introduction
- basic settings, description and explanation of functional elements
- examples of working with XML / JSON calls
- first project and call = project creation
- setup and explanation of Assertions, Test Suite, Test Case, Test Step, ...
 
 
Prerequisites per participant:
The prerequisite is knowledge of basic test methodology and practical experience with testing.

About lecturer

• What is a test management
• What is a test leading
• Responsibilities of test manager and test leader
• Practical test management and leading in working environment (experience and examples)

About lecturer

• Introduction to the training
• What is self-presentation
• Why is self-presentation important
• What are the ways of self-presentation
• How to write a good resume
• Options for creation - portals, tools, templates
• What are the requisites of a good resume and what we should not write in it
• Distribution, job application, application for a project
• Self-presentation at the job interview - online interview
• LinkedIn - registration
• A profile creation
• Task to do

About lecturer

Course syllabus (variable):

 
SoapUI Advanced
 
- use of variables (filling, usage, modification) - Property transfer / Groovy, XPath
- Use Properties
- basic scripting / usage (Groovy) = example samples
- advanced scripting (Groovy)
- call simulation (mock) - Create a mock
- Basic Load tests (demonstration, explanation, possibilities and comparison with other tools)
- SoapUI tuning - comparison with API Ready (SoapUI PRO)
 
 
Prerequisites per participant:
The prerequisite is knowledge of basic test methodology and practical experience with testing.

About lecturer

Brief syllabus of training

1. Prerequisites check
2. Basics of Java
3. About Selenium WebDriver
4. Installation and commissioning of the first self-test
5. Working with identifiers
6. Assignment of individual work and consultation

About lecturer

• Test analysis
• Execution Test
• Test data
• Inputs for test analysis
• Test scenario writing
• Entering bugs

About lecturer

Brief syllabus of training

1. About Java and how it works
2. Explanation of basic principles and concepts
3. Demonstration of how to write commands
4. Assignment of individual work and consultation

Detailed training syllabus

1. What is Java and how does it work?
2. Development tools and prerequisites
3. Introduction to InteliJ and project creation
4. Object-oriented approach (Principle, basic concepts, classes, instances, methods)
5. Basic data types (Primitive, Object)
6. Constructors (implicit, explicit)
7. Keyword "this"
8. Access modifiers
9. Conditions
10. Assigning individual work to create your own console application
11. Completion of training and final questions

Training time

o The training outline is designed for about 1,5 - 2hours (depending on correctly installed prerequisites and programming speed of the console application)

About lecturer