Description

The offered courses include both theoretical and practical parts. During the theoretical sessions, all the involved technological and functional aspects will be illustrated. In the practical sessions, attendees will be provided with tests (challenges and capture the flag competitions) to execute.

Such challenges consist of real-world applications and systems to be examined or hardened (depending on the course type). Every test will have a time limit according to its difficulty level. Finally, a participation certificate will be given to the students, attesting to their acquired abilities.

The topics of the courses provided by ISGroup deal with:

• Secure Coding, Web Application Code Review
• Web Application Penetration Testing
• Mobile Application Security Testing
• Network Hardening
• Hardening Linux, Windows, Solaris

Offensive

Offensive security courses concentrate on methods useful for subverting or violating systems and applications to take full control of the machine (the so-called "takeover"). In particular, what is already explained in the theoretical part will be discussed practically, showing meaningful examples of vulnerabilities in real applications.

The Offensive course offered by ISGroup guarantees training for highly qualified technicians who are actually able to examine system security and can possibly exploit existing vulnerabilities.

Defensive

Defensive security courses concentrate on methods useful for making systems and applications safe. In the theoretical part, concepts like systems hardening or safe code writing will be discussed, according to the kind of course.

In the practical part, some systems or vulnerable applications will be presented, and the participant will have to be able to make them safe or, as for the applications, to understand where the programming error has been committed. Examples will be taken directly from real vulnerabilities affecting well-known applications.