This training aims to equip defense industry employees with the foundational principles of cybersecurity, help them identify digital threats, and effectively protect both personal and corporate data. The goal is to raise awareness of cyber threats, minimize the risks posed by cyber attacks, and provide the necessary knowledge and skills to implement basic security measures for those working in critical infrastructure sectors, such as the defense industry.

Throughout the training, participants will learn essential cybersecurity concepts and strengthen their defense reflexes by recognizing threat types, such as social engineering attacks, malware, and phishing. The objective is for individuals working in the defense industry to adopt a cybersecurity culture within their specific roles and ensure the highest level of security for critical information.

Day 1: Cyber Security Fundamentals and Awareness

• Module 1: Introduction to Cyber Security
  • What is cybersecurity?
  • The importance of cybersecurity and Cybersecurity in Depth
  • Current cyber threats and attack types (APTs, malware, phishing, etc.)
• Module 2: Basic Concepts and Cybersecurity Terminology
  • The CIA Triad (Confidentiality, Integrity, Availability)
  • Authentication, authorization, encryption concepts
  • Fundamentals of security policies and procedures
• Module 3: User Security and Cyber Awareness
  • Creating strong passwords and password management
  • Social engineering attacks and protection methods
  • Recognizing phishing emails and phishing methods
• Module 4: Security Threats in the Defense Industry
  • Threat actors targeting the defense sector and their motivations
  • Examples of real cyberattacks and lessons learned

Day 2: Basic Technical Information and Practical Security Measures

• Module 5: Fundamentals of Network Security
  • Network structures and security devices (Firewall, IDS/IPS)
  • Secure remote access: VPN usage
  • Network access controls (NAC, 802.1x, Radius)
• Module 6: Malware and Protection Methods
  • Types of malware: Virus, worm, ransomware, spyware
  • Importance of anti-virus software and security updates
  • Sample malware analysis (demonstration)
• Module 7: Secure System Usage
  • Basic security settings in operating systems (Windows and Linux)
  • Software patches and update management
  • Secure data backup and data recovery methods
• Module 8: Basic Penetration Testing and Applied Case Study
  • Importance of security tests
  • General stages of penetration tests
  • Sample vulnerability scan (practical application demonstration)

Day 3: Incident Response, Reporting, and Cybersecurity Culture

• Module 9: Incident Management and Response
  • Detection and types of cybersecurity incidents
  • Incident response steps: Identification, isolation, analysis, and solution
  • Creating an incident response plan
• Module 10: Reporting and Communication in Cybersecurity
  • Cybersecurity incidents reporting and documentation
  • Internal and external communication strategies
  • Preparing effective cybersecurity reports for managers
• Module 11: Cybersecurity Culture and Best Practices
  • Developing a corporate cybersecurity culture
  • Roles and responsibilities of employees
  • Continuity of internal threats and security awareness training
• Module 12: General Assessment and Q&A
  • Summarizing key learnings from the training
  • Answering questions from participants

• Gain cybersecurity awareness and recognize threats specific to the defense industry.
• Be able to protect both personal and corporate data by applying basic security measures.
• Contribute to incident response processes and act quickly in the event of a cyberattack.
• Adopt a cybersecurity culture and develop secure digital working habits.

Participant Requirements:
• Basic knowledge of computer and internet usage
• Motivation to gain cybersecurity awareness
• Awareness of the importance of critical information security

This training is suitable for in-class or hybrid participation.
Theoretical Explanations: Basic concepts and threats are explained through lectures.
Practical Studies: Security measures and technical demonstrations will be performed.
Interactive Studies: Group work, discussions, and Q&A sessions will encourage participant engagement.
Scenario-Based Training: Analysis and practical applications will be carried out using sample scenarios tailored to the defense industry.
Assessment: Short tests and feedback sessions will reinforce learning outcomes.

Online documentation from organizations such as ISC2 and CompTIA.

This training aims to familiarize participants with fundamental cyber security technologies and enable them to use these technologies effectively through practical exercises. During the training, participants will gain the skills to secure digital systems, detect threats, and implement basic security measures by learning about cyber security tools and techniques. This program, designed for individuals working in critical sectors such as the defense industry, aims to enhance technical awareness of cyber threats, develop competence in using security technologies, and prepare participants for real-world scenarios through hands-on practice.

Day 1: Cyber Security Fundamentals and Threat Detection

• Module 1: Cyber Security Philosophy and Topology
  • Cyber security philosophy
  • Cyber security topology (network, endpoint, data, perimeter security)
  • Digital threats and types of cyber attacks (APT, malware, ransomware, etc.)
• Module 2: Basic Cyber Security Technologies
  • Blue Team, Red Team, and Purple Team approaches
  • Network security technologies, Web security technologies, Endpoint, Data security, etc.
  • Security protocols, services, and applications (HTTPS, SSL/TLS, VPN, etc.)
• Module 3: Threat Detection and Malware
  • Malware: Viruses, worms, Trojans, ransomware
  • Threat detection tools: Anti-virus software, IDS/IPS systems
  • Practical: Malware analysis and detection
• Module 4: Network Security and Attack Detection
  • Network traffic monitoring and analysis tools (Wireshark, tcpdump)
  • Types of network attacks and protection methods (DDoS, Man-in-the-Middle, etc.)
  • Practical: Basic network attack simulation and detection

Day 2: Security Tools and Applied Techniques

• Module 5: Network Security Technologies
  • Firewall configuration and management
  • IDS/IPS installation and configuration
  • VPN and tools for secure remote connections
• Module 6: Encryption and Data Security
  • Asymmetric and symmetric encryption methods
  • Data encryption tools and usage (GPG, OpenSSL)
  • Techniques for secure communication (E2EE)
• Module 7: Web Application Security and Protection
  • Fundamentals of web application security
  • SQL injection, XSS, and CSRF attacks
  • Practical: Web application security testing and vulnerability scanning
• Module 8: Endpoint Secure System Management
  • Operating system security (Windows/Linux)
  • Updates and security patches
  • Practical: Operating system security configurations

Day 3: Incident Response and Security Monitoring

• Module 9: Incident Response and Monitoring
  • Incident detection, response, and reporting processes
  • Security incident management software (SIEM)
  • Practical: Analysis and reporting through an incident management platform
• Module 10: Security Monitoring Tools
  • Network monitoring and attack detection tools (Snort, Suricata)
  • Log analysis and security monitoring
  • Practical: Basic log analysis and attack detection
• Module 11: Penetration Testing and Vulnerability Scanning
  • Penetration testing and vulnerability analysis tools (Kali Linux, Nmap, Nessus)
  • Basic penetration testing steps
  • Practical: Penetration testing scenario and implementation
• Module 12: General Evaluation and Q&A
  • Summarizing what was learned during the training
  • Answering questions from participants

• Gain the ability to use basic security tools.
• Acquire knowledge about malware and network attacks.
• Gain an understanding of secure network and system management.

• Basic knowledge of operating systems (Windows and/or Linux).
• Ability to use web browsers and basic computer software.
• Familiarity with basic network concepts such as IP addressing, network protocols (TCP/IP), DNS, and HTTP.
• Basic knowledge of cyber security threats and protection methods (e.g., phishing, malware).
• Willingness to learn more about cyber security and open to learning how to use basic security tools.
• Successful completion of the SG-TS1 training at SSA.

Suitable for in-class or hybrid participation.
Theoretical Training: Basic cyber security concepts will be explained through presentations and concept clarifications.
Practical Training: Hands-on practices with security tools, penetration testing, and vulnerability scanning.
Interactive Participation: Participants will actively engage in group studies, Q&A sessions, and discussions.
Scenario-Based Training: Hands-on practice with real-world scenarios.
Assessment and Feedback: Learning will be reinforced through short tests and post-training evaluations.

Online documentation from organizations such as ISC2 and CompTIA.

This training aims to equip participants with fundamental knowledge and skills in network and system security. During the training, participants will learn how to secure network infrastructures, detect vulnerabilities, strengthen system security, and protect against various attacks. Additionally, through hands-on practice, they will gain experience in effectively applying security measures using network security tools and system configurations.

Designed specifically for individuals working in the defense industry, this training will provide the essential knowledge needed to protect critical infrastructures and develop effective defense strategies against cyber threats.

Day 1: Fundamentals of Network Security and Tools

• Module 1: Fundamentals of Network Security
  • Introduction to network security and key concepts
  • Network protocols (TCP/IP, UDP, HTTP, DNS) and their importance in security
  • Firewalls, network segmentation, VPNs
• Module 2: Network Threats and Types of Attacks
  • DDoS (Distributed Denial of Service) attacks
  • Man-in-the-Middle (MITM) attacks
  • Sniffing, spoofing, and ARP poisoning attacks
  • Practical: Monitoring network traffic to understand basic network attacks (using Wireshark)
• Module 3: Firewalls and Network Monitoring Tools
  • Configuring and managing firewalls
  • IDS/IPS systems (Intrusion Detection/Prevention Systems)
  • Practical: Simple firewall configuration and attack detection with network monitoring tools
• Module 4: VPNs and Secure Remote Connections
  • VPN technology and its use cases
  • Types of VPNs and security vulnerabilities

Day 2: System Security and Vulnerability Management

• Module 5: Fundamentals of System Security
  • Introduction to system security and key concepts
  • Operating system security: Windows and Linux
  • User access controls and permission management
• Module 6: Windows and Linux System Security
  • Windows security and PowerShell practices
  • Linux security and scripting practices
• Module 7: System Updates and Patch Management
  • Update and patch management processes
  • Automatic updates and manual patch application
• Module 8: Secure Configuration and Permission Management
  • Secure system configurations and best practices
  • Access control and managing security vulnerabilities in systems

Day 3: Current Practices in Network and System Security and Case Study

• Module 9: Current Network Security Practices and Applications
  • Current network security technologies: Zero Trust security model, Micro-segmentation, SD-WAN (Software-Defined WAN), and modern network security solutions
  • Measures against new threats: Ransomware strategies, IoT security, cloud security
  • Practical: Configuring modern network security solutions (working on Zero Trust model)
• Module 10: Current Practices in System Security
  • Linux and Windows security updates: Latest vulnerabilities and patches
  • Current attack tactics and defense methods: Detecting exploits and vulnerabilities, developing defenses against new threats
  • Practical: Identifying system vulnerabilities and applying security patches quickly
• Module 11: Case Study – Working on a Real Attack Scenario
  • Scenario Introduction: Participants will simulate a current cyber attack (e.g., Ransomware attack or network breach) and develop a solution
  • Network and System Security Response: Attacks will be detected, and security vulnerabilities in the network and systems will be identified and defense methods applied
  • Practical: Participants will develop and apply appropriate network and system security measures against a specific cyber attack
• Module 12: Conclusion Assessment and Closing
  • Case Study Assessment: Participants will discuss the solution to the case study and exchange ideas on best practices
  • General Evaluation: A final evaluation of the knowledge and practices learned during the training

• Learn the fundamentals of network and system security
• Gain practical skills in configuring firewalls and basic system configurations
• Acquire knowledge of current security solutions such as Zero Trust, SD-WAN, and others

• Ability to perform basic tasks on Windows and/or Linux operating systems
• Ability to use internet browsers and basic computer software
• Familiarity with basic network concepts like IP addressing, network protocols (TCP/IP), DNS, and HTTP
• Basic knowledge of cybersecurity threats and protection methods (e.g., phishing, malware, etc.)
• Willingness to acquire more knowledge in cybersecurity and learn how to use basic security tools
• Successful completion of SG-TS2 training at SSA

Suitable for in-class or hybrid participation.
Theoretical Training: Basic cybersecurity concepts will be taught through presentations and concept explanations
Practical Training: Hands-on exercises with security tools and vulnerability scanning
Interactive Participation: Participants will actively engage in group work, Q&A sessions, and discussions
Scenario-Based Training: Participants will practice responding to real-world scenarios
Evaluation and Feedback: Learning will be reinforced through short tests and post-training evaluations

Online documentation from organizations such as ISC2, Cisco, Microsoft, and Comptia

This training aims to provide participants with fundamental knowledge of web applications and database security and to develop their skills in detecting and preventing security vulnerabilities. Participants will learn to recognize common security vulnerabilities in web applications (such as SQL Injection, Cross-Site Scripting - XSS, Cross-Site Request Forgery - CSRF, etc.) and effective defense techniques to prevent these vulnerabilities. Additionally, participants will practice the best practices for database security, security configurations, and data protection methods.

This training, aimed at critical applications and database security in the defense industry, will enhance participants’ ability to securely configure and manage web applications and databases. The course will be supported by real-world scenarios and practical examples, providing participants the opportunity to gain hands-on experience.

Day 1: Web Application Security Basics

• Module 1: Introduction to Web Application Security
  • Structure of web applications and their basic security needs
  • Secure software development principles
  • OWASP Top 10 security vulnerabilities
• Module 2: Common Web Application Attacks
  • SQL Injection (SQLi) and prevention
  • Cross-Site Scripting (XSS) and secure coding
  • Cross-Site Request Forgery (CSRF) and prevention methods
• Module 3: Web Security Tools and Techniques
  • Web security browsers (Burp Suite, OWASP ZAP)
  • Vulnerability scanning in web applications
  • Practical: Security vulnerability scanning using Burp Suite
• Module 4: Secure Web Application Development
  • Secure coding techniques
  • Data validation and sanitization
  • HTTPS, HTTP headers, and secure connections
  • Practical: Secure form validation and XSS prevention

Day 2: Database Security Basics and Application

• Module 5: Database Security Basics
  • Types of databases (SQL, NoSQL) and their security needs
  • Database access control and user management
  • Encryption and data integrity methods
• Module 6: SQL Injection and Database Security
  • SQL Injection (SQLi) attacks and their impacts
  • Database security measures and best practices
• Module 7: Database Security Tools and Practices
  • Database scanning tools (SQLMap, DB-Secure)
  • Secure database configuration and management
  • Practical: Detecting and reporting database security vulnerabilities
• Module 8: Data Encryption and Backup
  • Data encryption methods (AES, RSA)
  • Backup and data security
  • Practical: Database backup and encryption practices

Day 3: Web and Database Security Applications and Case Study

• Module 9: Advanced Web Application and Database Security Techniques
  • Secure API management (OAuth, JWT)
  • Auditing and reporting in web applications and databases
  • Cloud security (AWS, Azure security)
• Module 10: Web and Database Security Scenarios
  • Real-world case scenarios: Web application and database attacks
  • Scenario analysis and developing security measures
  • Practical: Developing solutions for a real-world attack scenario
  • Penetration testing techniques in web application and database security

• Recognizes common security vulnerabilities and gains the ability to detect them.
• Implements security measures such as SQL Injection prevention and data encryption.
• Uses web security and database scanning tools effectively.

• A general understanding of network security and basic cybersecurity concepts (firewalls, VPN, IP addressing, etc.) is required.
• Basic knowledge of web programming languages such as HTML, JavaScript, and basic PHP will be helpful for understanding web application security.
• Basic knowledge of SQL and familiarity with database management systems (such as MySQL or PostgreSQL) is recommended.
• Must have successfully completed SG-TS2 training at SSA.
• Must have participated in SG-TS1 or TS2 at SSA.

Suitable for classroom or hybrid participation.
Theoretical Training: Basic cybersecurity concepts will be explained through presentations and conceptual explanations.
Practical Training: Hands-on applications of security tools and vulnerability scanning will be conducted.
Interactive Participation: Group work, Q&A sessions, and discussions will involve participants actively.
Scenario-Based Training: Participants will practice responding to real-world scenarios.

Online documentation from organizations such as OWASP, SANS, and EC-Council.

This training aims to develop mid-to-advanced level network security specialists. Participants will gain in-depth knowledge in identifying security vulnerabilities in network infrastructures, anticipating attacks, and designing effective defense strategies to ensure network security. The program covers a wide range of technical skills, from configuring network security protocols to penetration testing and incident response.

Participants will receive comprehensive training on advanced topics such as network attacks, threat analysis, traffic monitoring, and firewalls. They will practice real-world scenarios to develop effective solutions against cyber threats. The training also aims to optimize network security monitoring and incident management processes, enabling participants to establish a strong network security infrastructure within their organizations.

Day 1: Network Security Fundamentals and Advanced Protocols

• Module 1: Fundamentals of Network Security and Emerging Threats
  • Concepts of network security and the current threat landscape
  • Network security risk management
  • Identifying and preventing attack surfaces
• Module 2: Advanced Network Protocols and Security Applications
  • In-depth analysis of TCP/IP protocols
  • Configuration of security protocols: VPN, IPsec, SSL/TLS, DNSSEC, BGP, and others
  • Secure network design and segmentation
• Module 3: Firewalls and Network Access Control
  • Types of firewalls and configuration methods
  • NAC, Access Control Lists (ACL), NAT, and port security
  • Practical: Firewall configuration and traffic control
• Module 4: Advanced Network Monitoring and Traffic Analysis
  • Network monitoring tools (Wireshark, tcpdump, etc.)
  • Traffic analysis and attack detection techniques
  • Practical: Network traffic analysis and anomaly detection

Day 2: Network Security Products and Solutions – IPS/IDS, DDoS, Load Balancer, and WAF

• Module 5: IPS/IDS (Intrusion Prevention and Detection Systems)
  • IPS and IDS concepts: Differences and functionalities
  • Network-based and host-based IPS/IDS solutions
  • Working principles and configuration recommendations
  • Role and effective usage of IPS/IDS in network security
• Module 6: DDoS (Distributed Denial of Service) Attacks and Protection Methods
  • Definition and types of DDoS attacks (Volumetric, Protocol, Application Layer)
  • DDoS protection methods: Blackholing, Rate Limiting, Geo-blocking
  • DDoS protection tools and services
  • Practical: DDoS attack simulation and implementation of defense measures
• Module 7: Load Balancer and WAF Solutions
  • Load balancing concepts and its importance in networks
  • Types of Load Balancers: Hardware-based and software-based (F5, Nginx, HAProxy)
  • Load balancing algorithms (Round-robin, Least Connections, IP Hash)
  • WAF (Web Application Firewall) concepts and its role in the network
  • WAF solutions: Cloud-based vs. hardware-based (AWS WAF, Cloudflare WAF, ModSecurity)
  • Web application security threats: SQL Injection, XSS, CSRF and protection with WAF
  • Practical: WAF configuration and testing web application security

Day 3: Network Security Monitoring, Security Management, and Hands-on Practices

• Module 9: Network Security Monitoring and Management Systems
  • Network security monitoring tools and system management
  • Log management and analysis methods
• Module 10: Secure VPN and Remote Access Solutions
  • VPN protocols (IPsec, SSL) and secure configurations
  • Remote access security and two-factor authentication (2FA)
• Module 11: Best Practices and Advanced Configurations for Network Security
  • Secure network design and firewall configurations
  • Practical: Advanced network segmentation and security policies
  • Best practices for preventing network attacks
• Module 12: Real-World Scenarios and Case Studies
  • Real-world network attack scenarios: design, detection, analysis, and resolution
  • Practical: Analyzing and solving network security scenarios

• Understand advanced network security threats and protection methods.
• Configure and use security systems such as Firewalls, IPS/IDS, DDoS, Load Balancers, and WAF.

• Knowledge of Networking Basics: Basic knowledge of TCP/IP, network protocols (IP, DNS, HTTP, etc.), and network devices.
• Experience in Network Configuration and Management: Familiarity with basic network management, routers, switches, and network topologies.
• Basic Security Knowledge: Familiarity with fundamental network security concepts like firewalls, VPNs, and basic security protocols (SSL/TLS, IPsec).
• Participation in SG-TS3 at SSA is required.

The training is suitable for classroom-based or hybrid participation.
Theoretical Training: Basic cybersecurity concepts will be explained through presentations and concept clarifications.
Hands-on Training: Practical applications like using security tools and vulnerability scanning.
Interactive Participation: Group work, Q&A sessions, and discussions will actively involve participants.
Scenario-Based Training: Participants will practice incident response through real-world scenarios.

• De Alencar, M. S. (2022). Cryptography and Network Security. River Publishers.
• Online documentation from organizations such as EC-Council and CompTIA.

This training aims to provide participants with in-depth knowledge and skills in the field of system and endpoint security. Participants will learn advanced protection methods, threat detection techniques, and pre/post-attack security strategies necessary to ensure the security of corporate systems. The training covers critical topics such as endpoint security, system security, vulnerability management, and security monitoring.

Participants will gain proficiency in identifying security vulnerabilities in modern operating systems, network configurations, and endpoint devices, as well as developing defense methods against these vulnerabilities. Additionally, they will utilize the latest security tools and technologies to develop effective defense strategies against cyberattacks and practice through real-world scenarios.

Day 1: Fundamentals and Applications of System Security

• Module 1: Fundamentals of System Security
  • What is system security? Core principles and defense strategies
  • Securing operating system configurations (Linux, Windows)
  • Security updates and patching
  • Usage and configuration of basic security protocols
• Module 2: Vulnerability Management and Operating System Flaws
  • Vulnerability scanning tools (Nessus, OpenVAS, etc.)
  • Known vulnerabilities and zero-day attacks
  • Identifying vulnerabilities at the application and system levels
  • Mitigation and preventive methods for security gaps
• Module 3: System Security and Access Control
  • User and group management, access control lists (ACLs)
  • File system security and encryption methods
  • Kerberos and Active Directory security
  • Secure authentication methods and multi-factor authentication (MFA)
• Module 4: System Monitoring and Security Logs
  • Importance and management of security logs
  • Syslog and event logging at the operating system level
  • Anomaly detection and attack monitoring

Day 2: Endpoint Security and Threat Management

• Module 5: Fundamentals of Endpoint Security
  • Concept and importance of endpoint security
  • Endpoint threats: Viruses, malware, ransomware, phishing
  • Security software and antivirus solutions for endpoint devices
  • Endpoint Detection and Response (EDR) solutions
• Module 6: Threat Hunting and Proactive Security Approaches
  • Threat hunting methods
  • Techniques for early detection of attacks
  • Proactive defense techniques for endpoints
• Module 7: Endpoint Network Management and Access Control
  • Access control and policies for endpoint devices
  • BYOD (Bring Your Own Device) security
  • VPN and secure remote access solutions
  • Secure network connections and monitoring methods
• Module 8: Attack Detection and Incident Response
  • Types of attacks on endpoints and anomaly detection
  • Incident response and processes for countering cyberattacks
  • Incident response plans and vulnerability mitigation

Day 3: Advanced Security Applications and Case Studies

• Module 9: Advanced Endpoint Security Solutions
  • Advanced solutions for endpoint security: Antivirus, EDR, XDR
  • Advanced endpoint security software and configurations
  • Best practices for endpoint security management
  • Hands-on: Implementation of advanced endpoint security tools and configurations
• Module 10: Backup and Disaster Recovery for System and Endpoint Security
  • Backup strategies and disaster recovery plans
  • Critical data backup solutions for system security
  • Data backup and recovery for endpoint devices
• Module 11: Real-World Case Studies and Scenarios
  • Real-world attack scenarios and analysis
  • Threats and defense methods for system and endpoint security
  • Hands-on: Analysis and solutions for attack scenarios
  • Strategies for network and system security against potential attacks
• Module 12: Training Summary and Exam/Evaluation
  • General evaluation of the training

• Configure operating systems securely and address related vulnerabilities.
• Detect endpoint threats and establish defense mechanisms.

• Network and System Basics: Knowledge of TCP/IP, network protocols, and basic network structures.
• Operating System Management: Basic knowledge and experience with Linux and Windows operating systems.
• Basic Security Knowledge: Familiarity with concepts such as firewalls, VPN, encryption, and access control.
• Participation in SG-TS3 under SSA.

Suitable for in-person or hybrid participation.
Theoretical Training: Fundamental cybersecurity concepts explained through presentations and concept clarifications.
Practical Training: Hands-on applications such as using security tools and vulnerability scanning.
Interactive Participation: Active involvement through group activities, Q&A sessions, and discussions.
Scenario-Based Training: Practicing incident response through real-world scenarios.

• Online documentation from organizations such as EC-Council, Microsoft, CompTIA, and SANS
• van Oorschot, P. C. (2020). Computer Security and the Internet. Springer International Publishing.

This training aims to equip participants with the skills to identify, analyze, and fix security vulnerabilities in web applications and software. Participants will gain advanced technical knowledge and practical skills in web and application security, specializing in securing modern web applications. The training will focus on the most common security vulnerabilities (OWASP Top 10) and how these vulnerabilities can be exploited, as well as secure software development and security testing techniques to eliminate these vulnerabilities.

Participants will use effective testing techniques, penetration testing, and security protocols to create defense strategies against potential threats and ensure the security of web applications and services. In addition, through various case studies and hands-on testing, participants will learn to implement security measures against cyberattacks encountered in the real world. This training will provide essential competencies in web and application security, helping participants take a significant step forward in their careers.

Day 1: Web Application Security Fundamentals and Vulnerabilities

• Module 1: Introduction to Web Application Security
  • What is web application security? Core security principles
  • General architecture of web applications
  • Secure Software Development Life Cycle (SDLC)
  • OWASP Top 10 (Current) and security risks
  • Best practices for web application security
• Module 2: Common Web Application Security Vulnerabilities
  • SQL Injection (SQLi)
  • Cross-Site Scripting (XSS)
  • Cross-Site Request Forgery (CSRF)
  • Insecure Direct Object References (IDOR)
  • Techniques for detecting and exploiting vulnerabilities
• Module 3: Secure Software Development (Secure Coding)
  • Secure coding standards and best practices
  • Input validation and output encoding
  • Secure authentication and session management
  • Encryption and secure data transmission
• Module 4: Web Application Security Testing and Tools
  • Penetration testing and vulnerability scanning tools
  • Using tools like Burp Suite, OWASP ZAP, Nikto, Acunetix
  • Steps of web application testing: Discovery, scanning, analysis, reporting
  • Hands-on: Security testing with Burp Suite

Day 2: Application Security and Advanced Testing Techniques

• Module 5: Advanced Web Application Security Testing
  • Penetration testing methods and techniques
  • Advanced SQL Injection and Cross-Site Scripting attacks
  • Web Application Firewalls (WAF) and bypass techniques
  • Server Side Request Forgery (SSRF) and Remote File Inclusion (RFI)
• Module 6: Security Configuration and Improvements
  • Web server and database security
  • HTTPS and TLS configuration
  • Secure HTTP headers and content security policies
  • Configuration improvements to minimize security vulnerabilities
• Module 7: Secure Web Services and API Security
  • Core principles of API security
  • Secure authentication with OAuth 2.0, OpenID Connect, and JWT
  • API attacks: Injection, DoS, XSS, CSRF
  • Best practices for securing APIs
• Module 8: Firewalls and Web Application Security Solutions
  • Web Application Firewall (WAF) and Web Proxy configurations
  • Attack detection and prevention with WAF
  • Effective management of firewalls

Day 3: Real-World Scenarios, Case Studies, and Advanced Practical Security Techniques

• Module 9: Real-World Web Application Attacks
  • Real-world cyberattack examples and analysis
  • APT (Advanced Persistent Threat) and web application-targeted attacks
  • Monitoring and preventing web application attacks
• Module 10: Proactive Defense for Web Security
  • Security monitoring and alert management
  • Web application monitoring and anomaly detection
  • Security updates and patching processes
  • Best practices for proactive defense
  • Hands-on: Web application monitoring and threat analysis
• Module 11: Case Studies and Scenario Analysis
  • Real-world attack scenarios and solutions
  • Case analysis and security gap resolution with participants
  • Hands-on case study for web application security
  • Practical: Scenario-based security resolution
• Module 12: Training Summary, Certification, and Evaluation
  • General evaluation of the training

• Detect security vulnerabilities in web applications
• Perform security assessments using pentesting and security tools

• Basic Network and System Knowledge: Familiarity with basic network and system concepts such as TCP/IP, network protocols, DNS, HTTP/HTTPS.
• Operating System Management: Knowledge of basic management and command-line usage for Linux and Windows operating systems.
• Basic Security Knowledge: Understanding of basic security concepts such as firewalls, VPN, and encryption methods.
• Web Development Basics: General understanding of HTML, CSS, JavaScript, and basic server-side technologies (PHP, Node.js, etc.).
• Participation in SG-TS4 under SSA.

Suitable for in-person or hybrid participation.
Theoretical Training: Basic cybersecurity concepts will be explained through presentations and concept clarifications.
Practical Training: Hands-on applications such as using security tools and vulnerability scanning.
Interactive Participation: Active involvement through group activities, Q&A sessions, and discussions.
Scenario-Based Training: Practicing incident response through real-world scenarios.

• Hoffman, A. (2024). Web Application Security. "O'Reilly Media, Inc."
• McDonald, M. (2020). Web Security for Developers: Real Threats, Practical Defense. No Starch Press.
• Online documentation from organizations such as EC-Council, OWASP, and SANS.

This training aims to equip participants with the necessary knowledge and skills for specialists who will work in Security Operations Center (SOC) environments. Participants will gain advanced technical knowledge in security monitoring, threat detection, incident response, and developing defense strategies against cyberattacks. The training will focus on the operation of SOCs, the effective management of security incidents, threat analysis, and the rapid detection and response to attacks.

Participants will learn how to practically apply the tools and processes used in SOCs through real-world scenarios and case studies. They will also gain the ability to effectively use critical tools and techniques for SOC operations, including Security Information and Event Management (SIEM), intrusion detection systems, network traffic analysis, and reporting. This training aims to train professionals specializing in SOC operations.

Day 1: SOC Basics, Structure, and Security Monitoring

• Module 1: SOC (Security Operations Center) Fundamentals
  • SOC organization structure, roles, and responsibilities
  • The importance and operation of SOC operations
  • Structuring SOC teams: Analysts, specialists, and response teams
• Module 2: Security Monitoring and Threat Detection
  • Security monitoring strategies
  • Threat analysis and detection
  • Threat hunting and methodologies
  • Monitoring security incidents: Using SIEM
  • Real-time threat detection and prioritization
• Module 3: SIEM Systems and Applications
  • SIEM functions and structure
  • SIEM solutions
  • Log management and analysis techniques
  • Event correlation, alert and warning management
  • Basic SIEM setup and configuration knowledge
• Module 4: Security Events and Log Management
  • Incident response processes
  • Log collection and analysis
  • Log sources: Server logs, application logs, network logs
  • Identifying, categorizing, and prioritizing incidents

Day 2: Incident Response, Threat Hunting, and Advanced Detection Techniques

• Module 5: Incident Response Processes and Methods
  • Incident response planning and structuring
  • Classifying incidents and effective response methods
  • Types of attacks: APT, DDoS, phishing, malware, etc.
  • Tools and resources used for incident response
  • Post-incident activities: Post-mortem analysis and reporting
• Module 6: Threat Hunting
  • Fundamentals and strategies of threat hunting
  • Hunting process: Hypothesis creation, data collection, analysis
  • Tools and methodologies for threat hunting
  • Differences between incident response and threat hunting
• Module 7: Threat Intelligence and OSINT (Open Source Intelligence)
  • The importance and types of threat intelligence (Tactical, Operational, Strategic)
  • OSINT and methods of collecting information from open sources
  • OSINT tools: Shodan, Maltego, TheHarvester, etc.
  • Integrating threat intelligence with SOC operations
• Module 8: Usage of Network-based Security Products
  • Network security solutions and structures: Firewalls, WAF, VPN, etc.
  • Network monitoring and anomaly detection
  • Integration of network security products with SOC

Day 3: Advanced Security Tactics, Incident Management, and Case Studies

• Module 9: Advanced Attack Tactics and Incident Management
  • APT (Advanced Persistent Threat) and insider threats
  • Social engineering and phishing attacks
  • Malware analysis and reverse engineering
  • Advanced techniques for detecting and responding to incidents
  • Practical: APT detection and response methods
• Module 10: Incident Management and Reporting
  • The incident reporting process after an incident
  • Preparing detailed reports for security incidents
  • Post-incident evaluation and improvement
  • Practical: Writing and analyzing incident reports
• Module 11: Real-World Scenarios and Case Studies
  • SOC incidents encountered in the real world
  • Attack analysis, detection, and response processes
  • Post-incident analysis and solution suggestions
  • Practical: Group analysis and problem-solving through case studies
• Module 12: Training Summary, Certification, and Evaluation
  • Overall evaluation of the training

• Understand the SOC role, structure, and operation.
• Monitor and analyze security events with SIEM systems.
• Conduct threat hunting and manage incident response processes.
• Conduct security operations using threat intelligence and OSINT.
• Develop defense strategies against advanced threats such as APT and social engineering.

• Basic Cybersecurity Knowledge: Familiarity with general cybersecurity concepts, threats, and defense mechanisms.
• Network and System Security Basics: Understanding of TCP/IP, network configurations, firewalls, IDS/IPS, VPN, and basic network security concepts.
• Experience or Education: Previous experience or training in cybersecurity, network management, or system administration.
• Basic SIEM and Security Tool Knowledge: A general understanding of SIEM solutions and general security monitoring tools.
• Incident Response and Log Management: Basic knowledge of incident response processes and log analysis, especially focusing on reporting and resolving security incidents.
• Completion of SG-TS2 in SSA.

Suitable for in-class or hybrid participation.
Theoretical Training: Basic cybersecurity concepts will be explained through presentations and concept explanations.
Practical Training: Practical applications like security tool usage and vulnerability scanning will be conducted.
Interactive Participation: Participants will actively engage through group work, Q&A sessions, and discussions.
Scenario-Based Training: Participants will practice incident response through real-world scenarios.

• Muniz, J. (2021). The Modern Security Operations Center. Addison-Wesley Professional.
• Online documentation from organizations such as EC-Council, ISC2, and SANS.

This training aims to guide participants toward becoming specialists in penetration testing (pentesting) techniques and methods. The course is designed to develop skills in detecting, evaluating, and reporting cybersecurity vulnerabilities. Participants will gain in-depth knowledge about various tools and techniques used to identify security flaws across systems, networks, web applications, mobile applications, and social engineering. The training will enable participants to develop defense strategies against real-world cyber threats and enhance organizational security.

Day 1: Penetration Testing Fundamentals and Information Gathering

• Module 1: What is Penetration Testing?
  • Types of Penetration Testing: Black Box, White Box, Grey Box
  • Pentest methodology: Planning, discovery, analysis, reporting
  • Differences between pentesting and security evaluation
• Module 2: Legal Framework and Ethical Guidelines
  • Legal permissions and responsibilities
  • Penetration testing contracts and confidentiality agreements
  • Definition and ethical standards of ethical hacking
• Module 3: Information Gathering Techniques
  • OSINT (Open Source Intelligence) tools: Maltego, Shodan
  • DNS analysis, WHOIS queries, IP discovery
  • Social engineering methods for information gathering
• Module 4: Active and Passive Information Gathering Practices
  • Hands-on: Using Nmap, Recon-ng, Harvester
  • Data collection and analysis for target systems

Day 2: Network Security Testing

• Module 5: Network Discovery and Scanning Techniques
  • Port scanning and service detection
  • Vulnerability scanning: Using Nessus, OpenVAS, Nikto
• Module 6: Network Security Vulnerabilities
  • Man-in-the-Middle (MITM) attacks
  • ARP spoofing, DNS spoofing, Wireshark usage
  • Testing network segmentation and security controls
• Module 7: Security Solution Bypass Techniques
  • Methods for bypassing security devices
  • IDS/IPS evasion
  • VPN and encrypted traffic analysis
• Module 8: Network Security Testing Practices
  • Hands-on: Network testing using Nmap, Hping3, Ettercap, and Wireshark

Day 3: Web Application Security Testing

• Module 9: OWASP Top 10 Vulnerabilities
  • SQL Injection, XSS (Cross-Site Scripting), CSRF (Cross-Site Request Forgery)
  • Unsafe authentication and authorization testing
• Module 10: Web Security Testing Tools
  • Using Burp Suite, OWASP ZAP, SQLMap
  • Vulnerability analysis for web servers
• Module 11: Web Application Testing Practices
  • Hands-on: Testing for SQL Injection, LFI/RFI, unsafe file uploads
  • Analyzing test results and proposing solutions
• Module 12: Web Application Security Testing Scenarios
  • Example case study: Vulnerability analysis of an e-commerce site

Day 4: System Security and Internal Network Testing

• Module 13: System Security Testing
  • Vulnerability scanning for Windows/Linux systems
  • Privilege Escalation techniques
• Module 14: Internal Network Testing and Post-Exploitation
  • Post-access actions after gaining system access
  • Data collection, backdoor creation methods
• Module 15: Active Directory Security
  • AD vulnerabilities and testing methods
  • Kerberoasting, Pass-the-Hash attack techniques
• Module 16: Hands-on: System and Internal Network Security Testing
  • Hands-on: Exploit exercises using Metasploit Framework and PowerShell

Day 5: Reporting, Case Study, and Conclusion

• Module 17: Reporting Penetration Testing Findings
  • Classifying findings and risk assessment
  • Professional reporting techniques and proposing solutions
• Module 18: Real-World Scenarios
  • Example incidents: Penetration tests on corporate networks
  • Industry examples: Financial and defense sectors
• Module 19: Practical Case Study
  • Group work: Penetration test on a target system
  • Reporting and presenting test results
• Module 20: Training Evaluation
  • Overall evaluation of the training

• Ability to detect vulnerabilities and engage in bounty hunting.
• Strengthen security processes using threat intelligence and OSINT.
• Develop defenses against advanced threats such as APT and social engineering.
• Understand pentesting methodologies and processes for professional-level application.
• Identify, analyze, and exploit security vulnerabilities in networks, systems, and web applications.
• Use security tools (Nmap, Metasploit, Burp Suite, etc.) effectively to gain practical experience.
• Conduct professional reporting and risk assessment.
• Perform security testing in real-world scenarios and propose solutions.

• Basic Cybersecurity Knowledge: Familiarity with general cybersecurity concepts, threats, and defense mechanisms.
• Understanding of penetration testing methodologies and processes for professional-level application.
• Skills to detect, analyze, and exploit security vulnerabilities in networks, systems, and web applications.
• Proficiency in using security tools (Nmap, Metasploit, Burp Suite, etc.) to gain practical experience.
• Ability to report findings and risk assessment professionally.
• Ability to conduct security testing in real-world scenarios and provide solutions.
• Participation in SSA SG-TS2, TS3, and TS4 courses.

• Classroom or Hybrid participation is suitable.
Theoretical Training: Concepts and presentations explaining basic cybersecurity principles.
Practical Training: Using security tools and vulnerability scanning for hands-on experience.
Interactive Participation: Active participation through group work, Q&A sessions, and discussions.
Scenario-Based Training: Practicing incident response through real-world scenarios.

EC-Council, OWASP, ISC2, and SANS online documentation.