IT-Shaped Cybersecurity Vulnerabilities and Threats Foundation – T-CVTF

Curriculum

What you will learn

• Duration: 60 hours
• 26 modules
• Knowledge test per module
• Official PeopleCert aligned

• 00 Module 1 - Cybersecurity Principles 25 lessons

  • Definitions of Cybersecurity
  • Difference between Information Security and Cybersecurity
  • Digital Transformation
  • Social Changes
  • Changes in the Economic Model
  • Political Changes
  • Attackers Almost Always Win
  • The Role of Cybersecurity
  • Principles of the C-I-D Triad in IT Infrastructures
  • Confidentiality Principle of the C-I-D Triad
  • Security Controls that Ensure Confidentiality
  • Why Control Data Confidentiality?
  • Specific Cybersecurity Controls for Data Confidentiality
  • The Role of Encryption in the Confidentiality Principle
  • The Role of Steganography in the Confidentiality Principle
  • Integrity Principle of the C-I-D Triad
  • On the Integrity of Data and Intellectual Property Assets
  • Why Control Data Integrity?
  • The Role of Hashing in the Integrity Principle
  • Practical Examples of Using the Integrity Principle
  • Other Means of Integrity besides Hashing
  • Availability Principle of the C-I-D Triad
  • Characteristics of the Availability Principle
  • Solutions to Ensure Availability
  • Class Exercise – Principles of Cybersecurity
• 01 Module 2 - Cybersecurity Concepts 16 lessons

  • Cybersecurity Concepts
  • Types of Security
  • Physical Security
  • Communication Security
  • Computer Security
  • Network Security
  • Information Security Principles Basics
  • Least Privilege
  • Separation of Duties
  • Job Rotation
  • “Need to Know” Concept
  • Layered Security
  • Defense in Depth
  • Due Diligence and Due Care
  • Vulnerability and Exploitation
  • Class Exercise – Cybersecurity Concepts
• 02 Module 3 - Network Devices 16 lessons

  • Network Device Basics
  • Hub
  • About How a Hub Works
  • Switch
  • About the Operation of a Switch
  • Port Security
  • Ability to Disable Ports
  • Collision Domains
  • VLAN
  • Looking at VLANs on a switch
  • Router
  • Load Balancer
  • DNS Round-Robin
  • Firewalls
  • Proxy Servers
  • Class Exercise – Network Devices
• 03 Module 4 - Network Cabling 13 lessons

  • Understanding Network Cabling
  • Twisted-Pair Cable
  • Unshielded Twisted Pair Cable
  • Images of Cable Types
  • Straight-Through Cabling
  • Crossover Cabling
  • Shielded Twisted Pair (STP) Cabling
  • Fiber Optic Cable
  • Types of Fiber Optic Cable
  • Fiber Optic Cable – Characteristics
  • Images of Connector Types
  • Summary of Cable Types
  • Class Exercise – Network Cabling
• 04 Module 5 - Application Layer Protocols and Security Practices 13 lessons

  • IP Address
  • Subnet Mask
  • Default Gateway
  • Address Classes
  • Class A Addresses
  • Class B addresses
  • Class C addresses
  • Class D Addresses
  • Class E Addresses
  • Reviewing Address Classes
  • Special Addresses
  • Invalid Addresses
  • Class Exercise – Application Layer Protocols and Network Security Best Practices
• 05 Module 6 - Understanding TCP/IP Protocols 18 lessons

  • Transmission Control Protocol (TCP)
  • TCP Three-Way Handshake
  • Wireshark Three-Way Handshake
  • Disconnecting (politely) from a TCP Session
  • Terminating a Wireshark Connection
  • Disconnecting (rudely) from a TCP Session
  • TCP flags
  • TCP Ports
  • TCP Header
  • User Datagram Protocol (UDP)
  • UDP Header
  • Internet Protocol (IP)
  • IP header
  • Internet Control Message Protocol (ICMP)
  • ICMP Types and Codes
  • ICMP Header
  • Address Resolution Protocol (ARP)
  • Class Exercise – What is the TCP Protocol used for?
• 06 Module 7 - IP Addressing Fundamentals 26 lessons

  • HTTP and HTTPS
  • DNS
  • SMTP
  • POP3
  • IMAP4
  • SNMP
  • FTP
  • TFTP
  • SFTP
  • Telnet
  • SSH
  • SCP
  • NTP
  • LDAP
  • NetBIOS
  • Network Storage Protocols
  • Understanding IPv6
  • IPv6 Addresses
  • Implications of IPv6
  • Physical Security
  • Do Not Use Hubs
  • Configure Passwords
  • Use Port Security
  • Use VLANs
  • Cable Use and Protocol
  • Class Exercise – IP Address Fundamentals
• 07 Module 8 - Malware 17 lessons

  • Attacks
  • Malware
  • Ransomware
  • Trojans
  • Worms
  • Potentially Unwanted Program (PUP)
  • Fileless Virus
  • Command and Control
  • Bots
  • Crypto-Malware
  • Logic bombs
  • Spyware
  • Keyloggers
  • Remote Access Trojan (RAT)
  • Rootkits
  • Backdoors
  • Class Exercise – Malware
• 08 Module 9 - Cyber Attacks 23 lessons

  • Password Attacks
  • Pulverization
  • Dictionary
  • Brute Force
  • Offline
  • Online
  • Rainbow Tables
  • Plaintext/Unencrypted
  • Physical Attacks
  • Malicious USB (Universal Serial Bus) Cable
  • Malicious Flash Drives
  • Card Cloning
  • Skimming
  • Adversarial Artificial Intelligence (AI)
  • Contaminated Training Data for Machine Learning (ML)
  • Security of Machine Learning Algorithms
  • Supply Chain Attacks
  • Cloud-Based vs. On-Premises Attacks
  • Cryptographic Attacks
  • Birthday Attack
  • Collision Attack
  • Downgrade
  • Class Exercise – Cyberattacks
• 09 Module 10 - Social Engineering 43 lessons

  • What is Social Engineering?
  • Social Engineering Methods
  • First Method – Willingness to Help
  • Second Method – Creating a Hostile Situation
  • Distinctive Characteristics of Social Engineering
  • Social Engineering Tools
  • Phishing
  • Smishing
  • Vishing
  • Spam
  • Spam Over Instant Messaging (SPIM)
  • Spear Phishing
  • Dumpster Diving
  • Shoulder Surfing
  • Pharming
  • Tailgating
  • Obtaining Information
  • Whaling
  • Prepending
  • Identity Fraud
  • Invoice Scams
  • Credential Harvesting
  • Hoax
  • Watering Hole
  • Typosquatting
  • Pretexting
  • Influence Campaigns
  • Principles (Reasons for Effectiveness)
  • Authority
  • Intimidation
  • Consensus
  • Scarcity
  • Familiarity
  • Confiança
  • Urgency
  • Recognition
  • Representation
  • Third-Party Authorization
  • Outsourced Employees
  • Personification
  • Defenses
  • Urban Legend?
  • Class Exercise – Social Engineering
• 10 Module 11 - Application Attacks 29 lessons

  • Privilege Escalation
  • Cross-Site Scripting (XSS)
  • Injection Attacks
  • SQL Injection
  • Dynamic Link Library (DLL)
  • Lightweight Directory Access Protocol (LDAP)
  • Extensible Markup Language (XML)
  • Pointer / Object Dereference
  • Directory Traversal Attack
  • Buffer Overflow
  • Race Condition
  • Verification Time / Usage Time
  • Inadequate Error Handling
  • Inadequate Input Handling
  • Repetition Attacks
  • Session Replay
  • Integer Overflow
  • Request Forgery
  • Server-Side Request Forgery
  • Cross-Site Request Forgery (XSRF)
  • Application Programming Interface (API) attacks
  • Resource Exhaustion
  • Memory Leak
  • Secure Sockets Layer (SSL) removal
  • Driver Manipulation
  • Shimming
  • Refactoring
  • Pass the Hash
  • Class Exercise – Application Attacks
• 11 Module 12 - Network Attacks 37 lessons

  • Wireless
  • Jamming Attack
  • Evil Twin Attack
  • Rogue Access Point
  • Bluejacking
  • Bluesnarfing
  • Disassociation Attacks
  • Radio Frequency Identification (RFID)
  • Near Field Communication (NFC)
  • Initialization Vector (IV)
  • Man-In-The-Middle
  • Man-In-The-Middle Attack
  • Layer 2 Attacks
  • Address Resolution Protocol (ARP) Poisoning
  • Media Access Control (MAC) flooding
  • MAC Cloning
  • Domain Name System (DNS)
  • Domain Hijacking
  • Poisoning
  • DNS Poisoning
  • Universal Resource Locator (URL) redirection
  • Domain Reputation
  • Distributed Denial of Service (DDoS)
  • Distributed Denial of Service (DDoS)
  • DDoS Protection
  • SYN Flooding
  • SYN Flooding in Action
  • DDoS Attack Vector
  • DDoS in Application
  • Operational Technology (OT)
  • Malicious Code and Script Execution
  • PowerShell
  • Python
  • Bash
  • Macros
  • Visual Basic for Applications (VBA)
  • Class Exercise – Network Attack Indicators
• 12 Module 13 - Threat Actors 21 lessons

  • What Are Threats and Vectors?
  • Hacking and Actors
  • Degrees of Sophistication and Actors
  • Advanced Persistent Threats (APT)
  • Insider Threats
  • State Actors
  • Hacktivists
  • Script Kiddies
  • Criminal Syndicates
  • Hackers
  • Authorized
  • Unauthorized
  • Semi-Authorized
  • Shadow IT
  • Competitors
  • Actor Attributes
  • Internal/External
  • Level of Sophistication/Capacity
  • Resources/Financing
  • Intention/Motivation
  • Class Exercise – Cyber Actors
• 13 Module 14 - Intelligence Vectors and Sources 31 lessons

  • Vectors
  • Direct Access
  • Wireless
  • E-mail
  • Supply Chain
  • Social Media
  • Removable Media
  • Cloud
  • Threat Intelligence Sources
  • Open Source Intelligence (OSINT)
  • Closed or Proprietary Tools
  • Vulnerability Database
  • Information Sharing and Analysis Centers (Public/Private)
  • Dark Web
  • Indicators of Compromise (IoCs)
  • Automated Indicator Sharing (AIS)
  • STIX and TAXII
  • Predictive Analysis
  • Threat Maps
  • File/Code Repositories
  • Research Sources
  • Vendor Websites
  • Vulnerability Feeds
  • Threat Feeds
  • Conferences
  • Academic Journals
  • Requests for Comments (RFC)
  • Local Industry Groups
  • Social Media
  • Tactics, Techniques, and Procedures (TTP)
  • Class Exercise – Intelligence Vectors and Sources
• 14 Module 15 - Exploiting Vulnerabilities 35 lessons

  • Why does Vulnerability exist?
  • Reasons for Vulnerabilities
  • Types of Vulnerabilities
  • Cloud-Based vs. On-Premises Vulnerabilities
  • Zero-Day
  • Weak Configurations
  • Open Permissions
  • Unsecured Root Accounts
  • Errors
  • Weak Encryption
  • Insecure Protocols
  • Default Settings
  • Open Ports and Services
  • Third-Party Risks
  • Third-Party Precautions
  • Supplier Management
  • Systems Integration
  • Lack of Vendor Support
  • Supply Chain
  • Outsourced Code Development
  • Data Storage
  • Weak or Inadequate Patch Management
  • Firmware
  • Operating System (OS)
  • Applications
  • Legacy Systems
  • Consequences of Vulnerability
  • Data Loss
  • Data Breaches
  • Data Exfiltration
  • Identity Theft
  • Financial
  • Reputation
  • Loss of Availability
  • Class Exercise – Exploiting Vulnerabilities
• 15 Module 16 - Security Assessments 29 lessons

  • Threat Hunting
  • Intelligence Fusion
  • Threat Feeds
  • Advisories and Bulletins
  • Maneuver
  • Vulnerability Scans
  • False Positives
  • False Negatives
  • Log Reviews
  • Accredited Vs. Non-Accredited
  • Intrusive vs. Non-Intrusive
  • Application Scanning
  • Web Application Scanning
  • Network Scanning
  • Configuration Scanning
  • Common Vulnerabilities and Exposures (CVE)/
  • Common Vulnerability Scoring System (CVSS)
  • Syslog / SIEM
  • Report Review
  • Packet Capture
  • Data Inputs
  • User Behavior Analysis
  • Sentiment Analysis
  • Security Monitoring
  • Log Aggregation
  • Log Collectors
  • Security Orchestration, Automation, and Response (SOAR)
  • Class Exercise – Syslog
  • Class Exercise – Threat Hunting and Vulnerability Scans
• 16 Module 17 - Pentest 25 lessons

  • What Is Penetration Testing?
  • Basic Penetration Testing Process
  • Known Environment
  • Unknown Environment
  • Partially Known Environment
  • Rules of Engagement
  • Lateral Movement
  • Escalate Privileges
  • Horizontal and Vertical Scaling
  • Persistence
  • Cleanup
  • Bug Bounty
  • Pivoting
  • Passive and Active Reconnaissance
  • Drones
  • War Driving
  • War Driving
  • Footprinting
  • OSINT
  • Exercise Types
  • Red Team
  • Blue Team
  • White Team
  • Purple Team
  • Class Exercise – Pentest
• 17 Module 18 - Enterprise Security Architecture 34 lessons

  • What is Enterprise Security Architecture?
  • Configuration Management
  • Diagrams
  • Baseline Configuration
  • Baseline Operation
  • Standard Naming Conventions
  • IP Class and CIDR Notation
  • Data Sovereignty
  • Data Protection
  • Data Loss Prevention (DLP)
  • Masking
  • Encryption
  • At Rest
  • Data in Transit/Motion
  • In Processing
  • Tokenization
  • Rights Management
  • Response and Recovery Controls
  • Geographic Considerations
  • Site Resilience / Recovery Sites
  • Hot Site
  • Cold Site
  • Warm Site
  • Secure Sockets Layer (SSL)/Transport Layer Security (TLS) Inspection
  • How Inspection Works
  • Hashing
  • API Considerations
  • Deception and Disruption
  • Honeypots
  • Honeynets
  • False Telemetry
  • Honeyfile
  • DNS Sinkhole
  • Class Exercise – Corporate Security Architecture
• 18 Module 19 - Cloud and Virtualisation 31 lessons

  • Cloud Models
  • Infrastructure as a Service (IaaS)
  • Platform as a Service (PaaS)
  • Software as a Service (SaaS)
  • Anything as a Service (XaaS)
  • Level of Control in Hosting Models
  • Public
  • Community
  • Private
  • Hybrid
  • Cloud Service Providers (CSP)
  • Managed Service Provider (MSP)/Managed Security Service Provider (MSSP)
  • On-Premises vs. Off-Premises
  • Fog Computing
  • Edge Computing
  • Thin Client
  • Containers
  • Microservices/API
  • Infrastructure as Code
  • Software-Defined Network (SDN)
  • Software-Defined Visibility (SDV)
  • Serverless Architecture
  • Service Integration
  • Transit Gateway
  • Resource Policies
  • Virtualization
  • Hypervisor Type I
  • Type II Hypervisor
  • Prevention of Virtual Machine (VM) Sprawl
  • VM Escape Protection
  • Class Exercise – Cloud and Virtualization
• 19 Module 20 - Secure Development, OWASP, Software Diversity and Automation 34 lessons

  • Software Development
  • Environment
  • Development
  • Test
  • Staging
  • Production
  • Quality Assurance (QA)
  • Provisioning and De-provisioning
  • Integrity Measurement
  • Secure Coding Techniques
  • Standardization
  • A rose is a rose is ar%6fse
  • Stored Procedures
  • Obfuscation/Camouflage
  • Code Reuse and Dead Code
  • Server-Side Execution and Validation vs. Client-Side
  • Memory Management
  • Use of Third-Party Libraries and Software Development Kits (SDKs)
  • Data Exposure
  • Open Web Application Security Project (OWASP)
  • Software Diversity
  • Compilers
  • Binaries
  • Automation/Scripting
  • Automated Action Courses
  • Continuous Monitoring
  • Continuous Validation
  • Continuous Integration
  • Continuous Delivery
  • Continuous Deployment
  • Elasticity
  • Scalability
  • Version Control
  • Class Exercise – Secure Software Development, OWASP, Software Diversity, and Automation
• 20 Module 21 - Authentication Methods and Biometrics 39 lessons

  • Authentication Methods
  • Directory Services
  • Federation
  • Attestation
  • Technologies
  • Time-Based One-Time Password (TOTP)
  • HMAC-based One-Time Password (HOTP)
  • Short Message Service (SMS)
  • Token Key
  • Static Codes
  • Authentication Apps
  • Push Notifications
  • Phone Call
  • Smart Card Authentication
  • Biometrics
  • Fingerprint
  • Retina
  • Iris
  • Facial Recognition
  • Voice Recognition
  • Vein
  • Gait Analysis
  • Efficacy Rates
  • False Acceptance
  • False Rejection
  • Cross-Match Error Rate
  • Factors and Attributes of Multifactor Authentication
  • Factors
  • Something You Know
  • Something You Have
  • Something You Are
  • Attributes
  • Somewhere You Are
  • Something You Can Do
  • Something You Display
  • Someone You Know
  • Authentication, Authorization, and Auditing (AAA)
  • Cloud Requirements Versus On-Premises Requirements
  • Class Exercise – Authentication Methods and Biometrics
• 21 Module 22 - Cyber Security Resilience 50 lessons

  • Resilience
  • Redundancy
  • Diversity in Redundancy
  • Technologies
  • Suppliers
  • Encryption
  • Controls
  • Disk Redundancy
  • Redundant Array of Inexpensive Disks (RAID) levels
  • Multipath
  • Network Redundancy
  • Load Balancing
  • Network Interface Card (NIC) Teaming
  • Power Redundancy
  • Uninterruptible Power Supply (UPS)
  • Generator
  • Dual Power Supply
  • Managed Power Distribution Units (PDUs)
  • Redundancy with Replication
  • Storage Area Network (SAN)
  • VM
  • Local Redundancy vs. Cloud Redundancy
  • High Availability
  • Scalability
  • Class Exercise – Cybersecurity Resilience
  • Backup Types
  • Full
  • Differential
  • Incremental
  • Backup Summary
  • Restore Order
  • Online vs. Offline Backup
  • Snapshots
  • Image
  • Non-Persistence
  • Revert to Known State
  • Last Valid Configuration
  • Live Boot Media
  • Image
  • Tape Drive
  • Disk Drive
  • Copy
  • Geographic Dispersion
  • Network-Attached Storage (NAS)
  • Storage Area Network (SAN)
  • Advantage: Cloud Storage
  • Disadvantage: Cloud
  • External Storage
  • Distance Considerations
  • Class Exercise – Types of Backup
• 22 Module 23 - Embedded and Specialised Systems 39 lessons

  • Embedded Systems
  • Raspberry Pi
  • Field Programmable Gate Arrays (FPGA)
  • Arduino
  • Supervisory Control and Data Acquisition (SCADA) / Industrial Control System (ICS)
  • SCADA installations
  • Industrial Environments
  • Manufacturing
  • Energy
  • Logistics Systems
  • Internet of Things (IoT)
  • Sensors
  • Smart Devices
  • Wearables
  • Protecting Wearables
  • Facility Automation
  • Weak Default Settings
  • Medical Systems
  • Vehicle Systems
  • Aircraft Systems
  • Smart Meters
  • Voice Over Internet Protocol (VoIP)
  • Heating, Ventilation and Air Conditioning (HVAC)
  • Drones
  • Multifunction Printers (MFDs)
  • Real-Time Operating Systems (RTOSs)
  • Surveillance Systems
  • Communication Considerations
  • 5G
  • Baseband Radio
  • Narrowband Radio
  • SIM and Zigbee cards
  • Restrictions
  • Energy
  • Computing
  • Network
  • Inability to Correct
  • Scope, Cost, and Implicit Trust
  • Class Exercise – Embedded and Specialized Systems (Lessons 1 and 2)
• 23 Module 24 - Physical Security 25 lessons

  • The Value of Physical Security
  • Installation Concerns
  • Lighting and Windows
  • Doors and Walls
  • Security Concerns
  • Physical Access Controls
  • Fencing and Personnel
  • Perimeter Fence
  • Guards
  • Sentinel Robots and Reception
  • Two-Person Integrity/Control (TPI)
  • Lock and Padlocks
  • Identification Badges, Physical Tokens and
  • Proximity Readers
  • Mantraps
  • Secure Areas
  • USB Data Blocker
  • Secure Data Destruction
  • Physical Access Lists and Logs
  • Video Surveillance
  • Drones and Sensor Types
  • Understanding HVAC
  • Shielding
  • Fire Containment
  • Class Exercise – Physical Security
• 24 Module 25 - Cryptography Concepts 56 lessons

  • Understanding Cryptography
  • Substitution Ciphers
  • Transposition Cipher and Hashing
  • Authentication, Algorithms and Keys
  • Using the Caesar Cipher
  • Repeating the Key
  • Vigenère cipher
  • Key strength/Length
  • Work Factor and One-Time Pad
  • Cipher Suites
  • Operating Modes
  • Authenticated vs. Non-Authenticated
  • XOR
  • Salt, VI, and Nouce
  • Weak/Failed Algorithms
  • Confusion, Diffusion, and Obfuscation
  • Generation of Random/Pseudo-Random Numbers
  • Algorithm Implementation vs. Selection
  • Blockchain
  • What is Cryptography and Why Do We Use It?
  • Definitions
  • Codes and Ciphers: Defining Our Terms
  • Cryptography, Cryptology or…?
  • Building Blocks of Digital Cryptographic Systems
  • Refactoring
  • Encryption Algorithms
  • Symmetric Encryption
  • Advantages and Disadvantages of Symmetric Cryptography
  • Symmetric Cryptography Algorithms
  • Asymmetric Cryptography
  • “The Enemy Knows Your System”
  • Keys and Key Management
  • Public and Private Keys
  • Advantages and Disadvantages of Asymmetric Cryptography
  • Asymmetric Encryption Algorithms
  • Quantum Cryptography
  • Hybrid Cryptosystems
  • Light Cryptography and Homomorphic Cryptography
  • Design and Use of Cryptosystems
  • Cryptanalysis, Ethics and Antiethics
  • Cryptographic Primitives
  • Cryptographic Engineering
  • “Why Aren't All These Things Secret?”
  • Cryptography and CIANA+PS
  • Confidentiality
  • Authentication
  • Integrity
  • Non-Repudiation
  • “But I Didn't Receive That Email…”
  • Availability
  • Privacy
  • Security
  • Understanding Hashing
  • Key Points About Hashing
  • Hash Algorithms
  • Class Exercise – Introduction to Cryptography
• 25 Module 26 - Preparatory Practice Exams 4 lessons

  • T-CVTF 1 Practice Test: 40 questions
  • T-CVTF 2 Practice Test: 40 questions
  • T-CVTF 3 Practice Test: 40 questions
  • T-CVTF 4 Practice Test: 40 questions