Security

Portals

• What is Security?
• Secure SSH Key Generation
• パスワードが平文で保存されているかを確認する雑な方法
• Introduction to OSINT
• Resolve GPG Unsafe Permissions
• What is Malware?
• Threat Modeling
• What is OPSEC?
• Difference Between Penetration Tester and Red Teamer
• The Confused Deputy Problem
• Economy of Mechanism
• Android
• Install Kali NetHunter on Pixel 3a

Secure Software Development LifeCycle

Secure Software Concepts

• Core Security Principles
• Integrating Security into Software

Secure Software Lifecycle Management

• Software Development Methodologies
• Managing Software Lifecycle Risk
• Managing Software Operational Security
• Decommissioning Software Securely

Secure Software Requirements

• Discovering Secure Software Requirements
• Data Protection
• Documenting Software Requirements

Governance, Risk and Compliance (GRC)

• Information Security Management System
• IT Governance
• ISO/IEC 27001: Information Security Management
• PCI Standards: Payment Card Industry Data Security Standard
• NIST CSF: Security Framework
• NIST 800-53: Security and Privacy Controls for Information Systems and Organizations
• ENISA Framework: ISMS framework
• ISF: Information Security Framework
• CIS 20: Critical Security Controls

Vulnerabilities

• IDOR: Insecure Direct Object References

Ethical Hacking

Fundamentals

• Cyber Kill Chain Methodology
• TTPs: Tactics, Techniques & Procedures
• IoC: Indicators of Compromise
• PenTest Methodology: Quick Example

Reconnaissance/Footprinting

• What is Reconnaissance/Footprinting

Enumeration/Scanning

• Scanning Networks
• Information Gathering with sqlmap