Cyber Warfare Defense & Attack Course: Level-1

Introduction

CWD&A LEVEL-1 course was principally created for the security and defense community by graduates of the security forces and is intended to expose the students to terms and advanced methods in Information Defense and Warfare, using senior individuals that are actively involved in these fields as lecturers. The composers crew, with experience in the “Production Floor” of the Cyber-attack industry, alongside defense experts to compose an overall view of the field.

The need to answer the dramatic changes in the attack abilities of hostile elements, which were exposed during the last year, and the difficulties in defending essential information assets as a result, were the trigger to create this course.

The discipline of Cyber Attack (or Cyber Warfare or Information Warfare) is one of the most fascinating technological areas in the world of Information Security.

Program Objectives

“Cyber defense” is not a synonym to “Information Security” and the “Cyber Defense” unit in the organization is different than the department of “Information Security”.

The goal of the Level-1 Program is to provide a comprehensive description of the Cyber Warfare aspects including expressions that, lately, became common due to a multitude of sophisticated attacks performed on State, Security, commercial and financial entities worldwide.

Intended Audience

The course is intended for students with rich background in various IT fields, software development, especially Information Security, Information Warfare, Cyber and Intelligence.

Course Duration & Structure

48 academic hours, 6 day, 8 hours each day.

Course Content

PART A: Cyber Warfare Defense

1. Introduction

° How hacking works
° Demos of website hacking
° Demo of a Trojan horse that is in use by cyber espionage groups
° Demo of a Banking Trojan horse that is used by cyber criminals
° Demo of two attack Scenarios (End to End)
° The Cyber Attack Process
° APT Attack

2. History (Evolution of Cyber Warfare)

° Real cyber-attacks history
° The story behind the attacks

3. Cyber Terror groups on the Internet

° Anonymous & others

4. Cyber Gangs

° Social & Political Structure
° Social & Operational Networking
° Resources
° Operations

5. Cyber Crime

° The operation: How to take a geek and turn him into a crook
° Roles in the cyber-crime market
° Forums, key players.
° Tools of the trade

6. Cyber capabilities Worldwide

° USA
° Russia
° China
° North Korea
° Iran

7. Cyber space defense concept

° Physical, Logical & Human Layers
° Cyber Defense & Information Security Differences
° Reference Threat
° Required Goal
° capabilities and resources
° Cyber Attack Definition
° Internet Connection
° Definition of Enterprise Assets
° Risk Assessment

8. The Perimeter

° Perimeter Definition
° Perimeter Defense Tools & Technologies: Router, FW, IDS, IPS, Layer 7 FW, NAC, SIEM, DLP

9. Entrance & Exit Gates

° Entrance and Exit gates
° Whitening & Blackening Stations
° Complication vs. Security

10. inside the perimeter Security

° Patch Management, AV, FW, Hips, DLP

11. Sub-Networks inside the enterprise

° Network Separation Activities
° Sub-Networks Classification
° Sharing Differentiation

12. Cyber ​​Defense Event Management

° Preliminary investigation
° Event Management General Method

13. Managing a defensive campaign in Israel

° The Agencies
° Responsibilities

14. Embedded Systems

° MultiFunction Device (Print/Fax/Scan), Wireless Routers, TV Box
° Computer, Periferail & Net Devices Internal Hardware

15. SCADA

16. Critical assets / Infrastructure

17. Forensics tools and technologies

° Tools of the trade
° Honeypots
° Tactics

18. Summery

PART B: Cyber Warfare Attack – Hacking Defined for Managers

1. Introduction

° General Introduction to Hacking Defined Course
° Attackers thinking

2. Course Tool Kit

° BackTrack
° Development Environments

3. Attack Vectors

° Viruses, Worms, Trojans
° Vulnerabilities and Exploit
° Web Application Hacking

4. Attack tools and technology

5. Reconnaissance

° Reconnaissance - General
° Social Engineering Reconnaissance
° Phishing
° Web-based Reconnaissance
° Network Reconnaissance

6. System Penetration

° Windows
° Linux

7. Network Penetration

° Getting Interactive
° Traffic Interception and Analysis
° Traffic Interception and Manipulation
° DOS / DDOS
° Password Attacks
° Vulnerability Scanners

8. Wireless & Mobile Penetration

9. Web Applications Penetration

10. Vulnerability World

° Buffer Overflows
° MetaSploit
° Client Side Attacks
° WMF Client Side

11. Virology & House Keeping

° Thinking Security
° Key Loggers
° Native Backdoors
° Trojan horse Attacks
° Installing Services
° Windows Quirks
° Anti Virus Avoidance
° Root kits
° NTFS Alternate Data Streams

12. Software Security

° Why Software?
° Security via Operating System
° Windows API
° What is Hooking?
° Windows API Hooking
° Windows API Logger
° Monitoring Windows API
° Process Monitor

13. Reverse Engineering & Software Vulnerabilities

° Reverse Engineering
° OllyDbg
° WinDBG
° IDA
° Software Vulnerabilities
° Anti-Debugging