Uploaded by Sinduja Natesan Subramanian

Brochure NUS SOC Cybersecurity 280323

advertisement
CYBERSECURITY
Overview
Building Cyber
Resilience in a Digital Era
Cybersecurity is no longer an IT problem, it is a
security problem; but unlike physical security,
cyber attacks can come from anywhere in the
world.
As the digitisation of the global economy grows,
digital crimes grow with it. Digitisation of data,
online and mobile interactions are creating
millions of cyber attack risks and opportunities,
with many leading to data breaches that threaten
both people and businesses. Hence, cybersecurity
has become an economic imperative.
With billions of dollars in revenue set to flow into
the cybersecurity market in the next three years
and amid talent deficits of cyber security providers
(McKinsey , 2022), the need for cybersecurity
specialists has been rising quickly.
The Cybersecurity programme offered by National
University of Singapore’s School of Computing is a
cutting-edge academic curriculum designed to
meet the needs and priorities of organisations
operating within this digital economy.
Curated with a strong emphasis on real-world
relevance to meet rapidly evolving industry needs
and trends, the programme will provide you with
strong fundamentals of cybersecurity techniques
to help you implement advanced solutions to
recognise cyber attacks, enhance security, and
prevent cyber attacks.
80%
80% of organisations in APAC
affected by ransomware attacks.
Source - Tech Wire Asia, 2022
65%
At least six cybersecurity incidents
have occurred in at least 65% of
Singaporean organisations in the
past year, however just 49% of
these organisations are able to
respond to threats in a day.
Source - Zednet, 2022
13.3%
Singapore cybersecurity market is
expected to register a CAGR of
13.3% during the period 2022-2027.
Source - Singapore Cybersecurity
Market, 2022
$2T+
New survey reveals $2 trillion
market opportunity for cybersecurity
technology and service providers.
Source - McKinsey, 2022
Who Is This Programme For?
The programme designed for professionals in Information Technology Security functions. It is
particularly applicable to major industries such as IT Product & Services, Banking and Financial
Services, Computer & Network Security, and Management Consulting.
The programme is designed for professionals with technical background, with less than 10 years
of experience, who are looking to incorporate fundamentals of cybersecurity in their
function/organisation.
Programme Goals
Acquire fundamental concepts of
Cybersecurity and effective
applications to address
real-world problems and needs.
Develop advanced applications
and frameworks needed to
detect, withstand, and
counteract cyber attacks.
Understand various network
attacks and the fundamentals of
network security.
Modules
Module 1
Introduction to
Cybersecurity
Why cybersecurity
The difficulty of achieving security
Module 2
Ciphers & Encryption
Fundamentals
Encryption, decryption and keys
Classical ciphers
Definitions and properties of cryptosystems
Kerckhoffs’ principle vs security by obscurity
Module 3
Modern Ciphers
Stream cipher
Block cipher
Module 4
Entity Authentication
(Password)
Entity authentication
Password
Multi-factor authentication
Module 5
Public Key System &
Cryptographic Hash
Public Key Cryptography (PKC)
Hash and keyed-hash
Module 6
Data Origin Authentication
& Public Key Infrastructure
Data origin authentication using MAC
Data origin authentication using Signature
Public Key Distribution (PKD)
Public Key Infrastructure (PKI)
Module 7
Protocol Security
Strong authentication protocol
Key exchange protocol
Authenticated key exchange protocol
Securing a communication channel
Module 8
Network Security
Network layer
Name resolution and attacks
Denial of Service (DoS) attacks
Useful network security tools: Wireshark and Nmap
Firewall
Module 9
Web Security
Web threat models
UI-based attacks
Cross Site Scripting (XSS) attacks
Cross Site Request Forgery (CSRF) attacks
SQL Injection attacks
Module 10
System Security and
Access Control
Access control
Access control representation
Access control in UNIX/Linux
Controlled invocation and privilege elevation
Module 11
Attacks, Malware &
Mitigation
Attack framework and cyber kill chain
Reconnaissance
Vulnerability scanning
Automated exploitation
Malware and defense
Module 12
Review and Trends in
Cybersecurity
Web privacy
Cloud security
Mobile security
IoT security
What Will This Programme Do
For You?
Explain
the fundamentals of cybersecurity
and C-I-A security requirements
Describe
the key concepts and
techniques in the
cybersecurity domain,
including encryption,
authentication, and
secure channel
Recognise
well-known attacks on
vulnerable hosts,
networks, and web
servers; and explain
counter measures that
can prevent and
withstand the attacks
Apply
best practices in cybersecurity to safeguard
the systems from cyber attacks
Programme Highlights
120+
5+
10+
Discussion Boards
Assignments
Video Lectures
5+
Demo Videos
Programme designed for IT professionals
looking to incorporate fundamentals of
cybersecurity in their function/organisation
Integrated and enhanced learning experiences
a. Unique blend of video lectures by faculty,
case studies and practice-based
assignments and assessments
Hands-on and applied learning experiences
a. Faculty demo videos
b. Live master classes on tools*
c. Weekly sessions with Industry Experts
Learning, interactions, and networking
opportunities with industry experts, stellar
faculty, and peers
*The scheduled masterclass(s) may change, and
confirmation will be provided once the programme begins.
4+
Case Studies
Faculty
Dr Sufatrio
Lecturer (Educator Track)
Dr Sufatrio is a Lecturer with the School of Computing (SoC) of the
National University of Singapore (NUS).
He obtained his Ph.D. and M.Sc. in Computer Science from SoC,
NUS. Previously, he was a Scientist and Acting Lab Head of the
Mobile Forensics & Security Lab, at the Cyber Security & Intelligence
(CSI) Department, Institute for Infocomm Research (I2R), A*STAR.
Prior to that, he was an Associate Scientist and then a Research Scientist with the Temasek
Laboratories at the National University of Singapore (TL@NUS).
He is interested in many areas of computer security, and have published numerous papers on
systems, network and mobile security.
Dr Guo Charng Rang
Executive Education Fellow
Dr Guo has a Ph.D in Mathematics from the University of Oxford
and B.Sc (Honours) in Mathematics from NUS.
He served as the founding Programme Director of the National
Cybersecurity R&D Lab (NCL) from 2015 – 2021, and an Associate
Professor at the School of Computing at the National University of
Singapore from 2017 – 2021.
He oversees the development and operation of NCL, a national lab funded by the National
Research Foundation hosted in NUS School of Computing. The objective is to support the
Singapore cybersecurity community in R&D and education.
Prior to joining NUS, Dr Guo worked in DSO National Laboratories and Defence Science and
Technology Agency for more than 20 years, specializing in cybersecurity, in particular, in
cryptography and trusted system.
Case Studies
Brute Force Attack on Mozilla Firefox
We will be looking at the example of how Mozilla Firefox protected stored
passwords on their browsers using weak encryption schemes and how they
failed to prioritize patching for close to 9 years.
Singapore’s Cyber Security Masterplan
As Singapore embarks on its digital transformation initiative towards a smart
nation and digital economy, the country publishes a snapshot of the cyber
landscape in Singapore every year. The government strives to establish safer
and more secure cyberspace through its cybersecurity master plan.
Hacking into the Dunkin Donut Reward Program
We will be using Nmap tools on a sample test system to scan for open Ports,
identify those ports which should not be open in a live system & also use
brute force hacking attempts to simulate the way in which attackers hacked
into the Dunkin Donuts rewards program.
Exploiting Unpatched Versions of Google Chrome Browser
We will be using the Metasploit tool on a sample Linux system to execute a
Linux kernel escalation attack and then explain how these attacks are then
simulated by attackers to go after unpatched versions of Google Chrome
which enables them to install all kinds of spyware & malware on Android
machines (smartphones/laptops) as per their requirement.
Zero Trust Architecture at GitLab
We will be looking at the experience of Kathy Wang (Former CISO of GitLab)
and the challenges she faced in securing the IT architecture at her company
& how she finally decided to go ahead with a Zero trust architecture for her
company.
Note: All brand, product and company names are trademarks™ or registered® trademarks of their respective holders.
Use of them does not imply any affiliation with, endorsement by, or association of any kind between them and
programme owners.
Tools
Learn how to use most in-demand tools with faculty demo videos.
Wireshark
Nmap
Metasploit
Nessus
Note: All brand, product and company names are trademarks™ or registered® trademarks of their respective holders.
Use of them does not imply any affiliation with, endorsement by, or association of any kind between them and
programme owners.
Certificate
Upon successful completion of the programme, participants will be awarded a verified digital
certificate by NUS School of Computing.
Note: All certificate images are for illustrative purpose only and may be subject to change at the discretion of NUS
School of Computing
Learning Journey
Orientation Week
The first week is orientation week. During this week you will be introduced
to the other participants in the class from across the world and you will
learn how to use the learning management system, discussion boards,
and other learning tools provided.
Weekly Goals
On other weeks, you have learning goals set
for the week. The goals would include
watching the video lectures and completing
the assignments. All assignments have
weekly deadlines.
Support and Guidance from Programme Leader
The Programme Leader is a subject matter expert who guides learners
through their learning journey. They conduct Office Hours to clarify
learner queries related to the learning content and grade a few
designated assignments.
Follow-Up
Emeritus Programme Support Team follow-up
over email and phone calls with learners who are
unable to submit their assignments.
Programme Details
3 Months | 6—8 hours/week
Online via recorded video
lectures
USD 1,650 + GST
*Singapore residents who wish to
enrol for this programme will be
charged GST.
Programme Starts:
28 June 2023
About NUS School of Computing
The NUS School of Computing traces its roots back to the Nanyang University Department of Computer
Science that was established in 1975 – the first of its kind in Singapore. Since then, we have developed into
one of the top 10 computing schools in the world, with faculty members who are both internationally
recognised researchers and inspiring teachers.
We offer outstanding undergraduate and graduate degree programmes across the full spectrum of the field
of computing, including Computer Science, Information Systems, Computer Engineering, Business Analytics
and Information Security, as well as specialisations in emerging areas of importance such as Artificial
Intelligence, FinTech, Blockchain, Analytics and Cybersecurity. Correspondingly, we attract excellent
students and produce talented graduates who are making their mark in the world.
The exceptional education that students experience here, coupled with the demand for computing talent in
all fields and industries, make NUS Computing graduates highly sought-after. We instil our students with
leadership qualities and a spirit of entrepreneurship through mentorship, community service initiatives and
special programmes, including The Furnace, a start-up incubator which offers funding, infrastructure and
management support to bring original ideas to commercial fruition.
The NUS School of Computing Advanced Computing for Executives (ACE) was established to help business
leaders and computing professionals to learn about emerging technology and leverage it for digital
transformation and business competitiveness. Our three-pronged raison d’etre is to (1) partner with the
industry and government to upskill and re-skill the workforce in information communication technology
(ICT), (2) collaborate closely with NUS School of Computing (SoC) faculty members in launching continuing
education and training (CET) programmes for adult learners, and (3) support and empower organisations to
embark on digital transformation projects.
We are pleased to have been educating and training Singapore and the world's business leaders and
computing professionals for the past four decades and are proud to count many locally and internationally
prominent leaders in the field among our large and accomplished family of alumni.
Emeritus Insights
This programme features 6 months of free Premium Access to Emeritus Insights—a mobile app with
5,000+ bite-sized, business-focused videos to help you meet your daily learning goals on the go.
About Emeritus
NUS School of Computing is collaborating with online
education provider Emeritus to offer a portfolio of
high-impact online programmes. Working with Emeritus
gives NUS School of Computing the advantage of
broadening its access beyond their on-campus offerings in
a collaborative and engaging format that stays true to the
quality of NUS School of Computing.
Emeritus’ approach to learning is built on a cohort-based
design to maximise peer-to-peer sharing and includes
video lectures with world-class faculty and hands-on
project-based learning.
More than 250,000 students from over 160 countries have
benefitted professionally from Emeritus’ courses.
www.emeritus.org
Apply for the programme here
APPLY NOW
Schedule a call with a Programme Adviser to learn how this programme can help you
SCHEDULE A CALL
E-mail: info@emeritus.org
Call: +65 3138 5595 (11:30 AM - 6:30 PM SGT)
We hope to respond to your enquiry in less than 24 hours.
Our responses may take up to 72 hours during weekends and holidays.
WhatsApp an Advisor on +65 8014 3066*
*This number does not accept any calls. Please message your queries.
Download