CYBERSECURITY Overview Building Cyber Resilience in a Digital Era Cybersecurity is no longer an IT problem, it is a security problem; but unlike physical security, cyber attacks can come from anywhere in the world. As the digitisation of the global economy grows, digital crimes grow with it. Digitisation of data, online and mobile interactions are creating millions of cyber attack risks and opportunities, with many leading to data breaches that threaten both people and businesses. Hence, cybersecurity has become an economic imperative. With billions of dollars in revenue set to flow into the cybersecurity market in the next three years and amid talent deficits of cyber security providers (McKinsey , 2022), the need for cybersecurity specialists has been rising quickly. The Cybersecurity programme offered by National University of Singapore’s School of Computing is a cutting-edge academic curriculum designed to meet the needs and priorities of organisations operating within this digital economy. Curated with a strong emphasis on real-world relevance to meet rapidly evolving industry needs and trends, the programme will provide you with strong fundamentals of cybersecurity techniques to help you implement advanced solutions to recognise cyber attacks, enhance security, and prevent cyber attacks. 80% 80% of organisations in APAC affected by ransomware attacks. Source - Tech Wire Asia, 2022 65% At least six cybersecurity incidents have occurred in at least 65% of Singaporean organisations in the past year, however just 49% of these organisations are able to respond to threats in a day. Source - Zednet, 2022 13.3% Singapore cybersecurity market is expected to register a CAGR of 13.3% during the period 2022-2027. Source - Singapore Cybersecurity Market, 2022 $2T+ New survey reveals $2 trillion market opportunity for cybersecurity technology and service providers. Source - McKinsey, 2022 Who Is This Programme For? The programme designed for professionals in Information Technology Security functions. It is particularly applicable to major industries such as IT Product & Services, Banking and Financial Services, Computer & Network Security, and Management Consulting. The programme is designed for professionals with technical background, with less than 10 years of experience, who are looking to incorporate fundamentals of cybersecurity in their function/organisation. Programme Goals Acquire fundamental concepts of Cybersecurity and effective applications to address real-world problems and needs. Develop advanced applications and frameworks needed to detect, withstand, and counteract cyber attacks. Understand various network attacks and the fundamentals of network security. Modules Module 1 Introduction to Cybersecurity Why cybersecurity The difficulty of achieving security Module 2 Ciphers & Encryption Fundamentals Encryption, decryption and keys Classical ciphers Definitions and properties of cryptosystems Kerckhoffs’ principle vs security by obscurity Module 3 Modern Ciphers Stream cipher Block cipher Module 4 Entity Authentication (Password) Entity authentication Password Multi-factor authentication Module 5 Public Key System & Cryptographic Hash Public Key Cryptography (PKC) Hash and keyed-hash Module 6 Data Origin Authentication & Public Key Infrastructure Data origin authentication using MAC Data origin authentication using Signature Public Key Distribution (PKD) Public Key Infrastructure (PKI) Module 7 Protocol Security Strong authentication protocol Key exchange protocol Authenticated key exchange protocol Securing a communication channel Module 8 Network Security Network layer Name resolution and attacks Denial of Service (DoS) attacks Useful network security tools: Wireshark and Nmap Firewall Module 9 Web Security Web threat models UI-based attacks Cross Site Scripting (XSS) attacks Cross Site Request Forgery (CSRF) attacks SQL Injection attacks Module 10 System Security and Access Control Access control Access control representation Access control in UNIX/Linux Controlled invocation and privilege elevation Module 11 Attacks, Malware & Mitigation Attack framework and cyber kill chain Reconnaissance Vulnerability scanning Automated exploitation Malware and defense Module 12 Review and Trends in Cybersecurity Web privacy Cloud security Mobile security IoT security What Will This Programme Do For You? Explain the fundamentals of cybersecurity and C-I-A security requirements Describe the key concepts and techniques in the cybersecurity domain, including encryption, authentication, and secure channel Recognise well-known attacks on vulnerable hosts, networks, and web servers; and explain counter measures that can prevent and withstand the attacks Apply best practices in cybersecurity to safeguard the systems from cyber attacks Programme Highlights 120+ 5+ 10+ Discussion Boards Assignments Video Lectures 5+ Demo Videos Programme designed for IT professionals looking to incorporate fundamentals of cybersecurity in their function/organisation Integrated and enhanced learning experiences a. Unique blend of video lectures by faculty, case studies and practice-based assignments and assessments Hands-on and applied learning experiences a. Faculty demo videos b. Live master classes on tools* c. Weekly sessions with Industry Experts Learning, interactions, and networking opportunities with industry experts, stellar faculty, and peers *The scheduled masterclass(s) may change, and confirmation will be provided once the programme begins. 4+ Case Studies Faculty Dr Sufatrio Lecturer (Educator Track) Dr Sufatrio is a Lecturer with the School of Computing (SoC) of the National University of Singapore (NUS). He obtained his Ph.D. and M.Sc. in Computer Science from SoC, NUS. Previously, he was a Scientist and Acting Lab Head of the Mobile Forensics & Security Lab, at the Cyber Security & Intelligence (CSI) Department, Institute for Infocomm Research (I2R), A*STAR. Prior to that, he was an Associate Scientist and then a Research Scientist with the Temasek Laboratories at the National University of Singapore (TL@NUS). He is interested in many areas of computer security, and have published numerous papers on systems, network and mobile security. Dr Guo Charng Rang Executive Education Fellow Dr Guo has a Ph.D in Mathematics from the University of Oxford and B.Sc (Honours) in Mathematics from NUS. He served as the founding Programme Director of the National Cybersecurity R&D Lab (NCL) from 2015 – 2021, and an Associate Professor at the School of Computing at the National University of Singapore from 2017 – 2021. He oversees the development and operation of NCL, a national lab funded by the National Research Foundation hosted in NUS School of Computing. The objective is to support the Singapore cybersecurity community in R&D and education. Prior to joining NUS, Dr Guo worked in DSO National Laboratories and Defence Science and Technology Agency for more than 20 years, specializing in cybersecurity, in particular, in cryptography and trusted system. Case Studies Brute Force Attack on Mozilla Firefox We will be looking at the example of how Mozilla Firefox protected stored passwords on their browsers using weak encryption schemes and how they failed to prioritize patching for close to 9 years. Singapore’s Cyber Security Masterplan As Singapore embarks on its digital transformation initiative towards a smart nation and digital economy, the country publishes a snapshot of the cyber landscape in Singapore every year. The government strives to establish safer and more secure cyberspace through its cybersecurity master plan. Hacking into the Dunkin Donut Reward Program We will be using Nmap tools on a sample test system to scan for open Ports, identify those ports which should not be open in a live system & also use brute force hacking attempts to simulate the way in which attackers hacked into the Dunkin Donuts rewards program. Exploiting Unpatched Versions of Google Chrome Browser We will be using the Metasploit tool on a sample Linux system to execute a Linux kernel escalation attack and then explain how these attacks are then simulated by attackers to go after unpatched versions of Google Chrome which enables them to install all kinds of spyware & malware on Android machines (smartphones/laptops) as per their requirement. Zero Trust Architecture at GitLab We will be looking at the experience of Kathy Wang (Former CISO of GitLab) and the challenges she faced in securing the IT architecture at her company & how she finally decided to go ahead with a Zero trust architecture for her company. Note: All brand, product and company names are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with, endorsement by, or association of any kind between them and programme owners. Tools Learn how to use most in-demand tools with faculty demo videos. Wireshark Nmap Metasploit Nessus Note: All brand, product and company names are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with, endorsement by, or association of any kind between them and programme owners. Certificate Upon successful completion of the programme, participants will be awarded a verified digital certificate by NUS School of Computing. Note: All certificate images are for illustrative purpose only and may be subject to change at the discretion of NUS School of Computing Learning Journey Orientation Week The first week is orientation week. During this week you will be introduced to the other participants in the class from across the world and you will learn how to use the learning management system, discussion boards, and other learning tools provided. Weekly Goals On other weeks, you have learning goals set for the week. The goals would include watching the video lectures and completing the assignments. All assignments have weekly deadlines. Support and Guidance from Programme Leader The Programme Leader is a subject matter expert who guides learners through their learning journey. They conduct Office Hours to clarify learner queries related to the learning content and grade a few designated assignments. Follow-Up Emeritus Programme Support Team follow-up over email and phone calls with learners who are unable to submit their assignments. Programme Details 3 Months | 6—8 hours/week Online via recorded video lectures USD 1,650 + GST *Singapore residents who wish to enrol for this programme will be charged GST. Programme Starts: 28 June 2023 About NUS School of Computing The NUS School of Computing traces its roots back to the Nanyang University Department of Computer Science that was established in 1975 – the first of its kind in Singapore. Since then, we have developed into one of the top 10 computing schools in the world, with faculty members who are both internationally recognised researchers and inspiring teachers. We offer outstanding undergraduate and graduate degree programmes across the full spectrum of the field of computing, including Computer Science, Information Systems, Computer Engineering, Business Analytics and Information Security, as well as specialisations in emerging areas of importance such as Artificial Intelligence, FinTech, Blockchain, Analytics and Cybersecurity. Correspondingly, we attract excellent students and produce talented graduates who are making their mark in the world. The exceptional education that students experience here, coupled with the demand for computing talent in all fields and industries, make NUS Computing graduates highly sought-after. We instil our students with leadership qualities and a spirit of entrepreneurship through mentorship, community service initiatives and special programmes, including The Furnace, a start-up incubator which offers funding, infrastructure and management support to bring original ideas to commercial fruition. The NUS School of Computing Advanced Computing for Executives (ACE) was established to help business leaders and computing professionals to learn about emerging technology and leverage it for digital transformation and business competitiveness. Our three-pronged raison d’etre is to (1) partner with the industry and government to upskill and re-skill the workforce in information communication technology (ICT), (2) collaborate closely with NUS School of Computing (SoC) faculty members in launching continuing education and training (CET) programmes for adult learners, and (3) support and empower organisations to embark on digital transformation projects. We are pleased to have been educating and training Singapore and the world's business leaders and computing professionals for the past four decades and are proud to count many locally and internationally prominent leaders in the field among our large and accomplished family of alumni. Emeritus Insights This programme features 6 months of free Premium Access to Emeritus Insights—a mobile app with 5,000+ bite-sized, business-focused videos to help you meet your daily learning goals on the go. About Emeritus NUS School of Computing is collaborating with online education provider Emeritus to offer a portfolio of high-impact online programmes. Working with Emeritus gives NUS School of Computing the advantage of broadening its access beyond their on-campus offerings in a collaborative and engaging format that stays true to the quality of NUS School of Computing. Emeritus’ approach to learning is built on a cohort-based design to maximise peer-to-peer sharing and includes video lectures with world-class faculty and hands-on project-based learning. More than 250,000 students from over 160 countries have benefitted professionally from Emeritus’ courses. www.emeritus.org Apply for the programme here APPLY NOW Schedule a call with a Programme Adviser to learn how this programme can help you SCHEDULE A CALL E-mail: info@emeritus.org Call: +65 3138 5595 (11:30 AM - 6:30 PM SGT) We hope to respond to your enquiry in less than 24 hours. Our responses may take up to 72 hours during weekends and holidays. WhatsApp an Advisor on +65 8014 3066* *This number does not accept any calls. Please message your queries.