User Session Recording Technology for Security and Compliance Training Course

This instructor-led live training in Czech Republic (online or onsite) is designed for system administrators who want to use 389 Directory Server to configure and manage LDAP-based authentication and authorization.

Upon completion of this training, participants will be able to:

• Install and configure 389 Directory Server.
• Understand the features and architecture of 389 Directory Server.
• Learn how to configure the directory server using the web console and CLI.
• Set up and monitor replication for high availability and load balancing.
• Manage LDAP authentication using SSSD for faster performance.
• Integrate 389 Directory Server with Microsoft Active Directory.

This instructor-led live training in Czech Republic (offered online or onsite) targets system administrators who want to utilize Microsoft Active Directory for managing and securing data access.

By the conclusion of this training, participants will be capable of:

• Installing and configuring Active Directory.
• Creating domains and defining access rights for users and devices.
• Managing users and computers through Group Policies.
• Controlling access to file servers.
• Setting up a Certificate Service and handling certificates.
• Deploying and managing services such as encryption, certificates, and authentication.

Building a secure networked application is challenging, even for developers who have prior experience with cryptographic primitives like encryption and digital signatures. To help participants grasp the role and application of these building blocks, this course first establishes a solid foundation regarding the core requirements of secure communication—specifically secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also highlights common threats that can compromise these requirements alongside real-world solutions.

Given that cryptography is central to network security, the course covers essential algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on complex mathematics, these topics are presented from a developer's viewpoint, including typical use cases and practical considerations such as public key infrastructures. Additionally, security protocols across various domains of secure communication are introduced, with a detailed examination of widely used protocol families like IPSEC and SSL/TLS.

Typical cryptographic vulnerabilities related to specific algorithms and protocols—such as BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks—are explored. For each issue, the course outlines practical implications and potential consequences without delving into deep mathematical theory.

Since XML technology is pivotal for data exchange in networked applications, the security aspects of XML are also covered. This includes using XML within web services and SOAP messages, as well as protection mechanisms like XML signature and XML encryption. The course also addresses weaknesses in these protections and XML-specific security risks, such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Comprehend fundamental concepts of security, IT security, and secure coding
• Grasp the requirements for secure communication
• Gain knowledge of network attacks and defenses across different OSI layers
• Develop a practical understanding of cryptography
• Understand essential security protocols
• Awareness of recent attacks targeting cryptosystems
• Learn about relevant recent vulnerabilities
• Understand web services security concepts
• Access sources and further readings on secure coding practices

Audience

Developers, Professionals

Developing secure C and C++ software demands rigorous protection against malicious exploitation, memory corruption, and input validation bypasses. This program explores vulnerability patterns such as buffer overflows, use-after-free errors, integer overflows, and type confusion. Participants will apply secure coding guidelines, utilize static analysis tools, and adopt defensive programming techniques to eliminate weaknesses, enforce input sanitization, and deliver hardened software resilient against cyberattacks.

Even seasoned Java developers do not automatically master all the security services provided by Java, nor are they fully aware of the various vulnerabilities that impact Java-based web applications.

This course introduces the security components of Java Standard Edition (Java SE) and addresses security challenges within Java Enterprise Edition (Java EE) and web services. Before exploring specific services, the course covers the fundamentals of cryptography and secure communication. Through practical exercises, participants learn about declarative and programmatic security techniques in Java EE, as well as transport-layer and end-to-end security for web services. All concepts are reinforced through hands-on exercises where participants can experiment with the discussed APIs and tools.

The course also examines and explains the most common and severe programming flaws in the Java language and platform, along with web-related vulnerabilities. Beyond typical errors made by Java developers, the discussed security vulnerabilities encompass both language-specific issues and problems arising from the runtime environment. Each vulnerability and corresponding attack is demonstrated through easy-to-follow exercises, followed by recommended coding guidelines and mitigation strategies.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to prevent them
• Comprehend the security concepts underlying web services
• Gain proficiency in using various security features of the Java development environment
• Develop a practical understanding of cryptography
• Understand the security solutions available in Java EE
• Identify typical coding mistakes and learn how to avoid them
• Receive information on recent vulnerabilities affecting the Java framework
• Acquire practical knowledge of security testing tools
• Access resources and further readings on secure coding practices

Audience

Developers

Today, numerous programming languages allow code compilation for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, developers must understand how to apply architectural and coding-level techniques to implement desired security features, avoid vulnerabilities, and limit their exploitation.

This course aims to teach developers, through extensive hands-on exercises, how to prevent untrusted code from executing privileged actions, secure resources via strong authentication and authorization, manage remote procedure calls and sessions, and explore various implementation strategies for different functionalities.

The course introduces various vulnerabilities by first presenting common programming pitfalls in .NET. The discussion on ASP.NET vulnerabilities covers the impact of different environment settings. Furthermore, the section on ASP.NET-specific vulnerabilities addresses both general web application security challenges and specialized issues such as ViewState attacks and string termination attacks.

Participants attending this course will

• Comprehend fundamental concepts of security, IT security, and secure coding
• Understand web vulnerabilities beyond the OWASP Top Ten and learn how to mitigate them
• Utilize various security features available in the .NET development environment
• Gain practical experience with security testing tools
• Recognize common coding errors and learn how to avoid them
• Stay informed about recent vulnerabilities affecting .NET and ASP.NET
• Access resources and further reading materials on secure coding practices

Audience

Developers

This course equips PHP developers with the vital skills needed to fortify their applications against modern internet threats. We explore web vulnerabilities through practical PHP examples that extend beyond the OWASP Top Ten, addressing a wide range of injection attacks, script injections, session handling weaknesses, insecure direct object references, file upload issues, and more. The course categorizes PHP-related vulnerabilities into standard types such as missing or improper input validation, incorrect error and exception handling, misuse of security features, and time- and state-dependent problems. In this latter category, we examine specific attacks like open_basedir circumvention, denial-of-service via magic float, and hash table collision attacks. Throughout these discussions, participants will learn the essential techniques and functions required to mitigate these risks.

We also place a special emphasis on client-side security, addressing issues related to JavaScript, Ajax, and HTML5. The curriculum introduces key PHP security extensions such as hash, mcrypt, and OpenSSL for cryptography, alongside Ctype, ext/filter, and HTML Purifier for input validation. Participants will receive guidance on best hardening practices concerning PHP configuration (php.ini), Apache, and server management in general. Finally, the course provides an overview of various security testing tools and techniques available to developers and testers, including security scanners, penetration testing methods, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the theoretical introduction to vulnerabilities and the practical configuration practices are reinforced with hands-on exercises. These sessions demonstrate the consequences of successful attacks, show how to apply mitigation techniques, and introduce the use of various extensions and tools.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Gain knowledge of web vulnerabilities beyond the OWASP Top Ten and learn how to avoid them
• Learn about client-side vulnerabilities and adopt secure coding practices
• Develop a practical understanding of cryptography
• Learn to utilize various PHP security features effectively
• Identify typical coding mistakes and understand how to prevent them
• Stay informed about recent vulnerabilities within the PHP framework
• Acquire practical skills in using security testing tools
• Receive sources and further reading materials on secure coding practices

Audience

Developers

This consolidated SDL core training provides a comprehensive look at secure software design, development, and testing through the lens of Microsoft's Secure Development Lifecycle (SDL). It offers a level 100 overview of the fundamental building blocks of SDL, followed by design techniques to help identify and resolve flaws in the early stages of the development process.

Focusing on the development phase, the course outlines common security-related programming bugs found in both managed and native code. The curriculum presents attack vectors for discussed vulnerabilities alongside their mitigation techniques, all illustrated through hands-on exercises that offer participants practical, live hacking experiences. The introduction to various security testing methods is followed by demonstrations of the effectiveness of different testing tools. Participants can grasp the operation of these tools through practical exercises, applying them to previously discussed vulnerable code.

Participants attending this course will

Understand the basic concepts of security, IT security, and secure coding

Become familiar with the essential steps of the Microsoft Secure Development Lifecycle

Learn secure design and development practices

Gain knowledge of secure implementation principles

Understand security testing methodology

• Obtain sources and further reading materials on secure coding practices

Audience

Developers, Managers

In this instructor-led, live course in Czech Republic, participants will learn how to develop an effective security strategy to address DevOps security challenges.

The EC-Council Certified DevSecOps Engineer (ECDE) course is a practical program designed to empower professionals with the expertise needed to integrate security throughout the DevOps lifecycle, ensuring secure software development from initial planning through to deployment.

This instructor-led training, available online or on-site, targets intermediate-level software developers and DevOps practitioners looking to embed security practices into their CI/CD pipelines, thereby guaranteeing the delivery of secure and compliant code.

Upon completion of this training, participants will be able to:

• Comprehend the core principles and practices of DevSecOps.
• Secure all stages of the CI/CD pipeline using automated tools.
• Apply secure coding standards and execute vulnerability scanning.
• Prepare for the ECDE certification through practical labs and comprehensive reviews.

Course Format

• Interactive lectures and discussions.
• Hands-on experience with DevSecOps tools within simulated pipelines.
• Guided exercises centered on secure development and deployment processes.

Customization Options

• For teams seeking customized training tailored to their specific workflows or toolchains, please contact us to arrange.

This instructor-led, live training in Czech Republic (online or onsite) is aimed at system administrators who wish to use FreeIPA to centralize the authentication, authorization and account information for their organization's users, groups, and machines.

By the end of this training, participants will be able to:

• Install and configure FreeIPA.
• Manage Linux users and clients from a single central location.
• Use FreeIPA's CLI, Web UI and RPC interface to set up and manage permissions.
• Enable Single Sign On authentication across all systems, services and applications.
• Integrate FreeIPA with Windows Active Directory.
• Backup, replicate and migrate an FreeIPA server.

This instructor-led, live training in Czech Republic (online or onsite) targets system administrators who wish to utilize Okta for identity and access management.

By the end of this training, participants will be able to:

• Configure, integrate, and manage Okta.
• Integrate Okta into existing applications.
• Implement security measures with multi-factor authentication.

OpenLDAP is open-source software used to implement the LDAP (Lightweight Directory Access Protocol), which enables management and access to information directories. It is a popular directory server that can be used to store and share data about users, groups, network resources, and other objects in a network.