Explore Our Courses

Building Secure and Resilient Edge AI Systems

 21 Hours
Pelatihan langsung yang dipandu instruktur di Indonesia (online atau di tempat) ini ditujukan untuk profesional keamanan siber tingkat lanjut, insinyur AI, dan pengembang IoT yang ingin menerapkan langkah-langkah keamanan yang kuat dan strategi ketahanan untuk Edge AI sistem. Pada akhir pelatihan ini, peserta akan dapat:
  • Memahami risiko dan kerentanan keamanan dalam penerapan Edge AI.
  • Terapkan teknik enkripsi dan autentikasi untuk perlindungan data.
  • Merancang arsitektur tangguh Edge AI yang dapat menahan ancaman siber.
  • Terapkan strategi penerapan model AI yang aman di lingkungan edge.
Read more...

LLMs for Cybersecurity

 14 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di lokasi) ini ditujukan untuk profesional keamanan siber tingkat menengah dan ilmuwan data yang ingin memanfaatkan LLM untuk meningkatkan langkah-langkah keamanan siber dan intelijen ancaman. Pada akhir pelatihan ini, peserta akan mampu:
  • Memahami peran LLM dalam keamanan siber.
  • Menerapkan LLM untuk deteksi dan analisis ancaman.
  • Memanfaatkan LLM untuk otomatisasi dan respons keamanan.
  • Integrasikan LLM dengan infrastruktur keamanan yang ada.
Read more...

Artificial Intelligence for Cybersecurity

 21 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (daring atau tatap muka) ini ditujukan untuk profesional keamanan siber tingkat menengah hingga lanjutan dan kepala teknis yang ingin memahami bagaimana mengimplementasikan model AI untuk meningkatkan proses keamanan, otomatisasi deteksi ancaman dan respons, serta melakukan analisis prediktif.Selesai pelatihan ini, peserta akan dapat:
  • Mengerti peran AI dalam keamanan siber modern.
  • Membangun model machine learning untuk deteksi anomali dan ancaman.
  • Melaksanakan AI untuk otomatisasi respons insiden dan operasi keamanan.
  • Mengevaluasi pertimbangan etika dan operasional dari penggunaan AI dalam keamanan siber.
Read more...

Cybersecurity for Analysts

 21 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di tempat) ini ditujukan untuk analis tingkat menengah yang ingin secara efektif menganalisis, mengamankan, dan melindungi data dan jaringan organisasi mereka dari ancaman dunia maya. Pada akhir pelatihan ini, peserta akan dapat:
  • Dapatkan pemahaman menyeluruh tentang lanskap keamanan siber saat ini.
  • Pelajari dan terapkan kerangka kerja keamanan siber standar industri (misalnya, NIST, ISO/IEC 27001) dan praktik terbaik untuk meningkatkan postur keamanan organisasi mereka.
  • Terapkan langkah-langkah keamanan jaringan yang efektif, termasuk mengonfigurasi firewall, VPN, sistem IDS/IPS, dan menerapkan teknik enkripsi untuk melindungi data saat tidak digunakan dan saat dikirim.
  • Identifikasi, analisis, dan tanggapi insiden keamanan siber menggunakan intelijen ancaman, alat SIEM, dan rencana respons insiden.
Read more...

Fortinet Firewall Management, Monitoring, and Maintenance

 21 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di tempat) ini ditujukan untuk administrator jaringan tingkat menengah yang ingin memperoleh keterampilan penting untuk mengelola, mengelola, memantau, dan memelihara sistem keamanan Fortinet. Pada akhir pelatihan ini, peserta akan dapat:
  • Konfigurasikan dan kelola firewall FortiGate.
  • Pantau lalu lintas jaringan dan kelola insiden dengan FortiAnalyzer.
  • Otomatisasi tugas dan kelola kebijakan melalui FortiManager.
  • Terapkan strategi pemeliharaan preventif dan atasi masalah jaringan.
Read more...

Introduction to FortiGate 1100E

 14 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di lokasi) ditujukan untuk administrator jaringan tingkat pemula yang ingin menggunakan FortiGate 1100E untuk mengelola dan mengamankan lingkungan jaringan mereka secara efektif. Pada akhir pelatihan ini, peserta akan mampu:
  • Memahami arsitektur dasar dan fitur FortiGate 1100E.
  • Pelajari cara menyebarkan FortiGate 1100E di berbagai lingkungan jaringan.
  • Dapatkan pengalaman langsung dengan konfigurasi dasar dan tugas manajemen.
  • Pahami kebijakan keamanan, NAT, dan VPN.
  • Belajar memantau dan memelihara FortiGate 1100E.
Read more...

FortiGate 7.4 Administration

 21 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di lokasi) ditujukan untuk administrator jaringan tingkat menengah yang ingin mengelola dan mengamankan jaringan mereka menggunakan firewall FortiGate. Pada akhir pelatihan ini, peserta akan mampu:
  • Memahami fitur dan fungsi Fortigate, khususnya yang diperkenalkan atau ditingkatkan di versi 7.4.
  • Konfigurasikan dan kelola perangkat FortiGate dan terapkan fitur keamanan tingkat lanjut.
  • Terapkan dan kelola langkah-langkah keamanan tingkat lanjut seperti IPS, antivirus, pemfilteran web, dan manajemen ancaman.
  • Pantau aktivitas jaringan, analisis log, dan buat laporan untuk audit dan kepatuhan.
Read more...

Fortinet NSE3

 14 Hours
This instructor-led, live training in Indonesia (online or onsite) is aimed at intermediate-level technical professionals who wish to delve deeper into the technical aspects and functionalities of Fortinet’s product line to effectively recommend, sell, and implement Fortinet security solutions. By the end of this training, participants will be able to:
  • Gain in-depth knowledge of Fortinet’s advanced security solutions and products.
  • Understand the technical features, benefits, and deployment scenarios for each core Fortinet product.
  • Configure, manage, and troubleshoot Fortinet solutions in diverse environments.
  • Apply Fortinet products to address complex security challenges and requirements.
Read more...

Cortex XDR

 21 Hours
This instructor-led, live training in Indonesia (online or onsite) is aimed at security professionals who wish to learn how to use Cortex XDR in preventing and stopping the occurrence of sophisticated attacks and threats. By the end of this training, participants will be able to:
  • Understand the architecture and components of Cortex XDR.
  • Create and manage profiles for exploit and malware prevention.
  • Analyze behavioral threats and monitor response actions.
  • Perform basic Cortex app troubleshooting.
Read more...

Fortinet NSE2

 14 Hours
This instructor-led, live training in Indonesia (online or onsite) is aimed at beginner-level technical professionals who wish to learn the concept of the Security Fabric and how it evolved to address the cybersecurity needs of organizations. By the end of this training, participants will be able to:
  • Learn the evolution of cybersecurity and how it has shaped current security technologies.
  • Use Fortinet products to protect against specific types of cyber threats and attacks.
  • Understand the integration and automation capabilities of Fortinet solutions in providing a coordinated response to cyber incidents.
Read more...

Cybersecurity with Python

 14 Hours
This instructor-led, live training in Indonesia (online or onsite) is aimed at experienced developers who wish to gain a comprehensive understanding of Python programming and its applications in cybersecurity. By the end of this training, participants will be able to:
  • Use Python programming for defensive cybersecurity.
  • Understand and use Python for ethical offensive techniques and digital forensics tasks.
  • Recognize legal and ethical considerations surrounding offensive cybersecurity and vulnerability disclosure.
Read more...

Palo Alto Networks Firewall Troubleshooting

 21 Hours
Pelatihan langsung yang dipandu instruktur di Indonesia (online atau di tempat) ini ditujukan untuk profesional keamanan yang ingin mempelajari cara memecahkan masalah firewall generasi berikutnya Palo Alto Networks. Pada akhir pelatihan ini, peserta akan dapat:
  • Memahami arsitektur firewall generasi berikutnya.
  • Selidiki dan atasi masalah jaringan menggunakan alat firewall.
  • Menganalisis log tingkat lanjut untuk menyelesaikan skenario kehidupan nyata.
Read more...

Fortinet NSE1

 7 Hours
This instructor-led, live training in Indonesia (online or onsite) is aimed at beginner-level network security professionals who wish to learn the concept of cybersecurity and the current global threat landscape. By the end of this training, participants will be able to:
  • Understand the current global threat landscape and identify the main types of cyber adversaries.
  • Recognize the primary types of malware and the mechanics of cyber attacks.
  • Understand the basics of network security and the importance of a layered security approach.
  • Learn about Fortinet's Security Fabric and how it addresses modern cybersecurity challenges.
Read more...

Fortigate 600E Security Administration and Operations

 14 Hours
This instructor-led, live training in Indonesia (online or onsite) is aimed at intermediate-level network and security professionals who wish to effectively manage and secure networks using Fortigate 600E equipment, with a specific focus on HA configurations for enhanced reliability and performance. By the end of this training, participants will be able to:
  • Understand the features, specifications, and operating principles of the Fortigate 600E firewall.
  • Perform the initial setup of the Fortigate 600E, including basic configuration tasks like setting up interfaces, routing, and initial firewall policies.
  • Configure and manage advanced security features such as SSL VPN, user authentication, antivirus, IPS, web filtering, and anti-malware capabilities to protect against a variety of network threats.
  • Troubleshoot common issues in HA setups and effectively manage HA environments.
Read more...

Panorama: Managing Firewalls at Scale

 21 Hours
This instructor-led, live training in Indonesia (online or onsite) is aimed at security professionals who wish to learn how to manage firewalls at scale. By the end of this training, participants will be able to:
  • Design, configure, and manage the Panorama FireWall management server.
  • Manage policies using device groups.
  • Roll out network configurations to different firewalls.
Read more...

Cybersecurity in AI Systems

 14 Hours
Pelatihan langsung yang dipandu instruktur di Indonesia (online atau di tempat) ini ditujukan untuk profesional AI dan keamanan siber tingkat menengah yang ingin memahami dan mengatasi kerentanan keamanan khusus pada model dan sistem AI, khususnya dalam industri yang sangat diatur seperti keuangan, tata kelola data, dan konsultasi. Pada akhir pelatihan ini, peserta akan dapat:
  • Pahami jenis serangan adversarial yang menargetkan sistem AI dan metode untuk mempertahankan diri dari serangan tersebut.
  • Terapkan teknik penguatan model untuk mengamankan jalur pembelajaran mesin.
  • Pastikan keamanan dan integritas data dalam model pembelajaran mesin.
  • Menavigasi persyaratan kepatuhan peraturan yang terkait dengan keamanan AI.
Read more...

Fortinet NSE4 - FortiOS

 14 Hours
Pelatihan langsung yang dipandu instruktur di Indonesia (online atau di tempat) ini ditujukan untuk manajer keamanan jaringan berpengalaman yang ingin mendapatkan pengetahuan dan keterampilan yang diperlukan untuk menyebarkan, mengelola, dan memecahkan masalah peralatan keamanan Fortinet FortiGate yang berjalan di FortiOS 7.2 sebagai NSE4 Network Security Profesional. Pada akhir pelatihan ini, peserta akan dapat:
  • Memahami portofolio produk Fortinet dan peran FortiOS dalam keamanan jaringan.
  • Terapkan kebijakan firewall, profil keamanan, dan Network Address Translation (NAT) yang efektif.
  • Memanfaatkan layanan keamanan dan memastikan redundansi dan failover jaringan.
  • Terapkan praktik terbaik keamanan dan optimalkan kebijakan keamanan untuk kepatuhan dan mitigasi ancaman.
Read more...

Palo Alto Networks Firewall Essentials: Configuration and Management

 35 Hours
Pelatihan langsung yang dipandu instruktur di Indonesia (online atau di tempat) ini ditujukan untuk profesional keamanan yang ingin mempelajari dasar-dasar pengelolaan firewall generasi berikutnya Palo Alto Networks. Pada akhir pelatihan ini, peserta akan dapat:
  • Konfigurasikan dan kelola fitur penting firewall Palo Alto Networks.
  • Kelola kebijakan keamanan dan NAT.
  • Kelola strategi pencegahan ancaman.
  • Pantau ancaman dan lalu lintas jaringan.
Read more...

389 Directory Server for Administrators

 14 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di tempat) ini ditujukan untuk sysadmin yang ingin menggunakan 389 Directory Server untuk mengonfigurasi dan mengelola autentikasi dan otorisasi berbasis LDAP. Pada akhir pelatihan ini, peserta akan dapat:
  • Instal dan konfigurasikan 389 Directory Server.
  • Memahami fitur dan arsitektur 389 Directory Server.
  • Pelajari cara mengonfigurasi server direktori menggunakan konsol web dan CLI.
  • Siapkan dan pantau replikasi untuk ketersediaan tinggi dan penyeimbangan beban.
  • Kelola LDAP autentikasi menggunakan SSSD untuk kinerja yang lebih cepat.
  • Integrasikan 389 Directory Server dengan Microsoft Direktori Aktif.
Read more...

Active Directory for Admins

 21 Hours
Pelatihan langsung yang dipandu instruktur di Indonesia (online atau di tempat) ini ditujukan untuk administrator sistem yang ingin menggunakan Microsoft Direktori Aktif untuk mengelola dan mengamankan akses data. Pada akhir pelatihan ini, peserta akan dapat:
  • Siapkan dan konfigurasikan Direktori Aktif.
  • Siapkan domain dan tentukan hak akses pengguna dan perangkat.
  • Kelola pengguna dan mesin melalui Kebijakan Grup.
  • Kontrol akses ke server berkas.
  • Siapkan Layanan Sertifikat dan kelola sertifikat.
  • Terapkan dan kelola layanan seperti enkripsi, sertifikat, dan autentikasi.
Read more...

Android Security

 14 Hours
Android is an open platform for mobile devices such as handsets and tablets. It has a large variety of security features to make developing secure software easier; however, it is also missing certain security aspects that are present in other hand-held platforms. The course gives a comprehensive overview of these features, and points out the most critical shortcomings to be aware of related to the underlying Linux, the file system and the environment in general, as well as regarding using permissions and other Android software development components. Typical security pitfalls and vulnerabilities are described both for native code and Java applications, along with recommendations and best practices to avoid and mitigate them. In many cases discussed issues are supported with real-life examples and case studies. Finally, we give a brief overview on how to use security testing tools to reveal any security relevant programming bugs. Participants attending this course will 
  • Understand basic concepts of security, IT security and secure coding
  • Learn the security solutions on Android
  • Learn to use various security features of the Android platform
  • Get information about some recent vulnerabilities in Java on Android
  • Learn about typical coding mistakes and how to avoid them
  • Get understanding on native code vulnerabilities on Android
  • Realize the severe consequences of unsecure buffer handling in native code
  • Understand the architectural protection techniques and their weaknesses
  • Get sources and further readings on secure coding practices
Audience Professionals
Read more...

Network Security and Secure Communication

 21 Hours
Menerapkan aplikasi jaringan yang aman bisa jadi sulit, bahkan bagi pengembang yang mungkin telah menggunakan berbagai blok penyusun kriptografi (seperti enkripsi dan tanda tangan digital) sebelumnya. Agar peserta memahami peran dan penggunaan primitif kriptografi ini, pertama-tama diberikan dasar yang kuat tentang persyaratan utama komunikasi yang aman – pengakuan yang aman, integritas, kerahasiaan, identifikasi jarak jauh, dan anonimitas – sambil juga memaparkan masalah umum yang dapat merusak persyaratan ini beserta solusi di dunia nyata. Karena kriptografi merupakan aspek penting dari keamanan jaringan, algoritma kriptografi terpenting dalam kriptografi simetris, hashing, kriptografi asimetris, dan kesepakatan kunci juga dibahas. Alih-alih menyajikan latar belakang matematika yang mendalam, elemen-elemen ini dibahas dari sudut pandang pengembang, dengan menunjukkan contoh kasus penggunaan yang umum dan pertimbangan praktis yang terkait dengan penggunaan kripto, seperti infrastruktur kunci publik. Protokol keamanan di banyak area komunikasi aman diperkenalkan, dengan pembahasan mendalam tentang keluarga protokol yang paling banyak digunakan seperti IPSEC dan SSL/TLS. Kerentanan kripto yang umum dibahas terkait dengan algoritma kripto dan protokol kriptografi tertentu, seperti BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE dan sejenisnya, serta serangan pengaturan waktu RSA. Dalam setiap kasus, pertimbangan praktis dan konsekuensi potensial dijelaskan untuk setiap masalah, sekali lagi, tanpa membahas detail matematika yang mendalam. Akhirnya, karena teknologi XML merupakan pusat pertukaran data oleh aplikasi jaringan, aspek keamanan XML dijelaskan. Ini termasuk penggunaan XML dalam layanan web dan pesan SOAP bersamaan dengan langkah-langkah perlindungan seperti tanda tangan XML dan enkripsi XML – serta kelemahan dalam langkah-langkah perlindungan tersebut dan masalah keamanan khusus XML seperti injeksi XML, serangan entitas eksternal XML (XXE), bom XML, dan injeksi XPath. Peserta yang mengikuti kursus ini akan
  • Memahami konsep dasar keamanan, keamanan TI, dan pengkodean aman
  • Memahami persyaratan komunikasi yang aman
  • Pelajari tentang serangan dan pertahanan jaringan di berbagai lapisan OSI
  • Memiliki pemahaman praktis tentang kriptografi
  • Memahami protokol keamanan penting
  • Memahami beberapa serangan terbaru terhadap sistem kriptografi
  • Dapatkan informasi tentang beberapa kerentanan terkait terkini
  • Memahami konsep keamanan layanan Web
  • Dapatkan sumber dan bacaan lebih lanjut tentang praktik pengkodean yang aman
Hadirin Pengembang, Profesional
Read more...

C/C++ Secure Coding

 21 Hours
This three day course covers the basics of securing the C/C++ code against the malicious users who may exploit many vulnerabilities in the code with memory management and input handling, the course cover the principals of writing secure code.
Read more...

Advanced Java Security

 21 Hours
Even experienced Java programmers are not mastering by all means the various security services offered by Java, and are likewise not aware of the different vulnerabilities that are relevant for web applications written in Java. The course – besides introducing security components of Standard Java Edition – deals with security issues of Java Enterprise Edition (JEE) and web services. Discussion of specific services is preceded with the foundations of cryptography and secure communication. Various exercises deal with declarative and programmatic security techniques in JEE, while both transport-layer and end-to-end security of web services is discussed. The use of all components is presented through several practical exercises, where participants can try out the discussed APIs and tools for themselves. The course also goes through and explains the most frequent and severe programming flaws of the Java language and platform and web-related vulnerabilities. Besides the typical bugs committed by Java programmers, the introduced security vulnerabilities cover both language-specific issues and problems stemming from the runtime environment. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by the recommended coding guidelines and the possible mitigation techniques. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Understand security concepts of Web services
  • Learn to use various security features of the Java development environment
  • Have a practical understanding of cryptography
  • Understand security solutions of Java EE
  • Learn about typical coding mistakes and how to avoid them
  • Get information about some recent vulnerabilities in the Java framework
  • Get practical knowledge in using security testing tools
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Standard Java Security

 14 Hours
Description The Java language and the Runtime Environment (JRE) was designed to be free from the most problematic common security vulnerabilities experienced in other languages, like C/C++. Yet, software developers and architects should not only know how to use the various security features of the Java environment (positive security), but should also be aware of the numerous vulnerabilities that are still relevant for Java development (negative security). The introduction of security services is preceded with a brief overview of the foundations of cryptography, providing a common baseline for understanding the purpose and the operation of the applicable components. The use of these components is presented through several practical exercises, where participants can try out the discussed APIs for themselves. The course also goes through and explains the most frequent and severe programming flaws of the Java language and platform, covering both the typical bugs committed by Java programmers and the language- and environment-specific issues. All vulnerabilities and the relevant attacks are demonstrated through easy-to-understand exercises, followed by the recommended coding guidelines and the possible mitigation techniques. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn to use various security features of the Java development environment
  • Have a practical understanding of cryptography
  • Learn about typical coding mistakes and how to avoid them
  • Get information about some recent vulnerabilities in the Java framework
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

.NET, C# and ASP.NET Security Development

 14 Hours
A number of programming languages are available today to compile code to .NET and ASP.NET frameworks. The environment provides powerful means for security development, but developers should know how to apply the architecture- and coding-level programming techniques in order to implement the desired security functionality and avoid vulnerabilities or limit their exploitation. The aim of this course is to teach developers through numerous hands-on exercises how to prevent untrusted code from performing privileged actions, protect resources through strong authentication and authorization, provide remote procedure calls, handle sessions, introduce different implementations for certain functionality, and many more. Introduction of different vulnerabilities starts with presenting some typical programming problems committed when using .NET, while the discussion of vulnerabilities of the ASP.NET also deals with various environment settings and their effects. Finally, the topic of ASP.NET-specific vulnerabilities not only deals with some general web application security challenges, but also with special issues and attack methods like attacking the ViewState, or the string termination attacks. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn to use various security features of the .NET development environment
  • Get practical knowledge in using security testing tools
  • Learn about typical coding mistakes and how to avoid them
  • Get information about some recent vulnerabilities in .NET and ASP.NET
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

The Secure Coding Landscape

 14 Hours
The course introduces some common security concepts, gives an overview about the nature of the vulnerabilities regardless of the used programming languages and platforms, and explains how to handle the risks that apply regarding software security in the various phases of the software development lifecycle. Without going deeply into technical details, it highlights some of the most interesting and most aching vulnerabilities in various software development technologies, and presents the challenges of security testing, along with some techniques and tools that one can apply to find any existing problems in their code. Participants attending this course will 
  • Understand basic concepts of security, IT security and secure coding
  • Understand Web vulnerabilities both on server and client side
  • Realize the severe consequences of unsecure buffer handling
  • Be informated about some recent vulnerabilities in development environments and frameworks
  • Learn about typical coding mistakes and how to avoid them
  • Understand security testing approaches and methodologies
Audience Managers
Read more...

Secure coding in PHP

 21 Hours
The course provides essential skills for PHP developers necessary to make their applications resistant to contemporary attacks through the Internet. Web vulnerabilities are discussed through PHP-based examples going beyond the OWASP top ten, tackling various injection attacks, script injections, attacks against session handling of PHP, insecure direct object references, issues with file upload, and many others. PHP-related vulnerabilities are introduced grouped into the standard vulnerability types of missing or improper input validation, incorrect error and exception handling, improper use of security features and time- and state-related problems. For this latter we discuss attacks like the open_basedir circumvention, denial-of-service through magic float or the hash table collision attack. In all cases participants will get familiar with the most important techniques and functions to be used to mitigate the enlisted risks. A special focus is given to client-side security tackling security issues of JavaScript, Ajax and HTML5. A number of security-related extensions to PHP are introduced like hash, mcrypt and OpenSSL for cryptography, or Ctype, ext/filter and HTML Purifier for input validation. The best hardening practices are given in connection with PHP configuration (setting php.ini), Apache and the server in general. Finally, an overview is given to various security testing tools and techniques which developers and testers can use, including security scanners, penetration testing and exploit packs, sniffers, proxy servers, fuzzing tools and static source code analyzers. Both the introduction of vulnerabilities and the configuration practices are supported by a number of hands-on exercises demonstrating the consequences of successful attacks, showing how to apply mitigation techniques and introducing the use of various extensions and tools. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Have a practical understanding of cryptography
  • Learn to use various security features of PHP
  • Learn about typical coding mistakes and how to avoid them
  • Be informed about recent vulnerabilities of the PHP framework
  • Get practical knowledge in using security testing tools
  • Get sources and further readings on secure coding practices
Audience Developers
Read more...

Microsoft SDL Core

 14 Hours
The Combined SDL core training gives an insight into secure software design, development and testing through Microsoft Secure Development Lifecycle (SDL). It provides a level 100 overview of the fundamental building blocks of SDL, followed by design techniques to apply to detect and fix flaws in early stages of the development process. Dealing with the development phase, the course gives an overview of the typical security relevant programming bugs of both managed and native code. Attack methods are presented for the discussed vulnerabilities along with the associated mitigation techniques, all explained through a number of hands-on exercises providing live hacking fun for the participants. Introduction of different security testing methods is followed by demonstrating the effectiveness of various testing tools. Participants can understand the operation of these tools through a number of practical exercises by applying the tools to the already discussed vulnerable code. Participants attending this course will 
  • Understand basic concepts of security, IT security and secure coding
  • Get known to the essential steps of Microsoft Secure Development Lifecycle
  • Learn secure design and development practices
  • Learn about secure implementation principles
  • Understand security testing methodology
  • Get sources and further readings on secure coding practices
Audience Developers, Managers
Read more...

Security Testing

 14 Hours
After getting familiar with the vulnerabilities and the attack methods, participants learn about the general approach and the methodology for security testing, and the techniques that can be applied to reveal specific vulnerabilities. Security testing should start with information gathering about the system (ToC, i.e. Target of Evaluation), then a thorough threat modeling should reveal and rate all threats, arriving to the most appropriate risk analysis-driven test plan. Security evaluations can happen at various steps of the SDLC, and so we discuss design review, code review, reconnaissance and information gathering about the system, testing the implementation and the testing and hardening the environment for secure deployment. Many security testing techniques are introduced in details, like taint analysis and heuristics-based code review, static code analysis, dynamic web vulnerability testing or fuzzing. Various types of tools are introduced that can be applied in order to automate security evaluation of software products, which is also supported by a number of exercises, where we execute these tools to analyze the already discussed vulnerable code. Many real life case studies support better understanding of various vulnerabilities. This course prepares testers and QA staff to adequately plan and precisely execute security tests, select and use the most appropriate tools and techniques to find even hidden security flaws, and thus gives essential practical skills that can be applied on the next day working day. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Understand security testing approaches and methodologies
  • Get practical knowledge in using security testing techniques and tools
  • Get sources and further readings on secure coding practices
Audience Developers, Testers
Read more...

Secure Web Application Development and Testing

 21 Hours
Protecting applications that are accessible via the web requires well-prepared security professional who are at all time aware of current attack methods and trends. Plethora of technologies and environments exist that allow comfortable development of web applications. One should not only be aware of the security issues relevant to these platforms, but also of all general vulnerabilities that apply regardless of the used development tools. The course gives an overview of the applicable security solutions in web applications, with a special focus on understanding the most important cryptographic solutions to be applied. The various web application vulnerabilities are presented both on the server side (following the OWASP Top Ten) and the client side, demonstrated through the relevant attacks, and followed by the recommended coding techniques and mitigation methods to avoid the associated problems. The subject of secure coding is wrapped up by discussing some typical security-relevant programming mistakes in the domain of input validation, improper use of security features and code quality. Testing plays a very important role in ensuring security and robustness of web applications. Various approaches – from high level auditing through penetration testing to ethical hacking – can be applied to find vulnerabilities of different types. However, if you want to go beyond the easy-to-find low-hanging fruits, security testing should be well planned and properly executed. Remember: security testers should ideally find all bugs to protect a system, while for adversaries it is enough to find one exploitable vulnerability to penetrate into it. Practical exercises will help understanding web application vulnerabilities, programming mistakes and most importantly the mitigation techniques, together with hands-on trials of various testing tools from security scanners, through sniffers, proxy servers, fuzzing tools to static source code analyzers, this course gives the essential practical skills that can be applied on the next day at the workplace. Participants attending this course will
  • Understand basic concepts of security, IT security and secure coding
  • Learn Web vulnerabilities beyond OWASP Top Ten and know how to avoid them
  • Learn client-side vulnerabilities and secure coding practices
  • Have a practical understanding of cryptography
  • Understand security testing approaches and methodologies
  • Get practical knowledge in using security testing techniques and tools
  • Be informed about recent vulnerabilities in various platforms, frameworks and libraries
  • Get sources and further readings on secure coding practices
Audience Developers, Testers
Read more...

Cyber Security Awareness Training

 7 Hours
Cyber Security adalah praktek menerapkan teknologi, kontrol, dan proses untuk melindungi sistem komputer, server, jaringan, perangkat, program, dan data dari serangan cyber jahat. Pelatihan ini dipimpin oleh instruktur, secara langsung (online atau on-site) ditujukan untuk siapa saja yang ingin belajar bagaimana melindungi sistem yang terhubung ke internet dari berbagai jenis ancaman siber. Pada akhir latihan ini, peserta akan dapat:
    Memahami konsep dari Cyber Security. Belajar dan memahami berbagai ancaman Cyber Security Pelajari proses dan praktik terbaik untuk melindungi sistem yang terhubung ke internet dari serangan siber.
Format Kursus
    Konferensi dan diskusi interaktif. Banyak latihan dan praktek. Pelaksanaan tangan di lingkungan live-lab.
Opsi Customization Kursus
    Untuk meminta pelatihan tersuai untuk kursus ini, silakan hubungi kami untuk mengatur.
Read more...

Cybersecurity Fundamentals - A Practical Course

 14 Hours
This instructor-led, live training in Indonesia (online or onsite) is aimed at IT professionals who wish to learn and apply the fundamentals of Cybersecurity practices, processes, and tools in their organization. By the end of this training, participants will be able to:
  • Understand the Cybersecurity concepts, definitions, architecture, and principles.
  • Learn how to secure and protect digital assets (networks, systems, applications, and data).
  • Implement security models, frameworks, operational techniques, and incident handling.
  • Evaluate and mitigate the impact of cyber attacks, risks, threats, and vulnerabilities.
  • Gain insights on cybersecurity challenges with emerging technologies.
Read more...

Cyber Security Body of Knowledge (CyBOK)

 35 Hours
This instructor-led, live training in Indonesia (online or onsite) is aimed at software engineers and IT professionals who wish to gain a deeper knowledge on CyBOK and strengthen theoretical and applied skills in cyber security. By the end of this training, participants will be able to:
  • Understand the fundamental concepts, definitions, and principles of cyber security.
  • Acquire in-depth expertise in cyber security by implementing the CyBOK knowledge areas.
  • Gain extensive and foundational knowledge to operationalize the CyBOK framework.
  • Facilitate community and organization enablement to increase focus on data security and privacy.
  • Expand opportunities to earn specialization and credentials for cyber security professions.
Read more...

The Dark Web

 7 Hours
The course is intended for those requiring intelligence or evidence from the Dark Web. This will usually be those working in government or law enforcement though may also be in the private sector.
Read more...

DevOps Security: Creating a DevOps Security Strategy

 7 Hours
In this instructor-led, live course in Indonesia, participants will learn how to formulate the proper security strategy to face the DevOps security challenge.
Read more...

Executive Cyber Security Awareness

 7 Hours
This course provides leaders and managers with an overview of issues and activities associated with cybersecurity. Leaders will receive information in various topics that will build their knowledge and hone executive decision-making in regard to the cybersecurity threat.    
  By the end of this training, participants will be able to:
  • Understand the Internet, social network Privacy
  • Know PII and why it is important
  • Know how to secure the Online Activates
  • Know how to maintain the Privacy of business users
  • Know more of the Cyber laws that protect the Privacy
Format of the Course
  • Interactive lecture and discussion.
  • Lots of exercises and practice.
  • Hands-on implementation in a live-lab environment.
Course Customization Options
  • To request a customized training for this course, please contact us to arrange.
Read more...

System and Network Security with FortiGate

 21 Hours
Pelatihan langsung yang dipandu instruktur di Indonesia (online atau di tempat) ini ditujukan untuk teknisi keamanan dan administrator sistem yang ingin menggunakan FortiGate sistem jaringan berbasis keamanan canggih NGFW untuk melindungi organisasi mereka dari ancaman internal dan eksternal. Pada akhir pelatihan ini, peserta akan dapat:
  • Instal dan konfigurasikan model perangkat lunak dan perangkat keras NGFW FortiGate yang disukai.
  • Mengoperasikan dan menggunakan FortiGate NGFW untuk meningkatkan efisiensi tugas administrasi sistem.
  • Kelola berbagai bentuk ancaman eksternal dan internal menggunakan fitur FortiGate.
  • Integrasikan struktur keamanan FortiGate dengan seluruh infrastruktur TI untuk memberikan perlindungan otomatis yang cepat.
  • Pastikan perlindungan jangka panjang dari serangan dengan intelijen ancaman yang independen dan berkelanjutan FortiGate.
  • Pecahkan masalah kesalahan pengaturan sistem firewall paling umum yang relevan dengan FortiGate NGFW.
  • Terapkan solusi keamanan Fortinet di aplikasi perusahaan lainnya.
Read more...

FreeIPA for Administrators

 14 Hours
Pelatihan langsung yang dipandu instruktur di Indonesia (online atau di tempat) ini ditujukan untuk administrator sistem yang ingin menggunakan FreeIPA untuk memusatkan informasi autentikasi, otorisasi, dan akun untuk pengguna, grup, dan mesin di organisasi mereka. Pada akhir pelatihan ini, peserta akan dapat:
  • Instal dan konfigurasikan FreeIPA.
  • Kelola Linux pengguna dan klien dari satu lokasi pusat.
  • Gunakan CLI, UI Web, dan antarmuka RPC FreeIPA untuk mengatur dan mengelola izin.
  • Aktifkan autentikasi Single Sign On di seluruh sistem, layanan, dan aplikasi.
  • Integrasikan FreeIPA dengan Windows Active Directory.
  • Cadangkan, replikasi, dan migrasikan server FreeIPA.
Read more...

Penetration Testing with Nmap

 14 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di tempat) ini ditujukan untuk penguji perangkat lunak yang ingin melindungi jaringan organisasi mereka dengan Nmap. Pada akhir pelatihan ini, peserta akan dapat:
  • Siapkan lingkungan pengujian yang diperlukan untuk mulai menggunakan Nmap.
  • Memindai sistem jaringan untuk menemukan kerentanan keamanan.
  • Temukan host yang aktif dan rentan.
Read more...

Identity and Access Management with Okta

 14 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di tempat) ini ditujukan untuk administrator sistem yang ingin menggunakan Okta untuk manajemen identitas dan akses. Pada akhir pelatihan ini, peserta akan dapat:
  • Konfigurasikan, integrasikan, dan kelola Okta.
  • Integrasikan Okta ke dalam aplikasi yang ada.
  • Terapkan keamanan dengan autentikasi multifaktor.
Read more...

OpenLDAP for Linux Systems

 7 Hours
OpenLDAP adalah perangkat lunak sumber terbuka untuk mengimplementasikan Protokol LDAP (Direktori Ringan Access), yang memungkinkan pengelolaan dan akses ke direktori informasi. Jest adalah server direktori populer yang dapat digunakan untuk menyimpan dan berbagi data tentang pengguna, grup, sumber daya jaringan, dan objek lain di jaringan.
Read more...

OpenLDAP Workshop

 21 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (daring atau tatap muka) ini ditujukan untuk administrator sistem dan profesional IT tingkat menengah yang ingin menginstal, mengonfigurasi, mengelola, dan melindungi direktori LDAP menggunakan OpenLDAP.Selesai pelatihan ini, peserta akan dapat:
  • Mengerti struktur dan operasi dari direktori LDAP.
  • Menginstal dan mengonfigurasi OpenLDAP untuk berbagai lingkungan penempatan.
  • Menerapkan mekanisme kontrol akses, autentikasi, dan replikasi.
  • Menggunakan OpenLDAP dengan layanan dan aplikasi pihak ketiga.
Read more...

Identity and Access Management using OpenAM

 14 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di tempat) ini ditujukan untuk administrator sistem yang ingin menggunakan OpenAM untuk mengelola kontrol identitas dan akses untuk aplikasi web. Pada akhir pelatihan ini, peserta akan dapat:
  • Siapkan lingkungan server yang diperlukan untuk mulai mengonfigurasi autentikasi dan kontrol akses menggunakan OpenAM.
  • Terapkan fitur masuk tunggal (SSO), autentikasi multifaktor (MFA), dan layanan mandiri pengguna untuk aplikasi web.
  • Gunakan layanan federasi (OAuth 2.0, OpenID, SAML v2.0, dll.) untuk memperluas manajemen identitas secara aman di berbagai sistem atau aplikasi.
  • Access dan mengelola layanan autentikasi, otorisasi, dan identitas melalui REST API.
Read more...

OpenDJ for Administrators

 14 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di tempat) ini ditujukan untuk administrator sistem yang ingin menggunakan OpenDJ untuk mengelola kredensial pengguna organisasi mereka dalam lingkungan produksi. Pada akhir pelatihan ini, peserta akan dapat:
  • Instal dan konfigurasikan OpenDJ.
  • Pertahankan server OpenDJ, termasuk pemantauan, pemecahan masalah, dan pengoptimalan kinerja.
  • Buat dan kelola beberapa OpenDJ database.
  • Cadangkan dan migrasikan server OpenDJ.
Read more...

OpenVAS

 14 Hours
OpenVAS adalah kerangka kerja sumber terbuka canggih yang terdiri dari beberapa layanan dan alat untuk pemindaian dan manajemen kerentanan jaringan. Dalam pelatihan langsung yang dipandu instruktur ini, peserta akan mempelajari cara menggunakan OpenVAS untuk pemindaian kerentanan jaringan. Pada akhir pelatihan ini, peserta akan dapat:
  • Instal dan konfigurasikan OpenVAS
  • Pelajari fitur dan komponen dasar OpenVAS
  • Konfigurasikan dan terapkan pemindaian kerentanan jaringan dengan OpenVAS
  • Tinjau dan interpretasikan hasil pemindaian OpenVAS
Hadirin
  • Insinyur jaringan
  • Administrator jaringan
Format kursus
  • Sebagian kuliah, sebagian diskusi, latihan dan praktik langsung yang berat
Catatan
  • Untuk meminta pelatihan khusus untuk kursus ini, silakan hubungi kami untuk mengaturnya.
Read more...

Palo Alto Firewalls

 21 Hours
Pelatihan langsung yang dipimpin instruktur di Indonesia (online atau di tempat) ini ditujukan untuk pengembang yang ingin mencegah intrusi malware dengan Palo Alto Networks. Pada akhir pelatihan ini, peserta akan dapat:
  • Siapkan lingkungan pengembangan yang diperlukan untuk mulai mengembangkan firewall.
  • Terapkan firewall Palo Alto di server cloud.
  • Kelola aliran paket melalui firewall Palo Alto.
  • Menafsirkan klasifikasi dan jenis QoS.
Read more...

IBM Qradar SIEM: Beginner to Advanced

 14 Hours
Pelatihan langsung yang dipandu instruktur di Indonesia (online atau di tempat) ini ditujukan untuk teknisi keamanan yang ingin menggunakan IBM Qradar SIEM untuk menangani kasus penggunaan keamanan yang mendesak. Pada akhir pelatihan ini, peserta akan dapat:
  • Dapatkan visibilitas ke dalam data perusahaan di lingkungan lokal dan cloud.
  • Otomatisasi intelijen keamanan untuk memburu ancaman dan menahan risiko.
  • Mendeteksi, mengidentifikasi, dan memprioritaskan ancaman.
Read more...

How to Write Secure Code

 35 Hours
This Course in Indonesia aims to help in the following:
  1. Help Developers to master the techniques of writing Secure Code
  2. Help Software Testers to test the security of the application before publishing to the production environment
  3. Help Software Architects to understand the risks surrounding the applications
  4. Help Team Leaders to set the security base lines for the developers
  5. Help Web Masters to configure the Servers to avoid miss-configurations
Read more...

Secure Developer Java (Inc OWASP)

 21 Hours
This course covers the secure coding concepts and principals with Java through Open Web Application Security Project (OWASP) methodology of testing. The Open Web Application Security Project is an online community which creates freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security.
Read more...

Secure Developer .NET (Inc OWASP)

 21 Hours
This course covers the secure coding concepts and principals with ASP.net through the Open Web Application Security Project (OWASP) methodology of testing , OWASP is an online community which creates freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security.  This Course explores the Dot Net Framework Security features and how to secure web applications.   
    
    
    
    
    
Read more...

Last Updated:

Testimonials(25)

Pelatihnya memiliki pengetahuan yang sangat baik tentang fortigate dan menyampaikan materinya dengan sangat baik. Terima kasih banyak kepada Soroush.

Colin Donohue - Technological University of the Shannon: Midlands Midwest

Course - FortiGate 7.4 Administration

Machine Translated

Beberapa contoh untuk setiap modul dan pengetahuan yang luas tentang pelatih.

Sebastian - BRD

Course - Secure Developer Java (Inc OWASP)

Machine Translated

Pengaturan laporan dan aturan.

Jack - CFNOC- DND

Course - Micro Focus ArcSight ESM Advanced

Machine Translated

Pelatihnya sangat berpengetahuan dan meluangkan waktu untuk memberikan wawasan yang sangat baik tentang masalah keamanan siber. Banyak contoh ini dapat digunakan atau dimodifikasi untuk peserta didik kami dan menciptakan beberapa kegiatan pembelajaran yang sangat menarik.

Jenna - Merthyr College

Course - Fundamentals of Corporate Cyber Warfare

Machine Translated

The huge amount of new information/knowledge I gained from this training!

David - Vodacom

Course - Cyber Security Body of Knowledge (CyBOK)

Module3 Applications Attacks and Exploits, XSS, SQL injection Module4 Servers Attacks and Exploits, DOS, BOF

Tshifhiwa - Vodacom

Course - How to Write Secure Code

Pentester skills what demonstrate teacher

Oleksii Adamovych - EY GLOBAL SERVICES (POLAND) SP Z O O

Course - Ethical Hacker

I learned a lot and gained knowledge can use at my work!

Artur - Akademia Lomzynska

Course - Active Directory for Admins

The oral skills and human side of the trainer (Augustin).

Jeremy Chicon - TE Connectivity

Course - NB-IoT for Developers

I enjoyed refreshing my knowledge on the various subjects on cyber security. I was increasingly interested around cyber attacks, how they happen and what we (as an organisation) could potentially do to try and mitigate any risks. I did raise a question around AI in cyber attacks, and the answer was very in depth and interesting with a live example given on the spot.

Siobhan

Course - Executive Cyber Security Awareness

Azure web security, it was more what i was expecting, the penetration testing i would never do in my job

Toby

Course - Application Security in the Cloud

I enjoyed the whole training session, very handy for a potential new career option, which i have been considering.

Christopher Crompton - The Growth Company

Course - Cyber Security Awareness Training

All is satisfy

Motaz Abdallat - shrkt alshrq aladny lltwasl alajtmay

Course - Open Source Intelligence (OSINT) Advanced

Informasi kursus umum

Paulo Gouveia - EID

Course - C/C++ Secure Coding

Machine Translated

The fact that there were practical examples with the content

Smita Hanuman - Standard Bank of SA Ltd

Course - Basel III – Certified Basel Professional

Real-life examples.

Kristoffer Opdahl - Buypass AS

Course - Web Security with the OWASP Testing Framework

Questions, that helps me a lot to understand the characteristics of CRISC examination.

Masakazu Yoshijima - Bank of Yokohama, Ltd.

Course - CRISC - Certified in Risk and Information Systems Control

The trainer's subject knowledge was excellent, and the way the sessions were set out so that the audience could follow along with the demonstrations really helped to cement that knowledge, compared to just sitting and listening.

Jack Allan - RSM UK Management Ltd.

Course - Secure Developer .NET (Inc OWASP)

The trainer was extremely knowledgable and helpful. While walking through the exercises, I wasn't rushed and was allowed to make mistakes (to a point) and then help was given to correct to them where needed.

Tim Wilkes - Gamma

Course - OpenStack Security

Instruktur memiliki pengetahuan yang sangat luas dan berkomitmen terhadap apa yang dilakukannya. Ia mampu menarik minat pendengar dengan kursusnya. Ruang lingkup pelatihan sepenuhnya memenuhi harapan saya.

Karolina Pfajfer - EY GLOBAL SERVICES (POLAND) SP Z O O

Course - MasterClass Certified Ethical Hacker Program

Machine Translated

The subject matter was very interesting and was able to relate this to my current role at Vodacom.

Malcolm Frank - Vodacom SA

Course - Cybersecurity Fundamentals - A Practical Course

Nothing it was perfect.

Zola Madolo - Vodacom

Course - Android Security

Piotr was incredibly knowledgeable and very patient. He was great at explaining things and I'd strongly recommend this course to others

Victoria Harper

Course - Open Source Cyber Intelligence - Introduction

The training was excellent, than you Ditmar.

Maria Gagliardi - EY Global Services (Poland) Sp. z o.o.

Course - CISSP - Certified Information Systems Security Professional

The labs

Katekani Nkuna - Vodacom

Course - The Secure Coding Landscape

Upcoming Courses (Minimal 5 peserta)

C/C++ Secure Coding

2025-05-19 09:30
21 hours
Grand Slipi Tower
81810000 IDR (Online)
81818181 IDR (Classroom)

FreeIPA for Administrators

2025-06-02 09:30
14 hours
The City Tower
40300000 IDR (Online)
40305454 IDR (Classroom)

Palo Alto Networks Firewall Troubleshooting

2025-06-16 09:30
21 hours
Centennial Tower
60450000 IDR (Online)
60458181 IDR (Classroom)

C/C++ Secure Coding

2025-06-30 09:30
21 hours
Grand Slipi Tower
81810000 IDR (Online)
81818181 IDR (Classroom)

Advanced Java Security

2025-07-14 09:30
21 hours
The City Tower
81810000 IDR (Online)
81818181 IDR (Classroom)

Other regions in Indonesia

Other Countries

These courses are also available in other countries

Consulting

Cyber Security Consulting
Online Cyber Security kursus, Akhir pekan Cyber Security kursus, Selamat Malam Cyber Security pelatihan, Cyber Security kamp pelatihan, Cyber Security instruktur kepala, Akhir pekan Cyber Security pelatihan, Selamat Malam Cyber Security kursus, Cyber Security pelatih, Cyber Security Instruktur, Cyber Security pelatih, Cyber Security kursus pelatihan, Cyber Security kelas - kelas, Cyber Security di tempat, Cyber Security kursus privat/ pribadi, Cyber Security pelatihan satu lwan satu