Cyber Security Training in Tashkent

This instructor-led, live training in Tashkent (online or on-site) is aimed at advanced-level cybersecurity professionals, AI engineers, and IoT developers who wish to implement robust security measures and resilience strategies for Edge AI systems.

By the end of this training, participants will be able to:

• Understand security risks and vulnerabilities in Edge AI deployments.
• Implement encryption and authentication techniques for data protection.
• Design resilient Edge AI architectures that can withstand cyber threats.
• Apply secure AI model deployment strategies in edge environments.

This instructor-led, live training in Tashkent (online or in-person) is tailored for intermediate-level cybersecurity specialists and data scientists who intend to use LLMs to enhance cybersecurity defenses and threat intelligence.

By the end of this training, participants will be able to:

• Understand the role of LLMs in cybersecurity.
• Implement LLMs for threat detection and analysis.
• Utilize LLMs for security automation and response.
• Integrate LLMs with existing security infrastructure.

This instructor-led, live training in Tashkent (online or onsite) targets intermediate to advanced-level cybersecurity professionals and technical leads who wish to learn how to implement AI models to enhance security processes, automate threat detection and response, and perform predictive analysis.

By the end of this training, participants will be able to:

• Understand the role of AI in modern cybersecurity.
• Develop machine learning models for anomaly and threat detection.
• Implement AI for automating incident response and security operations.
• Evaluate the ethical and operational considerations of AI in cybersecurity.

This instructor-led, live training in Tashkent (online or onsite) is aimed at intermediate-level analysts who wish to effectively analyze, secure, and protect their organization's data and networks from cyber threats.

By the end of this training, participants will be able to:

• Gain a comprehensive understanding of the current cybersecurity landscape.
• Learn and apply industry-standard cybersecurity frameworks (e.g., NIST, ISO/IEC 27001) and best practices to enhance the security posture of their organization.
• Implement effective network security measures, including configuring firewalls, VPNs, IDS/IPS systems, and applying encryption techniques to protect data at rest and in transit.
• Identify, analyze, and respond to cybersecurity incidents using threat intelligence, SIEM tools, and incident response plans.

This course is designed for students preparing for the CompTIA CySA+ certification exam CS0-002. The CompTIA Cybersecurity Analyst (CySA+) certification verifies that successful candidates have the knowledge and skills required to leverage intelligence and threat detection techniques, analyze and interpret data, identify and address vulnerabilities, suggest preventative measures, and effectively respond to and recover from incidents.

This instructor-led, live training in Tashkent (online or in-person) is designed for intermediate-level network administrators who want to develop the core skills necessary to manage, administer, monitor, and maintain Fortinet security systems.

Upon completion of this training, participants will be capable of:

• Setting up and managing FortiGate firewalls.
• Tracking network traffic and handling incidents using FortiAnalyzer.
• Automating tasks and governing policies via FortiManager.
• Implementing preventive maintenance strategies and resolving network issues.

This instructor-led, live training in Tashkent (online or onsite) is aimed at beginner-level network administrators who wish to use FortiGate 1100E to manage and secure their network environments effectively.

By the end of this training, participants will be able to:

• Understand the basic architecture and features of FortiGate 1100E.
• Learn how to deploy FortiGate 1100E in various network environments.
• Gain hands-on experience with basic configuration and management tasks.
• Understand security policies, NAT, and VPNs.
• Learn to monitor and maintain FortiGate 1100E.

This instructor-led, live training in Tashkent (online or onsite) is aimed at intermediate-level network administrators who wish to manage and secure their networks using FortiGate firewalls.

By the end of this training, participants will be able to:

• Understand Fortigate features and functionalities, particularly those introduced or enhanced in version 7.4.
• Configure and manage FortiGate devices and implement advanced security features.
• Deploy and manage advanced security measures like IPS, antivirus, web filtering, and threat management.
• Monitor network activities, analyze logs, and generate reports for auditing and compliance.

This instructor-led, live training in Tashkent (online or on-site) is tailored for intermediate-level technical professionals who wish to deepen their understanding of the technical aspects and functionalities of Fortinet’s product line, enabling them to effectively recommend, sell, and implement Fortinet security solutions.

By the end of this training, participants will be able to:

• Acquire in-depth knowledge of Fortinet’s advanced security solutions and products.
• Understand the technical features, benefits, and deployment scenarios for each core Fortinet product.
• Configure, manage, and troubleshoot Fortinet solutions across diverse environments.
• Apply Fortinet products to address complex security challenges and requirements.

This instructor-led, live training in Tashkent (online or onsite) is aimed at beginner-level technical professionals who wish to learn about the Security Fabric concept and how it has evolved to meet the cybersecurity needs of organisations.

By the end of this training, participants will be able to:

• Understand the evolution of cybersecurity and how it has shaped current security technologies.
• Use Fortinet products to protect against specific types of cyber threats and attacks.
• Comprehend the integration and automation capabilities of Fortinet solutions in delivering a coordinated response to cyber incidents.

This instructor-led, live training in Tashkent (online or onsite) is aimed at experienced developers who wish to gain a comprehensive understanding of Python programming and its applications in cybersecurity.

By the end of this training, participants will be able to:

• Use Python programming for defensive cybersecurity.
• Understand and use Python for ethical offensive techniques and digital forensics tasks.
• Recognize legal and ethical considerations surrounding offensive cybersecurity and vulnerability disclosure.

This instructor-led, live training in Tashkent (available online or onsite) is designed for beginner-level network security professionals aiming to learn the fundamentals of cybersecurity and the current global threat landscape.

Upon completing this training, participants will be able to:

• Analyze the current global threat landscape and identify key types of cyber adversaries.
• Identify major categories of malware and understand how cyber attacks are executed.
• Grasp the fundamentals of network security and appreciate the value of a layered security strategy.
• Explore Fortinet’s Security Fabric and learn how it tackles contemporary cybersecurity challenges.

This instructor-led, live training in Tashkent (online or onsite) targets intermediate-level network and security professionals who wish to effectively manage and secure networks using Fortigate 600E equipment, with a specific focus on HA configurations for enhanced reliability and performance.

By the end of this training, participants will be able to:

• Understand the features, specifications, and operating principles of the Fortigate 600E firewall.
• Perform the initial setup of the Fortigate 600E, including basic configuration tasks like setting up interfaces, routing, and initial firewall policies.
• Configure and manage advanced security features such as SSL VPN, user authentication, antivirus, IPS, web filtering, and anti-malware capabilities to protect against a variety of network threats.
• Troubleshoot common issues in HA setups and effectively manage HA environments.

EC-Council Certified DevSecOps Engineer (ECDE) is a practical, hands-on course designed to equip professionals with the skills needed to integrate security seamlessly across the entire DevOps lifecycle, ensuring secure software development from initial planning through to deployment.

This instructor-led, live training (available online or on-site) is tailored for intermediate-level software and DevOps professionals who aim to embed security practices into their CI/CD pipelines, guaranteeing secure and compliant code delivery.

By the conclusion of this training, participants will be able to:

• Grasp the core principles and best practices of DevSecOps.
• Secure every stage of the CI/CD pipeline using automated tools.
• Implement secure coding practices and conduct vulnerability scanning.
• Prepare effectively for the ECDE certification through practical labs and comprehensive review sessions.

Course Format

• Interactive lectures and group discussions.
• Hands-on application of DevSecOps tools within simulated pipelines.
• Guided exercises focused on secure development and deployment strategies.

Course Customization Options

• To request a customized version of this course tailored to your team's specific workflows or toolchain, please contact us to make arrangements.

User session recording technology is utilized to capture, monitor, and audit user activity on IT systems, offering valuable insights for security, compliance, and forensic investigations.

This instructor-led, live training (online or onsite) is designed for beginner to intermediate-level IT and security professionals who want to implement user session recording solutions to improve monitoring, compliance, and accountability.

Upon completing this training, participants will be capable of:

• Gaining a clear understanding of user session recording principles.
• Deploying and configuring session recording solutions.
• Analyzing and auditing recorded sessions to ensure compliance.
• Integrating session recording with security monitoring systems.

Format of the Course

• Interactive lecture and discussion.
• Extensive exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Objectives:

In this course, you will identify common risks associated with using conventional end-user technology and learn strategies to use technology safely, thereby protecting yourself from those threats.

Specifically, you will:

• Determine security compliance measures.
• Respond effectively to social engineering attempts.
• Secure devices including desktops, laptops, tablets, smartphones, and more.
• Navigate the Internet securely.

Target Audience

This course is tailored for non-technical end users of computers, mobile devices, networks, and the Internet. Its goal is to enable you to leverage technology more securely and minimize digital risks.

Additionally, this course prepares you for the Certified CyberSAFE credential. You can obtain your Certified CyberSAFE certificate by completing the credential process on the CHOICE platform after attending the course.

This instructor-led, live training in Tashkent (online or onsite) is designed for system administrators who wish to use 389 Directory Server to configure and manage LDAP-based authentication and authorization.

Upon completing this training, participants will be capable of:

• Installing and configuring 389 Directory Server.
• Grasping the features and architectural framework of 389 Directory Server.
• Configuring the directory server using both the web console and CLI.
• Establishing and monitoring replication to ensure high availability and load balancing.
• Managing LDAP authentication via SSSD for enhanced performance.
• Integrating 389 Directory Server with Microsoft Active Directory.

Upon completing this training, participants will be capable of:

• Explaining application security and potential vulnerabilities
• Describing ABAP programming best practices and the handling of SY-SUBRC
• Understanding injection vulnerabilities
• Describing security testing tools
• Explaining ATC and CVA

Course Format

• Interactive lectures and discussions
• Extensive exercises and practical work
• Hands-on implementation in a live-lab environment

This instructor-led, live training in Tashkent (online or onsite) is aimed at system administrators who wish to use Microsoft Active Directory to manage and secure data access.

By the end of this training, participants will be able to:

• Set up and configure Active Directory.
• Set up a domain and define access rights of users and devices.
• Manage users and machines through Group Policies.
• Control access to file servers.
• Set up a Certificate Service and manage certificates.
• Implement and manage services such as encryption, certificates, and authentication.

This course addresses the essential secure coding topics pertinent to a wide range of web application developers. It instructs students on the principles of secure programming by examining specific code snippets, identifying security vulnerabilities, and implementing corrective measures.

Participants will observe demonstrations of real-world attacks and learn effective prevention strategies, building confidence as they work to enhance their applications' security.

Duration: 3 days
Who Should Attend: Developers seeking to expand their expertise in secure coding.

Upon Completion
• Students will gain knowledge in:
• Web Application Security.
• Common Web Application Risks.
• Demo Web Application Penetration Testing.
• Data Validation.
• Authentication.
• Session Management.
• Secure SDLC.

Android serves as an open platform for mobile devices, including smartphones and tablets. While it offers a wide array of security features designed to facilitate the development of secure software, it also lacks certain security aspects found in other handheld platforms. This course provides a comprehensive overview of these features and highlights critical shortcomings related to the underlying Linux system, the file system, and the general environment, as well as those associated with permissions and other Android software development components.

Common security pitfalls and vulnerabilities are explained for both native code and Java applications, accompanied by recommendations and best practices to prevent and mitigate these issues. The topics discussed are often supported by real-life examples and case studies. Finally, the course briefly covers how to utilize security testing tools to identify security-related programming bugs.

Participants attending this course will

• Understand the fundamental concepts of security, IT security, and secure coding
• Learn about security solutions on Android
• Learn to use various security features of the Android platform
• Gain information about recent Java vulnerabilities on Android
• Learn about typical coding mistakes and how to avoid them
• Understand native code vulnerabilities on Android
• Recognize the severe consequences of insecure buffer handling in native code
• Understand architectural protection techniques and their weaknesses
• Access sources and further readings on secure coding practices

Audience

Professionals

Developing a secure networked application is challenging, even for developers familiar with cryptographic building blocks like encryption and digital signatures. To help participants grasp the role and application of these cryptographic primitives, the course establishes a solid foundation on the core requirements of secure communication: secure acknowledgment, integrity, confidentiality, remote identification, and anonymity. It also highlights common threats to these requirements and presents real-world solutions.

Given that cryptography is a critical component of network security, the course examines the most important cryptographic algorithms in symmetric cryptography, hashing, asymmetric cryptography, and key agreement. Rather than focusing on complex mathematical theories, these topics are approached from a developer’s perspective, featuring typical use-case examples and practical considerations such as public key infrastructures. The course introduces security protocols used in various areas of secure communication, with an in-depth exploration of widely adopted protocol families like IPSEC and SSL/TLS.

Typical cryptographic vulnerabilities are discussed, both concerning specific algorithms and protocols. Examples include BEAST, CRIME, TIME, BREACH, FREAK, Logjam, Padding oracle, Lucky Thirteen, POODLE, and RSA timing attacks. For each issue, practical implications and potential consequences are explained without delving into deep mathematical details.

Finally, as XML technology is central to data exchange in networked applications, the course covers XML security. This includes the use of XML in web services and SOAP messages, alongside protection mechanisms like XML signature and XML encryption. The course also addresses weaknesses in these protection measures and XML-specific security issues such as XML injection, XML external entity (XXE) attacks, XML bombs, and XPath injection.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Understand the requirements of secure communication
• Learn about network attacks and defenses at different OSI layers
• Gain a practical understanding of cryptography
• Understand essential security protocols
• Understand some recent attacks against cryptosystems
• Get information about some recent related vulnerabilities
• Understand security concepts of Web services
• Get sources and further readings on secure coding practices

Audience

Developers, Professionals

This three-day course provides an overview of securing C/C++ code against malicious actors who may exploit vulnerabilities related to memory management and input handling. The course emphasizes the core principles of writing secure code.

Even seasoned Java developers often do not fully master the diverse security services provided by Java, and may remain unaware of the various vulnerabilities pertinent to web applications built with Java.

Beyond introducing the security components of Standard Java Edition, this course addresses security challenges in Java Enterprise Edition (JEE) and web services. Discussions on specific services are preceded by foundational knowledge of cryptography and secure communication. A range of hands-on exercises explores both declarative and programmatic security techniques within JEE, while also covering transport-layer and end-to-end security for web services. Participants will gain practical experience by applying the discussed APIs and tools through multiple real-world scenarios.

The course further examines the most common and critical programming flaws inherent to the Java language and platform, as well as web-related vulnerabilities. In addition to typical coding mistakes made by Java developers, the introduced security issues encompass language-specific problems and those arising from the runtime environment. Each vulnerability and associated attack vector is illustrated through clear, easy-to-follow exercises, followed by recommended coding practices and effective mitigation strategies.

Participants attending this course will

• Grasp fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and understand how to prevent them
• Comprehend security concepts specific to web services
• Learn how to leverage various security features within the Java development environment
• Acquire practical knowledge of cryptography
• Understand security solutions available in Java EE
• Identify typical coding errors and learn how to avoid them
• Gain insight into recent vulnerabilities affecting the Java framework
• Develop practical skills in using security testing tools
• Access resources and further reading materials on secure coding practices

Audience

Developers

Description

While the Java language and its Runtime Environment (JRE) were engineered to avoid many of the common security vulnerabilities found in languages like C/C++, developers and architects must still master both the positive aspects (utilizing Java's built-in security features) and the negative aspects (recognizing and avoiding persistent vulnerabilities specific to Java).

The course begins with a concise overview of cryptographic foundations to establish a common understanding of how key security components work. This theoretical knowledge is reinforced through practical exercises, allowing participants to explore and apply the relevant APIs hands-on.

Additionally, the curriculum thoroughly examines the most frequent and critical programming flaws within the Java ecosystem. It addresses typical errors made by Java developers as well as issues unique to the language and its runtime environment. Each vulnerability and its corresponding attack vector are demonstrated via accessible exercises, followed by recommended coding guidelines and effective mitigation strategies.

Participants attending this course will

• Grasp fundamental concepts of IT security and secure coding principles
• Identify web vulnerabilities beyond the OWASP Top Ten and learn strategies to prevent them
• Master the utilization of various security features within the Java development environment
• Develop a practical understanding of cryptography
• Recognize common coding mistakes and acquire techniques to avoid them
• Gain insights into recent vulnerabilities affecting the Java framework
• Access valuable resources and further reading materials on secure coding practices

Audience

Software Developers

Today, numerous programming languages support compiling code for the .NET and ASP.NET frameworks. While this environment offers robust tools for security development, it is essential for developers to understand how to apply architectural and coding-level techniques to implement desired security measures, avoid vulnerabilities, and mitigate potential exploitation.

This course aims to equip developers with practical skills through extensive hands-on exercises. Participants will learn how to prevent untrusted code from executing privileged actions, safeguard resources via strong authentication and authorization mechanisms, manage remote procedure calls and sessions, and explore various implementation strategies for specific functionalities.

The course introduces various vulnerabilities by first addressing typical programming issues encountered when using .NET. The discussion on ASP.NET vulnerabilities covers different environment settings and their impacts. Furthermore, the section on ASP.NET-specific vulnerabilities addresses general web application security challenges as well as specialized issues and attack methods, such as ViewState attacks and string termination exploits.

Participants attending this course will

• Grasp fundamental concepts of security, IT security, and secure coding practices
• Identify web vulnerabilities beyond the OWASP Top Ten and learn how to prevent them
• Utilize various security features within the .NET development environment
• Gain practical experience with security testing tools
• Recognize common coding errors and learn strategies to avoid them
• Stay informed about recent vulnerabilities in .NET and ASP.NET
• Access resources and further reading materials on secure coding practices

Audience

Developers

This course introduces fundamental security concepts, provides an overview of the nature of vulnerabilities across different programming languages and platforms, and explains how to manage software security risks throughout the various phases of the software development lifecycle. Without delving too deeply into technical details, it highlights some of the most critical and pressing vulnerabilities found in diverse software development technologies. Additionally, it presents the challenges associated with security testing, along with practical techniques and tools that can be applied to identify existing issues within code.

Participants attending this course will

• Understand basic concepts of security, IT security, and secure coding
• Understand web vulnerabilities on both the server and client sides
• Recognize the severe consequences of insecure buffer handling
• Be informed about recent vulnerabilities in development environments and frameworks
• Learn about typical coding mistakes and how to avoid them
• Understand security testing approaches and methodologies

Audience

Managers

This course equips PHP developers with the essential skills required to harden their applications against contemporary internet-based threats. It explores web vulnerabilities through practical PHP examples, extending beyond the OWASP Top Ten to cover various injection attacks, script injections, session handling weaknesses, insecure direct object references, file upload issues, and more. PHP-related vulnerabilities are categorized into standard types such as missing or incorrect input validation, improper error and exception handling, misuse of security features, and time- and state-related problems. Specific attacks discussed include open_basedir circumvention, denial-of-service via magic floats, and hash table collision attacks. Participants will learn the key techniques and functions needed to mitigate these risks.

A significant emphasis is placed on client-side security, addressing vulnerabilities in JavaScript, Ajax, and HTML5. The course introduces several PHP security extensions, such as hash, mcrypt, and OpenSSL for cryptography, as well as Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening are provided in the context of PHP configuration (php.ini), Apache, and server-level settings. Additionally, the course offers an overview of various security testing tools and techniques, including security scanners, penetration testing, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the introduction of vulnerability concepts and configuration practices are reinforced with hands-on exercises. These exercises demonstrate the impact of successful attacks, guide participants on applying mitigation strategies, and introduce the use of various extensions and tools.

Participants attending this course will

• Understand fundamental concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Gain insight into client-side vulnerabilities and secure coding practices
• Develop a practical understanding of cryptography
• Learn to utilize various PHP security features
• Identify typical coding errors and learn how to avoid them
• Stay informed about recent vulnerabilities in the PHP framework
• Acquire practical experience using security testing tools
• Access resources and further reading on secure coding practices

Audience

Developers

Combined SDL core training provides insight into secure software design, development, and testing through the Microsoft Secure Development Lifecycle (SDL). It offers a Level 100 overview of the fundamental building blocks of SDL, followed by design techniques to detect and resolve flaws in the early stages of the development process.

Focusing on the development phase, the course presents an overview of typical security-relevant programming bugs in both managed and native code. Attack methods for the discussed vulnerabilities are presented alongside associated mitigation techniques, all explained through a series of hands-on exercises that provide live hacking experiences for participants. An introduction to various security testing methods is followed by demonstrations of the effectiveness of different testing tools. Participants can understand the operation of these tools through practical exercises by applying them to the previously discussed vulnerable code.

Participants attending this course will

Understand basic concepts of security, IT security, and secure coding

Become familiar with the essential steps of the Microsoft Secure Development Lifecycle

Learn secure design and development practices

Learn about secure implementation principles

Understand security testing methodology

• Access sources and further readings on secure coding practices

Audience

Developers, Managers

Following an introduction to common vulnerabilities and attack vectors, participants explore the overarching methodology and general approach for conducting security testing. They also examine techniques designed to uncover specific flaws. Effective security testing begins with comprehensive information gathering regarding the system under evaluation (Target of Evaluation, or ToC). This is followed by thorough threat modeling to identify and prioritize threats, ultimately leading to a risk analysis-driven test plan.

Security evaluations occur at various stages of the Software Development Life Cycle (SDLC). Consequently, the course covers design reviews, code reviews, reconnaissance, and system information gathering. It also addresses testing the implementation and hardening the environment for secure deployment. Detailed attention is given to numerous security testing techniques, including taint analysis, heuristics-based code review, static code analysis, dynamic web vulnerability testing, and fuzzing. Participants are introduced to various tools used to automate the security evaluation of software products. These concepts are reinforced through practical exercises where these tools are applied to analyze previously discussed vulnerable code. Additionally, real-life case studies are utilized to deepen the understanding of diverse vulnerabilities.

This course equips testers and QA professionals with the ability to effectively plan and precisely execute security tests. Participants will learn to select and utilize the most suitable tools and techniques to identify even hidden security flaws, acquiring essential practical skills ready for immediate application in their professional roles.

Participants attending this course will

• Grasp fundamental concepts of security, IT security, and secure coding
• Master web vulnerabilities beyond the OWASP Top Ten and learn how to prevent them
• Gain knowledge of client-side vulnerabilities and secure coding practices
• Comprehend security testing approaches and methodologies
• Acquire practical experience in applying security testing techniques and tools
• Access resources and further reading materials on secure coding practices

Audience

Developers, Testers

Protecting applications accessible via the web demands security professionals who are consistently up-to-date with current attack methods and trends. While a wide variety of technologies and environments facilitate comfortable web application development, it is crucial to remain aware not only of security issues specific to these platforms but also of general vulnerabilities that apply regardless of the development tools used.

This course provides an overview of applicable security solutions for web applications, with a special emphasis on understanding the most critical cryptographic measures. It covers web application vulnerabilities on both the server side (following the OWASP Top Ten) and the client side, illustrated through relevant attacks. The course then presents recommended coding techniques and mitigation strategies to prevent these issues. The topic of secure coding concludes with a discussion of common security-related programming mistakes, such as issues with input validation, improper use of security features, and code quality.

Testing plays a vital role in ensuring the security and robustness of web applications. Various approaches, ranging from high-level auditing and penetration testing to ethical hacking, can be employed to uncover different types of vulnerabilities. However, to go beyond easily accessible low-hanging fruits, security testing must be well-planned and executed properly. It is important to remember that while security testers should ideally find all bugs to protect a system, adversaries only need to find one exploitable vulnerability to penetrate it.

Practical exercises are designed to help participants understand web application vulnerabilities, programming mistakes, and, most importantly, mitigation techniques. Through hands-on trials with various testing tools—such as security scanners, sniffers, proxy servers, fuzzing tools, and static source code analyzers—this course delivers essential practical skills that can be immediately applied in the workplace the following day.

Participants attending this course will

• Understand the basic concepts of security, IT security, and secure coding
• Learn about web vulnerabilities beyond the OWASP Top Ten and know how to avoid them
• Learn about client-side vulnerabilities and secure coding practices
• Gain a practical understanding of cryptography
• Understand security testing approaches and methodologies
• Acquire practical knowledge of using security testing techniques and tools
• Stay informed about recent vulnerabilities in various platforms, frameworks, and libraries
• Access sources and further reading materials on secure coding practices

Audience

Developers, Testers

This course is designed for software developers, testers, and architects involved in creating software using various programming languages and platforms, including desktop, web, cloud, and mobile. It aims to enhance their ability to produce high-quality software, with a particular focus on security and privacy.

This instructor-led, live training (available online or on-site) is designed for advanced users seeking to enhance their expertise.

Cyber Security refers to the practice of using technologies, controls, and processes to safeguard computer systems, servers, networks, devices, applications, and data from malicious cyber attacks.

This instructor-led, live training (available online or onsite) is designed for anyone who wants to learn how to protect internet-connected systems from various types of cyber threats.

By the end of this training, participants will be able to:

• Understand the core concepts of Cyber Security.
• Recognize and comprehend different types of Cyber Security threats.
• Apply key processes and best practices to protect internet-connected systems against cyber attacks.

Course Format

• Interactive lectures and group discussions.
• Extensive hands-on exercises and practical activities.
• Real-world implementation in a live-lab environment.

Course Customization Options

• To request a customized version of this course, please contact us to arrange.

This instructor-led, live training in Tashkent (online or onsite) is designed for IT professionals who wish to learn and apply the fundamentals of Cybersecurity practices, processes, and tools within their organization.

Upon completing this training, participants will be able to:

• Comprehend Cybersecurity concepts, definitions, architecture, and core principles.
• Acquire skills to secure and protect digital assets, including networks, systems, applications, and data.
• Apply security models, frameworks, operational techniques, and incident handling procedures.
• Assess and reduce the impact of cyber attacks, risks, threats, and vulnerabilities.
• Understand cybersecurity challenges associated with emerging technologies.

This instructor-led, live training in Tashkent (online or on-site) is designed for software engineers and IT professionals who wish to deepen their knowledge of CyBOK and strengthen their theoretical and applied cyber security skills.

By the end of this training, participants will be able to:

• Understand the fundamental concepts, definitions, and principles of cyber security.
• Acquire in-depth expertise in cyber security by implementing the CyBOK knowledge areas.
• Gain extensive and foundational knowledge to operationalize the CyBOK framework.
• Facilitate community and organization enablement to increase focus on data security and privacy.
• Expand opportunities to earn specialization and credentials for cyber security professions.

This course is designed for professionals who need to gather intelligence or evidence from the Dark Web. It is typically aimed at individuals working in government or law enforcement, though it may also be beneficial for those in the private sector.

In this instructor-led, live course in Tashkent, participants will learn how to develop an effective security strategy to address the challenges of DevOps security.

This course provides leaders and managers with an overview of key issues and activities related to cybersecurity.

Leaders will gain knowledge across various topics designed to strengthen their understanding and sharpen executive decision-making regarding cybersecurity threats.

By the end of this training, participants will be able to:

• Understand the Internet and social network privacy
• Recognise PII and understand its importance
• Learn how to secure online activities
• Understand how to maintain the privacy of business users
• Gain knowledge of cyber laws that protect privacy

Course Format

• Interactive lectures and discussions.
• Abundant exercises and practical activities.
• Hands-on implementation in a live-lab environment.

Course Customisation Options

• To request a customised training session for this course, please contact us to arrange.

This instructor-led live training in Tashkent (online or onsite) is designed for security engineers and system administrators who wish to use FortiGate NGFW's advanced security-driven network systems to protect their organization from internal and external threats.

By the end of this training, participants will be able to:

• Install and configure the preferred FortiGate NGFW software and hardware model.
• Operate and employ FortiGate NGFW to improve the efficiency of system administration tasks.
• Manage various forms of external and internal threats using FortiGate features.
• Integrate FortiGate security fabric with the entire IT infrastructure to provide quick automated protection.
• Ensure long-term protection from attacks with independent and continuous FortiGate threat intelligence.
• Troubleshoot the most common firewall system setup errors relevant to FortiGate NGFWs.
• Implement Fortinet security solutions in other enterprise applications.

This instructor-led, live training in Tashkent (online or onsite) is aimed at system administrators who wish to use FreeIPA to centralize the authentication, authorization and account information for their organization's users, groups, and machines.

By the end of this training, participants will be able to:

• Install and configure FreeIPA.
• Manage Linux users and clients from a single central location.
• Use FreeIPA's CLI, Web UI and RPC interface to set up and manage permissions.
• Enable Single Sign On authentication across all systems, services and applications.
• Integrate FreeIPA with Windows Active Directory.
• Backup, replicate and migrate an FreeIPA server.

In this instructor-led, live training in Tashkent (online or on-site), participants will learn how to build an Indy-based decentralized identity system.

By the end of this training, participants will be able to:

• Create and manage decentralized, self-sovereign identities using distributed ledgers.
• Enable interoperability of digital identities across domains, applications, and silos.
• Understand key concepts such as user-controlled exchange, revocation, Decentralized Identifiers (DIDs), off-ledger agents, data minimization, and more.
• Use Indy to empower identity owners to independently control their personal data and relationships.

This instructor-led live training in Tashkent (online or onsite) is designed for software testers who wish to protect their organization's network infrastructure using Nmap.

Upon completing this training, participants will be able to:

• Configure the necessary testing environment to begin utilizing Nmap.
• Conduct scans of network systems to identify security vulnerabilities.
• Identify active hosts as well as those with security weaknesses.

This instructor-led, live training in Tashkent (online or on-site) is designed for system administrators who wish to use Okta for identity and access management.

By the end of this training, participants will be able to:

• Configure, integrate, and manage Okta.
• Integrate Okta into an existing application.
• Implement security using multi-factor authentication.

This instructor-led, live training in Tashkent (online or onsite) is aimed at intermediate-level system administrators and IT professionals who wish to install, configure, manage, and secure LDAP directories using OpenLDAP.

By the end of this training, participants will be able to:

• Understand the structure and operation of LDAP directories.
• Install and configure OpenLDAP for various deployment environments.
• Implement access control, authentication, and replication mechanisms.
• Use OpenLDAP with third-party services and applications.

This instructor-led live training in Tashkent (online or onsite) is designed for system administrators who wish to use OpenAM to manage identity and access controls for web applications.

Upon completion of this training, participants will be able to:

• Configure the required server environment to begin setting up authentication and access controls using OpenAM.
• Implement single sign-on (SSO), multi-factor authentication (MFA), and user self-service features for web applications.
• Leverage federation services (OAuth 2.0, OpenID, SAML v2.0, etc.) to securely extend identity management across various systems and applications.
• Access and manage authentication, authorization, and identity services via REST APIs.

This instructor-led live training in Tashkent (available online or on-site) is targeted at system administrators who wish to use OpenDJ to manage their organization's user credentials in a production environment.

By the end of this training, participants will be able to:

• Install and configure OpenDJ.
• Maintain an OpenDJ server, including monitoring, troubleshooting, and optimizing for performance.
• Create and manage multiple OpenDJ databases.
• Backup and migrate an OpenDJ server.

This course in Tashkent aims to assist in the following areas:

1. Enable developers to master the techniques required for writing secure code
2. Assist software testers in evaluating application security before deployment to production environments
3. Help software architects understand the risks associated with applications
4. Support team leaders in establishing security baselines for development teams
5. Guide web masters in configuring servers to prevent misconfigurations

This course covers the secure coding concepts and principles with Java through Open Web Application Security Project (OWASP) methodology of testing. The Open Web Application Security Project is an online community which creates freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security.

This course delves into secure coding concepts and principles for ASP.NET, guided by the testing methodology of the Open Web Application Security Project (OWASP). OWASP is an online community that provides freely available articles, methodologies, documentation, tools, and technologies focused on web application security.

The course examines the security features of the .NET Framework and demonstrates how to secure web applications.

CompTIA SecurityX represents an expert-level cybersecurity certification designed for security architects and senior security engineers who are responsible for leading and enhancing an enterprise’s cybersecurity readiness.