Introduction
Information security is a revolutionary world. Complete and in-depth understanding how malicious hackers compromising protected information is no more an option. Constant update of knowledge is one of the most important factors to secure your organization's critical and sensitive information and IT infrastructure.
Many information security strategies have been failed, because they were designed and built only based on technology point of view. In real life, enemies use any means of attack, most of them are social engineering (exploiting people weaknesses), and attacking weak procedures. Unfortunately, until today many technical security courses are focusing only to technology-based attack point of view.
By simulating step-by-step process of the latest real world hacking techniques, this course provides clear understanding and experiences how to take full control of a network and compromising information. After having hands-on hacker experience, participants will actively learn how to create appropriate defense strategy to properly manage various security challenges.
Objectives
This unique course is designed with 3 primary objectives:
- Build information security practitioners with hacker's mindset to think with holistic approach by taking into account technology, people, process, environment and physical security aspects
- Improve the information security practitioners' skills and knowledges who are not only know the theories, but also have hands-on experiences to attack protected systems in various ways, to defense against the attacks, and to properly manage the incidents
- Provide key skills and knowledges to security practitioners who want to take Certified Ethical Hacking (CEH) Exam.
Topics Covered
- Step-by-step approach used by malicious hackers
- Scenarios how to steal and to protect CEO's, CFO's and COO's laptop and their valuable information
- Defeating physical access control systems
- By passing security system to access a protected network over Internet
- Attacking and securing VoIP network
- Attacking and securing wireless network
- Dealing with insider attack
- Protecting and assuring the integrity of security administrator and users who have access to highly sensitive information
- Hands-on workshop of attacking and defending valuable information
Provided Tools
- Nasty hacker's tools
- Information security officer's and auditors tools
Trainer
an Independent Information Security Consultant, professional penetration tester and trainer of CISSP CBK, Hacking Techniques and other security training programs. He is former official CISSP CBK Trainer with more than 15 years broad experiences in IT and Information Security including architecture design, implementation, assessment, penetration testing, audit and incident handling. He is also a contributor of Information Security Management Handbook 5th edition, Volume 1 and 2.
He was working in one of the biggest oil and gas company as Head of Information Security Officer in Indonesia subsidiary and Information Security Officer in the headquarter. He was responsible to secure highly critical oil and gas SCADA infrastructure, and highly sensitive information of the headquarter and its subsidiaries in Asia, Africa, America and Europe against high grade attack.
Location
Smooth Camp - Curug Panjang Site
Mega Mendung, Bogor, West Java
Training Fee
Normal Class (Non-Boot Camp), 24-28 March 2008
Rp.7,500.000,- per person + 10% VAT, includes:
- Course materials
- Internet Access
- 2 people or more from the same company
- Early registration until Wednesday, 15 March 2008
10% additional discount
ONLY for personal development (not paid by company) and the participant is Komunitas Keamanan Informasi member
Auditor Boot Camp Class, 05-09 Mei 2008
Rp.8,500.000,- per person + 10% VAT (special discount 25% in cooperation with ISACA)
includes:
- Course materials
- Camping site entrance
- Camping facilities and activities: life jacket, flying fox, river tracking, etc.
- Accommodation : 2 rooms tend for 2 people, sleeping bag, air bed
- Meal : 1 breakfast, 2 meals and 2 coffee break
- Transportation Jakarta to Curug Panjang v.v.
- Internet Access 20 megabits for 5 days
Payment
Payment by bank transfer to:
Registration
For more information and registration you may contact:
Why Boot Camp?
The training is challenging, but also very exciting. We would like to ensure that all the participants have succeed should plan for long days, evening hours study, and after-class exam exercise.
Boot camp is the best way that the participants can focus to the course in maximum concentration and get the top quality time without being disturbed by traffic jam in Jakarta. It ensures that you have a solid understanding of where to concentrate your studying efforts.
Curug Panjang Camping Site in Mega Mendung will be the good venue to accommodate the needs of the participants in maximizing their concentration on the course and experiencing the joy of living in a nature in a comfort way as well.
Locating in a mountain area with only less than 2 hours drive from Jakarta, the participant's brain will be supplied with invaluable pollution free oxygen while entertaining their mind with the beautiful scenery, natural swimming pool along the river and the lovely waterfall.
Camping does not mean you must suffer and feel not comfortable. High quality tend, air bed and sleeping bag (all are Coleman products) will serve you that you might get a good rest and sleep. Clean and tidy bathrooms are provided with the water flows swiftly night and day. Electricity, Internet connection and good mobile phone signal reception of Esia, Fren, Indosat, Telkomsel and XL allow participants to keep in touch with their day-to-day activities.
Cooperation Program with Information Systems Audit and Control Association (ISACA) Indonesia Chapter
As we know there is no 100% risk free. Audit process is established to ensure the proper defense strategy is in place. But it will be less valuable if the auditors who perform the process have lack of in-depth knowledge of each question on their checklist.
ISACA has strategic position among Certified Information Systems Auditor (CISA) in Indonesia, hence security-1st have strong interest to share our knowledge and expertise to ISACA members as much as possible through some security-1st training programs.
The customized version is to enrich the auditors knowledges called: Hacking Techniques and Defense Strategy For Auditor Boot Camp.

