SEC536: Adversarial AI - Penetration Testing AI Systems
SEC536Offensive Operations, Artificial Intelligence
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Are Your IT Administrators Prepared for Today’s Cyber Threats?
In an era of rapidly evolving cyber threats, IT administrators are the first line of defense, protecting your organization's most critical assets. With sophisticated attacks like ransomware and zero-day vulnerabilities, the real challenge isn't just securing systems-it's ensuring your team is equipped to anticipate, identify, and neutralize these threats before they cause damage.
Technical Training from the Leader in Information Security
Security Essentials for IT Administrators offers targeted, role-based training that provides IT admins with the skills and strategies needed to defend against zero-day vulnerabilities, privilege misuse, and ransomware. By focusing on real-world scenarios and up-to-date threat intelligence, this training ensures your team is prepared to secure your organization's most vital systems.
Align Skills with Today’s Cybersecurity Landscape
Ensure your IT administrators receive specialized training that goes beyond traditional end-user awareness. Our training addresses the crucial gap in advanced technical roles, equipping your IT team with the tools and knowledge to secure configurations, apply timely patches, and respond effectively to incidents
Stay Ahead of Evolving Threats
As your IT administrators are often the first line of defense against emerging cyber threats, it's essential they have up-to-date training. Our training offers the latest in cybersecurity practices, including AI-enhanced threat detection and prevention, ensuring your technical team is always ahead of the curve.
Break Down Operational Siloes
Once one and the same, recent years have seen security job functions and IT job functions becoming increasingly specialized. As such, while their privileged access makes them an increased target for cyber-attacks, IT Admins don’t always receive the baseline security training available in this targeted and specialized collection.
Examining common beliefs vs realities of cyber-attacks with an introduction to specific responsibilities of cyber security practitioners.
Focusing on three core principles of cyber security. The Principle of Least Privilege, The CIA Triad, and the principle of Prevent, Detect, Respond.
Learn how threats, vulnerabilities, countermeasures, laws, and compliance requirements inform Risk Management Programs.
Covers security hygiene practices that include practicing change control and configuration management; integrating security into SDLC; patch management; active threat hunting; and more.
Learn how to strengthen security with passphrases, password managers, and 2FA. This module covers best practices like using spaces in passphrases, setting permissions based on the Principle of Least Privilege, and understanding the Zero Trust Model.
Covering the effective deployment of encryption methods such as the Advanced Encryption Standard algorithm, Transport Layer Security, Internet Protocol Security, Virtual Private Networks, key management fundamentals, and Zero-Knowledge implementations.
Explore key attacks such as Social Engineering, Spear Phishing, Malware, and Denial of Service. This module also delves into advanced threats like QR Code Attacks, Teams Phishing, and AI-driven tactics, highlighting the crucial role of humans as the final line of defense.
An attack scenario is followed from start to finish, the training focuses on the need for changing our methods of detection and response as attack methods change.
Discover how to respond when a cyber-attack occurs, including deploying technologies to restore operations and fix underlying issues. This module highlights the use of AI tools to enhance threat detection, malware analysis, incident response, and vulnerability management.
Explore cloud environments, their respective security concerns, and best practices for secure deployments while examining the security advantages to cloud environments.
Reviews each of the Open Web Application Security Project (OWASP) top vulnerabilities and how security practitioners can prevent and/or mitigate issues in each category.
Examine real-world supply chain attacks to understand their causes and how to prevent or mitigate them. This module emphasizes learning from past incidents to strengthen defenses against future threats.