|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/cyber-security-incident-handling-and-response/
课程评论：没有评论
课程名称：网络安全事件处理与响应 概述：本课程涵盖了事件处理和响应的六个阶段。首先，介绍了事件和事故的定义及其区别。接下来，课程分为以下几个阶段： 1. 准备阶段：展示准备的要素以及团队建设的重要性。 2. 识别阶段：演示识别发生的场所及识别评估的过程。 3. 隔离阶段：解释所需部署和分类，以及短期和长期的行动措施。 4. 根除阶段：强调系统恢复和防御改进的重要性。 5. 恢复阶段：详细说明对被攻击系统的验证和监控要求。 6. 经验教训阶段：确认团队会议的重要性，以修复、改善并共享经验。 该课程主要面向网络安全官员和事件处理人员，内容只需具备基本的IT知识和一定的网络安全背景。重要的是，事件响应是一种结构化的方法，用于处理各种类型的安全事件、网络威胁和数据泄露。事件响应方法论旨在识别、隔离和最小化网络攻击或实际事件的成本。一个完善的事件响应计划可以修复潜在漏洞，防止未来攻击，但事件响应只是事件处理的一部分，后者关注解决事件所需的后勤、沟通、同步和规划。
This course covers the six phases of incident handling and responding as follows:0- Introduction: Includes the definition of an event, incident, as well as the difference between them1- Preparation Phase: Shows the elements of preparation and the team building, 2- Identification Phase: Demonstrates where identification occurs and the assessment for identification3- Containment: Explains the deployment and categorization needed as well as the short/long- term actions taken4- Eradication: Stresses on restoring systems and improving defenses5- Recovery: Elaborates the validation and monitoring required for attacked systems6- Lessons Learned: Confirms the importance of meeting as a team to fix and improve and to share our experiences with othersThe course targets cybersecurity officers and incident handlers, and the material requires only basic IT knowledge and a little of cybersecurity background. It is worth noting that incident response is a structured approach to handle various types of security incidents, cyber threats, and data breaches. The incident response methodology aims to identify, contain, and minimize the cost of a cyberattack or a live incident. A well-built incident response (IR) plan can fix a potential vulnerability to prevent future attacks, but it is not the sum game. Response is a part of Incident Handling which in turn looks at the logistics, communications, synchronicity, and planning required to resolve an incident.
