|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/kiosk-breakouts/
课程评论:没有评论
**课程名称:** Kiosk Breakouts - 从受限环境到完全访问 **课程概述:** 随着自助服务终端(Kiosk)在零售、交通等各行各业的普及,确保其安全性至关重要。本课程深入探讨“Kiosk Breakouts”这一技术,即攻击者如何从ATM、自助服务终端、信息亭等Kiosk的受限环境中逃逸,从而获得对底层系统的未授权访问。理解这些突破如何发生,以及更重要的是如何预防它们,对于维护公共系统的安全性至关重要。 **课程内容:** * **攻击方法:** 学习攻击者利用Kiosk漏洞的不同技术,包括绕过操作系统限制、逃逸用户界面沙箱、利用浏览器漏洞以及利用物理访问。 * **防御技术:** 探索用于缓解这些攻击的防御技术,例如正确配置Kiosk模式、保护浏览器、实施网络访问控制以及监控可疑活动。 * **实操实验:** 通过真实场景的动手实验,练习如何保护Kiosk系统、检测潜在入侵以及应用安全措施以最小化风险。 * **攻防视角:** 通过学习进攻和防御策略,全面了解如何保护Kiosk免受新兴威胁。 **适合人群:** 网络安全专业人士、IT管理员以及负责管理或保护Kiosk系统的任何人。 **学习目标:** 完成课程后,学员将具备保护公共Kiosk免受潜在突破的技术专长,能够实施有效的对抗措施来保护关键Kiosk基础设施。
As public kiosks become more widespread in various industries, from retail to transportation, ensuring their security is critical. This course delves into kiosk breakouts-a technique used by attackers to escape the restricted environments of kiosks, such as ATMs, self-service terminals, and information kiosks, to gain unauthorized access to the underlying system. Understanding how these breakouts occur and, more importantly, how to prevent them is vital for maintaining secure public systems.In this course, participants will learn the different methods attackers use to exploit kiosk vulnerabilities, including bypassing operating system restrictions, escaping user interface sandboxes, exploiting browser vulnerabilities, and leveraging physical access. Students will also explore the defensive techniques used to mitigate these attacks, such as properly configuring kiosk modes, securing browsers, enforcing network access controls, and monitoring for suspicious activity.Hands-on labs will allow participants to engage directly with real-world scenarios, practicing how to secure kiosk systems, detect potential intrusions, and apply security measures to minimize risk. By studying both offensive and defensive tactics, learners will gain a holistic understanding of how to protect kiosks from emerging threats.By the end of the course, students will have developed the technical expertise to secure public kiosks against potential breakouts, making it ideal for cybersecurity professionals, IT administrators, and anyone tasked with managing or securing these systems. Graduates will be prepared to implement effective countermeasures to protect critical kiosk infrastructure.