Audit et analyse de sécuritéAdministration Audit et Analyse de Sécurité (STI)
Security Audit and Analysis
Teaching unit Administration, Audit, and Security Analysis · S09_4AS | EC Code S09O_4AS1-2
8ECTS (EU)
1Coefficient
21:20Hours
Séquencement
Learning objectives
General culture on the safety of SIs, SOCs and related professions
Prerequisites
| Module | Teaching unit | Semester |
|---|---|---|
| Computer Security | Network and System Administration | S6 |
| System Security | Computer Security | S7 |
| Network Security | Computer Security | S7 |
Program
Introduction to Environmental Supervision SOC: 1. Why present the concept of SOC.
-
General culture on IS security
-
Essential component of company safety
- Introduction to SOC
-
Definition
-
Issues
-
Organization
-
Architecture
-
Environment
- Implementation of supervision
- MEIS (and other tools)
- The Framework (Mitre, ATR, React, Defense, ...)
Audit of an information system 1. Introduction to the Audit of Information Systems 2. Audit of a virtual platform
Incident Response and Forensic 1. Introduction to Incident Response 2. Exercises of Forensic
Assessment
- SOC: Performing the following tasks: implementation of a SIEM-type tool, use of Atomic Red Team and/or metasploit-type tools, analysis of logs and creation of detection rules, production of a report.
- Audit: Audit report
- IR: Performing Forensic exercises and producing a report
Skills
3| Ref. | Verb | Description | Level |
|---|---|---|---|
| C1_1 | identify | Identify blocking points when setting up a test SOC and propose/implement solutions | 1 |
| C1_2 | analyze | Analyze information collected in logs | 2 |
| C1_4 | define | Definition of a basic SOC architecture | 1 |
SecNumEdu Skills
| Skill | Lecture hours | Practical hours | Entry level | Exit level |
|---|---|---|---|---|
| Cyberdefense | 3 | 3 | 0 | 1 |
| Implementation of an SIEM or LMS monitoring tool, event generation and data analysis | ||||
| Post-mortem analysis (Forensics) | 2 | 3 | 0 | 2 |
| Forensic and IR | ||||
| Penetration testing | 3 | 2 | 0 | 1 |
| Audit of an Information System | ||||