Search Log in FR EN

Audit et analyse de sécuritéAdministration Audit et Analyse de Sécurité (STI)

FISEFISA STI Semester 9 Option: Architecture, Administration, Audit, and Security Analysis Machine translation

Security Audit and Analysis

Teaching unit Administration, Audit, and Security Analysis · S09_4AS  |  EC Code S09O_4AS1-2
8ECTS (EU)
1Coefficient
21:20Hours

Séquencement

C TD C TD C TD C TD C TD C TD C TD C TD

Learning objectives

General culture on the safety of SIs, SOCs and related professions

Prerequisites

ModuleTeaching unitSemester
Computer SecurityNetwork and System AdministrationS6
System SecurityComputer SecurityS7
Network SecurityComputer SecurityS7

Program

Introduction to Environmental Supervision SOC: 1. Why present the concept of SOC.

  • General culture on IS security

  • Essential component of company safety

    1. Introduction to SOC
  • Definition

  • Issues

  • Organization

  • Architecture

  • Environment

    1. Implementation of supervision
  • MEIS (and other tools)
  • The Framework (Mitre, ATR, React, Defense, ...)

Audit of an information system 1. Introduction to the Audit of Information Systems 2. Audit of a virtual platform

Incident Response and Forensic 1. Introduction to Incident Response 2. Exercises of Forensic

Assessment

  • SOC: Performing the following tasks: implementation of a SIEM-type tool, use of Atomic Red Team and/or metasploit-type tools, analysis of logs and creation of detection rules, production of a report.
  • Audit: Audit report
  • IR: Performing Forensic exercises and producing a report

Skills

3
Ref.VerbDescriptionLevel
C1_1identifyIdentify blocking points when setting up a test SOC and propose/implement solutions1
C1_2analyzeAnalyze information collected in logs2
C1_4defineDefinition of a basic SOC architecture1

SecNumEdu Skills

SkillLecture hoursPractical hoursEntry levelExit level
Cyberdefense3301
Implementation of an SIEM or LMS monitoring tool, event generation and data analysis
Post-mortem analysis (Forensics)2302
Forensic and IR
Penetration testing3201
Audit of an Information System