Information security (master)Competencies

Professional competencies· 54

• COMPETENCY-86086

  Cryptography, authentication, identification, data privacy, integrity and availability (cia model) to have the necessary knowledge, cryptographic protection methods, encryption algorithms, electronic signature, key management systems (pki), ssl/tls be able to realize and apply protocols;

• COMPETENCY-73224

  Develop a security strategy, formulate and implement security policies of the organization;

• COMPETENCY-21140

  Analyzing cyber security risks, assessing appropriate protective measures prepare and implement planning, management strategies;

• COMPETENCY-42391

  Perform vulnerability scans, penetration tests and ethical hacking;

• COMPETENCY-94461

  Cyber incident detection, analysis and response, log analysis, forensic analysis and evidence collection, preservation, legal procedures, SIEM (splunk, gradar, etc.) work with systems;

• COMPETENCY-43161

  Analyze malware (malware, phishing, dos/ddos, ransomware, etc.). and prevent;

• COMPETENCY-36296

  Configure and manage technologies such as firewall, ids/ips, vpn, network monitoring;

• COMPETENCY-44104

  Artificial intelligence and machine learning in cybersecurity challenges apply technologies;

• COMPETENCY-51636

  Iso/iec 27001, cobit, NIST SP 800 series standards guide in its activities capture, enforce and comply with their requirements.

• COMPETENCY-65691

  Safe management of operating systems (ms windows, linux), endpoint security (antivirus, EDR systems), software vulnerability analysis and code to implement methods of protection (secure coding, code auditing);

• COMPETENCY-90808

  Data protection in computer systems and networks, network security, traffic analysis and application of threat prevention technologies (firewall, vpn, ids/ips). to do;

• COMPETENCY-28691

  Analyzing, detecting and countering system and network vulnerabilities apply methods and tools;

• COMPETENCY-86347

  Computer and network security protocols, cryptographic encryption methods, electronic implement and implement signature technology, key management systems;

• COMPETENCY-59642

  Design and build a secure network architecture, virtual machines and sandbox to test and analyze with technologies;

• COMPETENCY-22576

  Security measures in firewall, router, switch and other network equipment, VPN technologies and security protocols (ssl/tls, ipsec), ids/ips systems configure and operate;

• COMPETENCY-26443

  Detect possible malware on computer systems and networks and prevent.

• COMPETENCY-24949

  Distributed registers (dlt), block structures and consensus algorithms (proof of work, proof of stake, bft, etc.), designing blockchain networks, working with types (public, private, consortium) and functional models;

• COMPETENCY-71134

  Economics of digital assets, token models, defi (decentralized finance) concepts, work with cryptocurrency exchanges and digital wallets;

• COMPETENCY-30688

  Ethereum, hyperledger, solana, cardano, etc. smart contracts on platforms (solidity, rust, vyper, etc. languages) to prepare;

• COMPETENCY-10861

  Designing and developing dapps (decentralized applications) on the blockchain form automated legal and financial processes;

• COMPETENCY-66973

  Analysis of weaknesses in smart contracts (reentrancy, integer overflow/underflow, access control etc.), security risks and attack models in blockchain technologies (51% attack, sybil attack, DAO hack, etc.).

• COMPETENCY-10593

  International and domestic regulation of cryptocurrencies and blockchain technologies legal norms, AML (anti-money laundering), KYC (know your customer) and tax assess and regulate compliance with its requirements;

• COMPETENCY-65898

  Information during the implementation of cryptocurrencies and blockchain technologies cryptographic encryption methods and electronic signature algorithms for privacy protection to apply.

• COMPETENCY-16878

  Classic and modern symmetric and asymmetric encryption algorithms (aes, rsa, ecc, elgamal, chacha20, etc.), key management systems (pki), public and private key systems to know security and areas of use, to program cryptographic algorithms, be able to build and implement cryptographic systems;

• COMPETENCY-21160

  Cryptocurrency and electronic signature technologies, electronic signatures and certificate systems being able to use cryptographic bases;

• COMPETENCY-45913

  Secure internet protocols (ssl/tls, ipsec, ssh, etc.), key exchange implementing protocols (diffie-hellman, ecdh), authentication mechanisms and application to be able to;

• COMPETENCY-15471

  Analyzing the vulnerabilities of cryptographic protocols and security with formal proofs conduct an assessment;

• COMPETENCY-38966

  Working with PKI (public key infrastructure), electronic certificates and electronic signature systems, develop key management, storage and rotation policies;

• COMPETENCY-76958

  Character analysis and statistical cryptanalysis, side channel, timing analysis, selected original text and cryptanalysis methods, attack models, real attacks on cryptographic systems be able to build, realize and apply scenarios;

• COMPETENCY-96076

  Adhere to legal and ethical frameworks related to the use of cryptography, governmental and corporate develop cryptographic applications that meet security requirements.

• COMPETENCY-42868

  Telecommunication systems (mobile networks, IP networks, voip, 5g, optical networks etc.) to realize their architecture and apply their principles;

• COMPETENCY-72487

  Analyze and design network infrastructure from a security point of view, basic network protocols (tcp/ip, sip, rtp, mpls, bgp, etc.) practical realization and application to do;

• COMPETENCY-69860

  To apply cryptographic encryption methods in telecommunication networks, voice, data and encrypt signals, secure data in broadband networks and radio channels use forwarding, firewall, ids/ips, VPN and anti-dos/ddos technologies;

• COMPETENCY-25121

  Possible attacks against telecommunication infrastructures (imsi catching, man-in-the middle, jamming, ss7 exploit, etc.) for their detection and prevention being able to apply technological and software solutions;

• COMPETENCY-99538

  Detect and analyze possible weaknesses and leaks in telecommunication systems, prevent, perform penetration tests;

• COMPETENCY-20985

  Domestic and international in the field of information security in telecommunication networks to be guided in the activity of standards (iso/iec 27011, etsi, itu-t, nist, etc.);

• COMPETENCY-56499

  Protection of subscriber data, personal data in telecommunication systems meet security and privacy requirements;

• COMPETENCY-92058

  To analyze security risks in telecommunication systems, risk management develop and implement strategies;

• COMPETENCY-99954

  Information security policies for telecommunication infrastructures and design and implement procedures.

• COMPETENCY-73669

  To use and operate industrial control systems such as scada, dcs, plc, rtu, the principles of industrial process automation and real-time management to apply;

• COMPETENCY-78722

  Building a secure network architecture for ics/scada systems, defense in depth (defense-in-depth) approach, firewall, ids/ips, whitelisting, VPN and be able to apply zoning principles;

• COMPETENCY-75254

  Cyber security requirements of industrial management systems, industrial management systems security principles of protocols (modbus, dnp3, opc-ua, IEC 60870-5-104, etc.) to provide;

• COMPETENCY-28235

  Attack models and threats (stuxnet, ransomware attacks, insider threats, mitm, etc.) to have a collection of information about, detection and prevention of incidents apply protective measures, prepare and implement recovery plans for;

• COMPETENCY-17955

  Assess information security risks in industrial enterprises, security identify gaps and plan appropriate actions;

• COMPETENCY-12659

  To organize audits on industrial management systems and compliance with international standards to evaluate;

• COMPETENCY-82569

  Complies with major industry safety standards (iec 62443, NIST SP 800-82, iso/iec 27019, ansi/isa 99), to guide the security policies applied in industrial establishments and comply with their requirements.

• COMPETENCY-61820

  In web programming languages and environments (html, css, javascript, php, python, (node.js, react, angular, django, laravel, etc.) programming;

• COMPETENCY-20348

  Building and ensuring interaction of client-server based applications strategies, restful apis, AJAX technologies, microservice architecture to do;

• COMPETENCY-59206

  Confidentiality, integrity and availability of information in the web technology environment (cia model) to implement methods of provisioning, identification and authentication procedures and apply;

• COMPETENCY-17361

  Principles of secure programming, vulnerabilities in code, including the OWASP top 10 vulnerability detection and prevention tools (sql injection, cross-site scripting – xss, cross-site request forgery – csrf, insecure deserialization, broken authentication etc.) to work with;

• COMPETENCY-75807

  Security testing methodologies such as sast, dast, iast, manual and automated vulnerability detection tools (burp suite, OWASP zap, nikto, acunetix, etc.), penetration apply tests and "bug bounty" methodology;

• COMPETENCY-44587

  Secure data transfer with https, tls/ssl protocols, token-based authentication (oauth 2.0, JWT (json web token), SSO and mfa), session management and implement cookie security technologies;

• COMPETENCY-10437

  Apache, nginx, iis, etc. security configurations of servers, cdn, WAF (web application firewall), reverse proxy, ddos protection technologies, cloud-based web apply security approaches on platforms (aws, azure, google cloud);

• COMPETENCY-85229

  Web systems regulatory documents and standards (iso/iec 27001, gdpr, assess and ensure compliance with pci-dss, nist, etc.).