Cybersecurity Advanced Learning Path - "Know yourself, know your enemy, and you will win the battle" Created byLaia Güell Paule|Updated19 October 2023An information system is made of a wide variety of constituents: hardware, software, network, data, people… All these have to be properly protected, since a chain is only as strong as its weakest link. In his famous ‘Art of War’, Sun Tzu wrote “If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle.” Thus protecting yourself means not only understanding where your values and vulnerabilities are, but also how an attacker could be able to reach and exploit them. It is thus critical to have a good grasp of what can constitute a target as well as the attack vectors that would lead to it. In this learning path, we will go deeper into some methodological aspects of cybersecurity. First of all, we will get into standards and approaches to manage risk, the basis for securing an information system. We will also cover more technical aspects, like software security, attack mechanisms, penetration tools and platforms. Introductory learning materialsLecture27 July 2024Introduction to Computer Security Unlock the essentials of computer security in Introduction to Computer Society, a lecture by Dr. Daniel Soper on YouTube. Methodology26 July 2024ISO/IEC 27001 - The international standard for information security ISO 27001 is an international standard that outlines the specifications for an Information Security Management System (ISMS). An ISMS is a structured approach involving people, processes, and technology to safeguard an organisation's information through risk management. It helps defend against external cyberattacks and internal threats like accidental breaches and human error. Advanced +1Digital ExpertGuide27 July 2024EBIOS Risk Manager – The Method The National Cybersecurity Agency of France (ANSSI) and Club EBIOS have collaborated on a developing and publishing the EBIOS Risk Manager (EBIOS RM) method for identifying, assessing, and managing digital risks. This toolbox identifies solutions in... Assessment26 July 2024OWASP Top Ten The OWASP Top 10 is a widely recognized guide for web application security, providing developers with essential information on critical security risks. Companies are urged to adopt this guide to ensure their web applications minimize these risks... Educational game25 July 2024OWASP Juice Shop OWASP Juice Shop is a cutting-edge web application designed for security training, CTFs, and tool testing. See more materialsSee less materialsAdvanced learning materialsOther training material27 July 2024Kali Linux – The most advanced Penetration Testing Distribution Kali Linux is an open-source Debian-based Linux distribution that is used for advanced-level Security Auditing and Penetration Testing. The distribution provides tools, automations and configurations which allow the user to focus on the task at hand Digital Expert Course 12 June 2026Cryptography Coursera launched an online training course on Criptography, as part of the Cybersecurity Specialisation Online Up to 2 MonthsIntermediate +1AdvancedOther training material24 July 2024Root Me – Challenge your hacking skills Root-me is a platform for individuals looking to develop their expertise in hacking and computer security. It provides a realistic environment for users to test and enhance their hacking skills. Advanced +1Digital ExpertLecture27 July 2024Breaking The Kill Chain: A Defensive Approach Uncover the key to thwarting cyber threats in Breaking The Kill Chain: A Defensive Approach, by The CISO Perspective. The cybersecurity kill chain, originally developed by Lockheed Martin, outlines the seven crucial steps attackers must navigate to... Course 12 June 2026MITRE ATT&CK® Using MITRE ATT&CK for Cyber Threat Intelligence Training by Katie Nickels and Adam Pennington of the ATT&CK team will help you learn how to apply ATT&CK and improve your threat intelligence practices. Online Up to 1 WeeksBasic +1IntermediateSee more materialsSee less materialsLearning path DetailsDigital skill levelAdvancedDigital technology / specialisationCybersecurityLog in to comment
Lecture27 July 2024Introduction to Computer Security Unlock the essentials of computer security in Introduction to Computer Society, a lecture by Dr. Daniel Soper on YouTube.
Methodology26 July 2024ISO/IEC 27001 - The international standard for information security ISO 27001 is an international standard that outlines the specifications for an Information Security Management System (ISMS). An ISMS is a structured approach involving people, processes, and technology to safeguard an organisation's information through risk management. It helps defend against external cyberattacks and internal threats like accidental breaches and human error. Advanced +1Digital Expert
Guide27 July 2024EBIOS Risk Manager – The Method The National Cybersecurity Agency of France (ANSSI) and Club EBIOS have collaborated on a developing and publishing the EBIOS Risk Manager (EBIOS RM) method for identifying, assessing, and managing digital risks. This toolbox identifies solutions in...
Assessment26 July 2024OWASP Top Ten The OWASP Top 10 is a widely recognized guide for web application security, providing developers with essential information on critical security risks. Companies are urged to adopt this guide to ensure their web applications minimize these risks...
Educational game25 July 2024OWASP Juice Shop OWASP Juice Shop is a cutting-edge web application designed for security training, CTFs, and tool testing.
Other training material27 July 2024Kali Linux – The most advanced Penetration Testing Distribution Kali Linux is an open-source Debian-based Linux distribution that is used for advanced-level Security Auditing and Penetration Testing. The distribution provides tools, automations and configurations which allow the user to focus on the task at hand Digital Expert
Course 12 June 2026Cryptography Coursera launched an online training course on Criptography, as part of the Cybersecurity Specialisation Online Up to 2 MonthsIntermediate +1Advanced
Other training material24 July 2024Root Me – Challenge your hacking skills Root-me is a platform for individuals looking to develop their expertise in hacking and computer security. It provides a realistic environment for users to test and enhance their hacking skills. Advanced +1Digital Expert
Lecture27 July 2024Breaking The Kill Chain: A Defensive Approach Uncover the key to thwarting cyber threats in Breaking The Kill Chain: A Defensive Approach, by The CISO Perspective. The cybersecurity kill chain, originally developed by Lockheed Martin, outlines the seven crucial steps attackers must navigate to...
Course 12 June 2026MITRE ATT&CK® Using MITRE ATT&CK for Cyber Threat Intelligence Training by Katie Nickels and Adam Pennington of the ATT&CK team will help you learn how to apply ATT&CK and improve your threat intelligence practices. Online Up to 1 WeeksBasic +1Intermediate