Design sensing strategies for various components of a networked system and analyze observed events during a specific attack to identify those of significance. Identify attack characteristics and likely sources by analyzing a system subjected to different types of attacks. Conduct system analysis to uncover evidence of attacks and implement appropriate measures to preserve the chain of custody of said evidence. Propose effective countermeasures once an attack and its source have been identified, justifying their effectiveness. Evaluate network segmentation (zoning) strategies and design corresponding traffic filtering policies. Design and assess measures for user identification and authentication, as well as the management of digital identities and associated access authorizations. Conceive, design, implement, and maintain a comprehensive cyber defense system tailored to a specific context. Interpret and apply technical regulations and legal frameworks related to cybersecurity, considering their impact on system design and the deployment of security tools. Design and evaluate secure architectures for systems and networks.

Cyber Defense Systems: 1. Introduction to Cyber Defense 2. Local sensors: Audit and analysis of events 2.1. Management of users and accesses 2.2. Analysis of security logs 3. Firewall and network segmentation: 3.1. Fundamentals of traffic filtering 3.2. Types of firewalls 3.3. Network segmentation 4. Detection and prevention of attacks 4.1. Signature detection 4.2. Anomaly detection 4.3. Automated response to intrusion attacks 5. Security Information and Event Management (SIEM) 5.1. Introduction and SIEMs architectures 5.2. Aggregation and correlation rules 5.3. Intrusion detection networks 5.4. Strategies for network sensing

The course will consists of the following elements: -- Master classes -- Lab Sessions -- Practical Exercises -- Lab Assignments -- Tutoring