Training

Following classes are currently given:

• Web applications security with Philippe Oechslin (description in french but it can be given in english as well)
• Oracle Anti-Hacker Training with Alexandre Kornbrust (class given in english)

Training is a key to success in IT security. Best technical controls will be ineffective if the staff does not know how to apply them. Therefore Objectif Sécurité's team is involved in several courses in Switzerland:

• EPFL: classes for engineers and PhD
• Geneva University: MBA program and Information Systems Security Officer Certification (CSSI)
• Fribourg University: International Institute of Management in Technology (IIMT)

Objectif Sécurité offers trainings in several other topics like:

• Awareness training

  The security of a system is only as good as the awareness of its users. All technical security measures are useless if people don't know why and how to use them. This is why it is important to provide proper awareness training to all users of information system. Awareness training can significantly reduce the risks of theft of proprietary information, virus infection, loss of data and password misuse. Training can take many different shapes and can be directed at different audiences. Typically, a short, well-designed presentation can raise the awareness of higher management to security problems and thus create support for the implementation of security policies in the company. Alternatively, general presentations served together with coffee and croissants to members of the company can significantly reduce typical errors and the make the employees understand why it is good to follow the practices described in security policies.

  Objectif Sécurité can prepare, give or help you give awareness training tailored to your needs. We can also prepare demonstrations that show the actual risks of misuse of information systems, like cracking of weak passwords, phishing attempts, virus attacks and retrieval of information from a lost PDA or hard disk. We can also help you create the contents of a custom E-learning solution.

• Technical training

  Technical training can be seen as awareness training for administrators. Indeed, if network or systems administrators have a better knowledge of security threats and of the workings and limitations of technical security measures, they can act more proactively to avoid situations where security could be at risk. Philippe Oechslin, CEO and founder of Objectif Sécurité has a long history of teaching information system security to engineers, MBA students and PhD students at EPFL, the International Institute of Management of Telecommunications (IIMT) at University of Fribourg and the Haute Ecole de Commerce (HEC) at University of Genève.

  Objectif Sécurité can provide course on any topic of the large selection of courses given by Philippe Oechslin. These courses can also be complemented with practical exercises where the students try to work like hacker in order to better understand the technical threats and the possibilities for thwarting them.

Books

Sécurité informatique

Exercices corrigés

septembre 2004

Gildas Avoine, Pascal Junod, Philippe Oechslin