|
Purchasing,
implementing, and maintaining proper hardware can only take
you so far. In the end, most companies are only as secure
as their employees allow them to be. Proper training of your
staff will serve to augment and bolster your security profile
in manifold ways. The CORE Group has trainers who are exceedingly
well-versed in public speaking and hands-on instruction.
Our
training courses have been featured at Black
Hat, SANS, DerbyCon,
GovCERT, ToorCon,
HackCon, ShakaCon,
HackInTheBox,
SecTor, and DeepSec...
and have been presented to law enforcement, the FBI, the NSA,
and the Cadets at the United States Military Academy at West
Point.
For
companies wishing to expand the scope of their internal
security staff's abilities and responsibilities, we are
able to impart a solid foundation in the use of lockpicks
and surreptitious bypass tools to students in a one-day
course. Even individuals with absolutely zero experience
in covert entry will gain a strong understanding of how
such techniques work and will, by day's end, be opening
all of the most popular locks in use today.
Individuals
attending our introductory Physical Penetration Tester's
course leave with a full awareness of how to best protect
buildings and grounds from unauthorized access, as well
as how to compromise most existing physical security in
order to gain access themselves. Participants learn how
to distinguish good locks and access control from poor ones,
and they also become well-versed in picking and bypassing
many of the most common locks used in North America in order
to assess their own company's security posture or to augment
their career as penetration testers.
This
2-Day course traditionally consists of...
Module
PHYS01 - Lockpicking & Manipulation (6 hrs)
Module
PHYS02 - Bypassing Tactics (2 hrs)
Module
PHYS03 - Basic Impressioning (3 hrs)
Module
PHYS04 - Physical Security Fundamentals (4 hrs)
For
penetration testers and security professionals wishing to
delve more deeply into the topics mentioned in our Introductory
course above, we offer this Advanced class. Participants
learn specialized skills of covert entry designed to gain
access to very secured areas while leaving as minute a trace
of entry as possible.
Due
to the very sensitive nature of the topics covered in this
class, enrollment is restricted to police, military, government
employees, and security professionals with verifiable credentials.
This
2-Day course traditionally consists of...
Module
PHYS03 - Basic Impressioning (3 hrs)
Module
PHYS06 - Advanced Impressioning (4 hrs)
Module PHYS06 - Safe Manipulation (7 hrs)
Module
PHYS07 - High-Security Lock Analysis (2 hrs)
In
recognition of the fact that security models are increasingly
moving away from purely mechanical hardware, we have course
material that goes beyond straightforward physical locks
and addresses the electronic systems often present in large
institutional buildings.
The
two training courses listed below are the most common ways
in which this material tends to be presented and packaged,
but you can always contact us to inquire about private training
events tailored to your specific parameters.
RFID
and Prox badges are the most commonly-used alternative to
traditional locks and keys. This course covers a full analysis
of how these systems work as well as how they can be exploited
and attacked. The back ends as well as the badges themselves
are analyzed. The second half of this training course is
no less interesting, as it deals with the myriad of ways
that building alarm systems can be attacked, spoofed, jammed,
and generally made to fail in wildly insecure ways.
This
2-Day course traditionally consists of...
Module
ELEC01 - Electronic Locks (3 hrs)
Module
ELEC02 - Badges & Access Control Systems (5 hrs)
Module ELEC03 - Alarm Systems (7 hrs)
If
the radio spectrum is more to your liking, this course may
be right up your alley. While the above-mentioned training
does cover some wireless content (such as RFID and Key Fob
technologies) this class is virtually 100% radio-focused.
Signaling and communication is explored from both an attacker
and a defender's point of view.
Due
to the very sensitive nature of the topics covered in this
class, enrollment is restricted to police, military, government
employees, and security professionals with verifiable credentials.
This
2-Day course traditionally consists of...
Module
ELEC04 - Secure Radio Programming (4 hrs)
Module
ELEC05 - Jamming and Blocking (4 hrs)
Module ELEC06 - Signal Intercept (8 hrs)
Tamper-evident
Tags and Security Seals are used widely around the world
in applications involving warranty coverage and repair,
public utility metering, and cargo shipment integrity. These
devices are an integral part of our nation's Customs and
Border Control enforcement and they are used in the protection
and transportation of hazardous chemicals and even nuclear
materials. Yet, for all their prevalence, most of these
tags and seals are horribly weak and vulnerable to compromise.
This training course covers in-depth the ways in which many
such products function, and students perform hands-on attacks
against the bulk of tamper-evident devices on the market
today. This is two full days of deep knowledge and rolled-up
sleeves. All student stations are equipped with heat guns,
solvent chemicals, and a wide range of tools and trickery.
Due
to the very sensitive nature of the topics covered in this
class, enrollment is restricted to police, military, government
employees, and security professionals with verifiable credentials.
This
2-Day course traditionally consists of...
Module
TAMP01 - Industry Security Seals (8 hrs)
Module
TAMP02 - Tamper-Evident Tags (7 hrs)
Most
employees at a company aren't going to use lockpicking or
safe manipulation as part of their daily routine. However,
this does not mean that most "typical" employees
don't have a role to play in a corporation's security model.
Indeed, the most basic and average company personnel are
often the most critical individuals in the whole security
equation.
Training
your employees to be on the look out for people who don't
belong, people who aren't properly identifying themselves,
and people attempting social engineering attacks is often
a highly effective means of preventing data loss, avoiding
reputation damage, and stopping larger intrusions before
they start.
Enroll
your employees in a training such as this, and you will
be astounded at how much it is possible to improve their
awareness. Bring a security mindset to people at every
level of your organization.
Module
SOC01 - Overview & Examples (6 hrs)
Module
SOC02 - Live Practice Workshop (6 hrs)
The
CORE Group has developed specialized training content specific
to law enforcement, military police, and private security
contractors who deal with detainee situations as part of
their daily routine. Knowing how to properly secure an individual
(or, should the need arise, how to escape from restraints
that have been wrongly applied to you) can mean the difference
between a smooth situation and severe bodily harm.
If
you have a need for this skill set or if you wish to offer
a refresher course for the officers and staff under your
supervision, we are happy to discuss these training packages
with you.
Due
to the very sensitive nature of the topics covered in this
class, enrollment is restricted to police, military, government
employees, and security professionals with verifiable credentials.
Module
CUFF01 - Fundamentals & Basic Escape (6 hrs)
Module
CUFF02 - Live Practice Workshop, Escape/Evasion (6
hrs)
While
many of The CORE Group's training events take place at popular
security conferences around the country and around the world,
we are also quite able to organize and conduct private trainings
at your facility... this is often a means of achieving the
same educational package for a significantly lower cost. Please
feel free to contact us for a full breakdown of how our material
can be tailored and focused to your needs and budget.
|
