>_ InfraLab IT Academy
UZ RU EN
Konsultatsiya Ro'yxatdan o'tish
Bosh sahifa / Kurslar / Kiberxavfsizlik
🛡️
Ixtisoslashuv yo'nalishi

Kiberxavfsizlik

Security asoslari va tahdidlardan tortib offensive (pentest) va defensive (SOC/Blue Team) amaliyotigacha — real hujum-himoya labidan foydalanib, to'liq security specialist ko'nikmalarini egallaysiz.

120 soat60 dars
6 modul+ 2 ta yakuniy loyiha
O'rtaDaraja
5–6 oyDavomiyligi
🔑
Pererekvizit: Tizim administratorligi kursi bitiruvchisi yoki ekvivalent bilim (Linux, Windows Server, tarmoq, bash/PowerShell asoslari).
Dastur

6 modul — asoslardan pentest va SOC'gacha

Har bir modul izolyatsiyalangan laboratoriya muhitida amaliyot bilan mustahkamlanadi.

  • CIA triad, tahdid/zaiflik/xavf tushunchalari, attack surface
  • Malware turlari, phishing, social engineering, DDoS, APT
  • Cyber Kill Chain va MITRE ATT&CK framework
  • Lab muhitini qurish: Kali Linux + Metasploitable + DVWA
  • Huquqiy va axloqiy asoslar, birinchi CTF topshiriqlari
  • Wireshark/tcpdump bilan trafik tahlili
  • Firewall (iptables/nftables), segmentatsiya, DMZ, zero trust
  • IDS/IPS (Snort/Suricata), VPN (IPsec, WireGuard), TLS tunnel
  • Wi-Fi security (WPA2/WPA3), MITM/ARP/DNS spoofing (izolyatsiyalangan lab)
  • Loyiha: kichik tarmoqni firewall + IDS + segmentatsiya bilan himoyalash
  • Pentest metodologiyasi (PTES/OSSTMM): recon → scan → exploit → report
  • Nmap chuqurlashtirilgan, Nessus/OpenVAS bilan vulnerability assessment
  • Metasploit Framework, OWASP Top 10 (SQLi, XSS, CSRF, IDOR)
  • Burp Suite, Hashcat/John the Ripper, privilege escalation
  • Loyiha: professional pentest hisoboti yozish
  • SOC darajalari (L1/L2/L3), Sysmon, muhim event ID'lar
  • SIEM: Elastic Stack (ELK) yoki Wazuh — qidiruv va dashboard
  • Detection qoidalari (Sigma), Threat Intelligence (IOC, MISP)
  • Endpoint security (EDR), vulnerability management, threat hunting
  • SOAR avtomatlashtirish, Purple Team mashqi
  • Loyiha: SIEM + Sysmon + detection rules — SOC monitoring stendi
  • Kriptografiya asoslari, TLS/SSL amaliyoti, PKI
  • Secure coding, API security (JWT, OAuth 2.0)
  • DevSecOps: SAST/DAST, dependency va container image scanning (Trivy)
  • Cloud security (AWS/Azure): IAM, shared responsibility, misconfiguration
  • Container/Kubernetes security, MFA/SSO, AD hujumlari (Kerberoasting)
  • NIST Incident Response jarayoni (preparation → lessons learned)
  • Digital Forensics: Autopsy/Volatility, chain of custody
  • Malware analysis asoslari (static vs dynamic)
  • Compliance: ISO 27001, GDPR, PCI DSS, NIST CSF
  • Yakuniy loyiha: to'liq security assessment (offensive + defensive) va himoyasi
🧪

Kerakli infratuzilma

Har bir studentga VM (4 vCPU / 8 GB RAM); izolyatsiyalangan virtual tarmoq (Kali Linux + Metasploitable + DVWA + Windows VM); SIEM stend (ELK/Wazuh); AWS/Azure free tier akkauntlar; internetdan izolyatsiya qilingan "hujum labi".

🎓 Yakuniy loyiha (2 qism)

To'liq security assessment: offensive + defensive

1-qism — Offensive: recon → pentest → topilmalar hisoboti. 2-qism — Defensive: hardening + SIEM detection + IR playbook. Yakunida professional hisobot (pentest report + SOC hisoboti), portfolio va sertifikat topshirish.

To'liq traektoriya: Tizim administratorligi (100 soat) + Kiberxavfsizlik (120 soat) = 220 soat — noldan security specialist'gacha

Sertifikatlar

Tavsiya etilgan sertifikatlar

Ustuvorlik tartibida — poydevordan professional pentest darajasigacha.

1 CompTIA Security+ 2 CompTIA CySA+ / BTL1 3 eJPT / CEH 4 OSCP

Kiberxavfsizlik kursiga yozilish

Keyingi guruh boshlanishidan xabardor bo'lish uchun konsultatsiyaga yoziling.

Ro'yxatdan o'tish Boshqa kurslar