No video of the event yet, sorry!

In recent years, large-scale attacks and other incidents have made the news. The key is how to prevent and detect malicious attacks from the Internet. Therefore, although this will be a personal study, we will explain the security mechanisms that the operating system has and the means to improve security without spending money by making full use of packages, etc.

Specifically, it will

Attack-related - Types of attacks and detection. - What information is targeted

Detection and defence - Secure login (where possible) (in conjunction with Entra ID) - The role of AppArmor and how to configure it. - Secure remote access - Quarantine via web proxy - What type of logging is required - Acquisition of file operation history - Analysis of acquired logs

Ensuring attack trails (if possible) - Memory forensics - Disk forensics

Analysis of files (if possible) - Build a threat intelligence platform