Cybersecurity Learning Lab

Nahaufnahme eines Smartphones mit einem roten App-Icon für 'Security'. Das Bild symbolisiert die Bedeutung von Cybersicherheit und steht im Zusammenhang mit den praktischen Schulungen des Lernlabors Cybersicherheit, die Fach- und Führungskräften helfen, IT-Sicherheitsanforderungen effektiv umzusetzen.

Theoretical knowledge alone is often not enough to implement IT security requirements in everyday work. Hands-on exercises help reinforce theoretical knowledge. This enables participants to apply their knowledge more quickly and effectively in practice and to make fewer mistakes, even under time pressure.

The Cybersecurity Learning Lab offers such hands-on training courses on various cybersecurity topics. The courses at the Cybersecurity Learning Lab are designed for specialists and executives who perform practical, cybersecurity-related tasks within their organizations and wish to bring their knowledge up to date.

Contact

For questions about Fraunhofer SIT's Cybersecurity Learning Lab program: Email

The courses offered by the Cybersecurity Learning Lab are eligible for credit toward T.I.S.P. recertification (see T.I.S.P.).

Artificial Intelligence and Machine Learning

This course provides hands-on training on how to secure ML models against attacks. The focus is on identifying vulnerabilities, developing and implementing appropriate countermeasures, and enhancing the cyber resilience of AI systems. Participants will benefit from the latest insights from research and development as well as hands-on exercises.

Duration: up to 4 days

Further information can be found here.

This course provides a comprehensive understanding of large language models (LLMs) and enables participants to identify and mitigate common security risks. As an intensive course, it deepens participants’ knowledge of LLM development and the critical security challenges associated with them. Through numerous hands-on exercises, participants will develop skills in creating secure LLM applications, advanced techniques such as prompt engineering and retrieval-augmented generation, and analyzing security risks in accordance with the OWASP Top 10 LLM Risks.

Duration: up to 3.5 days

Further information can be found here.

In this course, you'll learn how to analyze text data using NLP and machine learning. The course covers web crawling, data processing, clustering, and classification in Python. Through hands-on exercises and Jupyter notebooks, you'll apply these methods directly and improve your skills in automated text analysis.

Duration: 4 days

More information can be found here.

Secure IT Infrastructures

This course covers practical knowledge on protecting against email-based cyberattacks such as phishing, spoofing, and business email compromise. Participants will learn about and how to implement effective countermeasures, such as the SPF, DKIM, and DMARC protocols. The course also covers measures for secure transport encryption and the use of end-to-end encryption and digital signatures.

Duration: 2 days

Further information can be found here.

This course teaches how to protect medical IT systems from cyberattacks. You will learn to identify vulnerabilities, define security objectives, and assess typical attacker models. The course also covers techniques for securing DICOM servers and how to evaluate the security of medical systems.

Duration: 2 days

Further information can be found here.

Computer Forensics

This course covers practical methods for verifying the authenticity of image and video data using image forensics and signal forensics, as well as the analysis of metadata to detect manipulations such as deepfakes. The course is suitable for forensic experts, investigators, and fact-checkers.

Duration: 3 days

More information can be found here.

In this course, you will learn how to secure and analyze digital evidence. You will also learn how to recover deleted data, how to document forensic processes, and how to investigate IT security incidents. The course is designed for professionals in IT security, compliance, and law enforcement.

Duration: 3 hours per day over 3 days

More information can be found here.

In this course, you will learn how to analyze storage media and RAM. This includes the forensic backup of digital evidence on Windows and Linux, the analysis of digital traces, and the prevention of data loss. The course is suitable for IT security officers, forensic analysts, and investigators.

Duration: 5 days

More information can be found here.

Embedded Systems

In this course, you will learn how to develop and implement security solutions for embedded systems. You’ll learn how to analyze threats, develop security protocols, and apply trust anchors such as TPM 2.0, cryptographic methods, and post-quantum cryptography. The material is reinforced through hands-on exercises.

Duration: 2.5 days

More information can be found here.

Bluetooth Low Energy (BLE) is very important for the Internet of Things (IoT), but BLE is often inadequately secured against attacks. This course covers how to avoid vulnerabilities in the BLE protocol and address security and privacy considerations early on. You’ll learn various methods for assessing security when using BLE and apply this knowledge in hands-on exercises.

Duration: 2 days

Further information can be found here.

Decentralized Technologies and Applications

This course provides in-depth knowledge about the dark web and cryptocurrencies. This includes how to navigate the dark web safely and anonymously and how to use the Tor network. In addition, you will learn to understand and apply cryptocurrencies and blockchain technology. The course is particularly suitable for investigators, IT security experts, and journalists.

Duration: 2 days

More information can be found here.

Cybersecurity and the Law

This course provides a concise overview of the Cyber Resilience Act (CRA). You’ll learn who the CRA applies to, what obligations it imposes on companies, and how companies can effectively prepare for the CRA’s requirements. After completing the course, you’ll know what measures are necessary to minimize legal risks and strengthen cybersecurity.

Duration: 1 hour

Further information can be found here.