Capacity Raising activity on Cyber Security

In the framework of the project “Awareness on cyber security and protection of personal Data” that Albania Sustainable Development Organization (ASDO) is implementing with the support of the Swiss Embassy, ASDO has conducted a capacity-raising activity for the Academic staff of the Faculty of Natural Sciences at the University of Tirana. All these meetings focused on Cyber Security and the importance of Data Protection, as well as the role that such institutions have in capacity raising for cyber security and guarding and safekeeping the personal data of Albanian citizens.

Capacity building

During this capacity-building activity, the academic staff were introduced to key topics of Cyber Security and dealing with Cyber Threats. The training consisted of penetration testing, whitebox, blackbox testing and scoping. The academic staff were presented with tools and software available to study the vulnerabilities of a domain and the tools used to attack such vulnerabilities. Concepts of exploitation using Metasploit and brute force were introduced, as well as methods of passive, active information gathering and social engineering. This capacity raising in cyber security aimed to provide comprehensive knowledge.

The training was focused on practical approaches, by taking real examples of domains and testing their vulnerabilities. Academic staff were also introduced on best practices of reporting cybersecurity accidents, as well as possible tools to safeguard systems from exploitation and penetration from outsiders. These practices are critical for capacity raising in cyber security initiatives.

The staff were interested in understanding the methods that externals threats use to attack systems, and understand how they can test for vulnerabilities in those systems. Another important component of the training was to have the academic staff try these methods themselves and then learn how to respond effectively to them.

The Faculty aims to open a new Master of Science Program in Cyber Security and thus, this capacity-raising training was the best way to initiate the work needed for this step.