Innostage conducted cyber training for employees of the United Shipbuilding Corporation

2024: Conducting Cyber Exercises

Innostage has trained the United Shipbuilding Corporation team to identify and prevent real attacks. The training was conducted on the basis of the cyber police of Innostage, which announced this on March 28, 2024.

In total, 20 employees of the departments of information technology and information protection of 19 enterprises of USC underwent training. The training was led by mentors and experts from Innostage Cyber ​ ​ Security Skills Development Center. Current scenarios based on real attacks and incidents from SOC Innostage CyberART investigations were used as the basis for the training program.

During the training, the USC team investigated cybersecurity incidents, revealing traces of attacks in a typical enterprise infrastructure.

USC employees could detect incidents using information protection tools from Positive Technologies, the leader in the field of effective cybersecurity in Russia. The products, each of which has proven effective in practice during mass attacks over the past couple of years, have been deployed on the Innostage cyber police. This allowed experts not only to learn how to better identify attack chains, understand how hackers penetrate infrastructure and report on incident investigations, but also enrich their scenarios for working with Positive Technologies products: PT Network Attack Discovery (PT NAD), MaxPatrol SIEM, PT Application Firewall and PT Sandbox.

On the Innostage cyberpoligon, we deploy the customer's IT infrastructure and recreate scenarios on it that are as close as possible to current hacker attacks. So, as part of the training, USC employees found traces of information substitution on sites, discovered the introduction of ransomware, and also identified other types of incidents. Now, faced with them in real conditions, the USC team will be able to use the action algorithms developed during cyber exercises. It is important to note that we regularly update cases and training scenarios, receiving information about the latest tactics and techniques of attackers from our SOC Innostage CyberART Cyber ​ ​ Threat Center, which protects dozens of customers by identifying, analyzing and preventing hacker attacks around the clock, - explained Ekaterina Surtukova, head of the Innostage cybersecurity services department.

The corporation pays great attention to ensuring effective cybersecurity. To train and improve the skills of employees in the field of information security, we regularly carry out events that allow the information security team to receive practical training. The central place among them is occupied by cyber training, one of the most effective formats in terms of training to prevent and identify incidents, - said Vilionor Orekhov, head of the information security department of the Security Department of USC JSC.

2022: Training of employees of the United Shipbuilding Corporation based on the Innostage cybersecurity training platform

Specialists Innostage based on their own cyberground company trained the team of the joint-stock company "." United Shipbuilding Corporation The skills of identifying real attacks ones were worked out by employees of divisions information technology and 16 protection information enterprises included in the Corporation. This was announced on March 30, 2023 by representatives of Innostage companies.

The cyber police simulated a typical enterprise infrastructure with traces of attacks that could only be detected using monitoring tools. As part of the investigation of the incident, employees of USC Group companies acquired basic skills in working with solutions of this class.

The company has adapted cyber training for employees with an initial level of knowledge of information security. Therefore, any specialist who is not familiar with monitoring tools can learn to investigate attacks in just a few hours of work on a cyber police, as well as learn how to track the digital footprint of a criminal in systems. told Nina Shipkova, head of the Cybersecurity Academy, Innostage.

In time training, a team of specialists from USC Group companies worked out situations that allowed them to malefactors to operate vulnerability web applications, steal accounts data and install for ON sending phishing messages.

It is very important for the company to improve employees' cybersecurity skills. As of March 2023, USC JSC is a large shipbuilding company in Russia, and uses every opportunity to build a strong information infrastructure protection system in the industry. According to experts of JSC "USC," trained at Innostage, the company's cyber police provides valuable practical knowledge and skills in the field of information protection in conditions as close as possible to a real cyber attack, noted Vilionor Orekhov, head of the information security department of the Security Department of USC JSC.