Cloud Security and Cyber Attack Prevention Methods

Learners will acquire essential skills to navigate the complexities of cloud security, learning how to identify vulnerabilities, implement strong access controls, and apply best practices in cloud data encryption. They will explore how to leverage online tools and resources effectively to safeguard cloud environments.

Upon completion of the program, learners will have the necessary competencies to undertake cloud security responsibilities or lead cloud security initiatives. You will emerge with a robust understanding of the contemporary cloud security domain, ready to devise and enforce strategies that ensure the integrity and resilience of your work operations in the cloud.

By the end of this program, you’ll be able to:

• Apply fundamental concepts of cloud security, the CIA Triad (Confidentiality, Integrity, and Availability), Cloud Risk Management, and the Shared Responsibility Model, to develop robust cloud security strategies.
• Assess and evaluate the role of Cloud Identity and Access Management (IAM) and Identity Providers (IDPs) in strengthening cloud security frameworks, focusing on strategic decisions about authentication and authorization without delving into system configurations.
• Develop the ability to conceptualize and strategize the use of cloud security tools and operations, including encryption and Cloud Security Posture Management (CSPM), to enhance security monitoring, logging, and incident response capabilities.
• Design the strategic approaches to identifying and mitigating cloud misconfigurations and compliance issues, recognizing the importance of robust cloud governance and third-party vendor management in safeguarding cloud environments.
• Apply insights into the attacker’s mindset through theoretical exploration of red teaming, enabling students to anticipate and strategize against potential threats by examining methodologies rather than specific attack tools.
• Analyze and apply the theoretical aspects of bug bounty hunting and the Secure Software Development Life Cycle (SSDLC), emphasizing strategic implementation and oversight rather than technical execution.
• Use different methods to prevent cyber threats, from script kiddies to Advanced Persistent Threats (APTs), to better understand the strategic defenses required to protect cloud infrastructures.

Technical and coding skills are not required to take this program. It is designed to accommodate professionals in non-technical or tech-adjacent roles, including:

• leaders and professionals, from business and operational managers, owners and CEOs, and digital transformation leads to business intelligence and financial teams, who want a solid understanding of the current cloud security landscape and best practices for mitigating digital threats
• experienced and established professionals looking to keep pace with the latest cybersecurity approaches, enhance their practical skills and accelerate career growth

Each course costs $950. The total cost of the program is $1,900.

All fees are in Canadian dollars and subject to change. Fees are subject to GST where applicable. Fees may be paid by Visa®, Visa® Debit, Mastercard®, American Express®, money order or certified cheque.

For details on financial support options, please see Financial Assistance.

For details on UBC’s payment policies, please see Refunds, Cancellations and Transfers.

The program consists of two courses of four weeks each. Combined, the courses take approximately 56 hours to complete.

You can take the courses on their own, in any order. However, to earn your letter of proficiency and gain the most value from the program, we recommend taking both courses in succession as they complement one another.

Once completed, the UBC Micro-certificate in Cybersecurity Fundamentals and Attacker’s Methodology can be applied towards a 190-hour vendor-agnostic UBC Cloud and Technology Transformation Certificate program.

Required Courses

This part-time 100% online program is instructor supported with real-time classes combined with independent study. Real-time classes are recorded in case you miss one.

Outside of class, you can access online materials when it suits your schedule. Each week, you’ll have an opportunity to review readings and videos, apply your knowledge in exercises and case studies, contribute to a discussion board and connect with other students.

Expected effort

Expect to spend approximately five to seven hours a week completing all learning activities, including attending the real-time online classes.

Technology requirements

To take this course, you need access to:

• an email account
• a computer, laptop or tablet, using Windows or macOS
• the latest version of a web browser (or previous major version release)
• a reliable internet connection
• a video camera and microphone

Assessment

You are assessed on successfully completing weekly activities, including your contributions to discussion posts and applied case study projects (based on real-life scenarios). These activities are marked using a proficiency scale. Your instructor also provides you with informal feedback in the real-time classes.

While you are not assessed on your attendance of the real-time sessions, we encourage you to attend as they offer an opportunity to learn and interact with your instructor and other participants. All sessions are recorded in case you miss one.

Our program instructors are experts with extensive industry and adult education experience.

Anthony Green, is the Manager of Security Operations and Compliance at Chartered Professional Accountants of British Columbia (CPABC), where he leads the team responsible for CPABC’s security program. He holds a Bachelor of Technology from the British Columbia Institute of Technology with majors in network security administration and human computer interface.

Maryam R. Aliabadi, BSc, MSc in Electrical and Computer Engineering, PhD in Computer Science, Course Instructor, is a Postdoctoral Teaching and Research Fellow  and sessional lecturer in the department of Computer Science at UBC, with a focus on applied machine learning for Cyber-Physical Systems (CPS).