Focus on: 
Login

SomNOG9 Workshops: Cybersecurity

→ Africa/Mogadishu
SNU KM4 Campus

SNU KM4 Campus

Mogadishu, Somalia
Ibar O. Ibrahim (SomaliREN)
Description

Track Description

The Cybersecurity Track introduces participants to the core knowledge and practical skills required to begin working in cybersecurity. Designed primarily for final-year students, fresh graduates and early-career ICT professionals, the track combines foundational concepts with intensive hands-on practice. Participants will work through a progressive learning journey covering cybersecurity principles, networking for security, reconnaissance, vulnerability assessment, web security, controlled exploitation, system hardening, security monitoring, incident response and basic digital forensics. Approximately 60-70% of the track is practical, using an isolated lab environment and tools such as Nmap, Wireshark, OWASP Juice Shop, Linux security utilities and Wazuh. The curriculum is benchmarked against foundational competencies found in internationally recognized entry-level certifications such as ISC2 Certified in Cybersecurity (CC) and Cisco CCST Cybersecurity, while remaining vendor-neutral and focused on real operational skills.

Who Should Attend?

This track is designed for final-year university students, fresh graduates and early-career ICT professionals who want to build a strong practical foundation in cybersecurity. Prior hands-on cybersecurity experience is not required, although basic familiarity with computers and networking will be helpful.

Workshop Approach

The track is highly practical, with approximately 60-70% of learning time dedicated to demonstrations, hands-on labs and team exercises. All security testing activities are conducted only within the authorized SomNOG lab environment

Contact Us
  • Saturday 19 September
    • 1
      Opening, Track Orientation, Ethics, Lab Rules & Pre-Assessment
      Speaker: Eng Bille
    • 2
      Cybersecurity Foundations: CIA, Risk, Controls, IAM & Least Privilege
      Speaker: Eng Liban
    • 3
      Networking for Cybersecurity: TCP/IP, DNS, HTTP/S, SSH, ICMP, Firewalls, IPv4/IPv6
      Speaker: Eng Abdulkadir
    • 11:00
      Morning Break
    • 4
      Lab 1: Network & Service Discovery
      Speaker: Eng Abdulkadir
    • 5
      Linux Fundamentals for cybersecurity
      Speaker: Eng Ismail
    • 12:30
      Lunch
    • 6
      Mitra Attack, Kill chain, unified Kill chain, diamond models, pyramid of pain,
      Speaker: Eng Meymun
    • 7
      Threats, Vulnerabilities, Attack Surface & Introductory Adversary Workflow
      Speaker: Eng Meymun
    • 14:45
      Cybersecurity Lab Environment preparations
    • 8
      Why a SOC matters · today's threat landscape (who attacks, how they get in)
      Speaker: Eng Liban
    • 15:30
      Afternoon Break
    • 9
      SOC operations, tiers, the incident lifecycle, the analyst's skills, Core SOC technologies, SIEM, EDR/XDR, SOAR; log sources & telemetry.
      Speaker: Eng Bashir
    • 10
      Reading an alert · True vs False Positive · KQL basics · the escalation ladder
      Speaker: Eng Bashir
  • Sunday 20 September
    • 11
      Day 1 Review & Short Quiz
    • 12
      Footprinting and Reconnaissance
      Speaker: ENG Liiban
    • 13
      Lab 2: Footprinting and Reconnaissance
      Speaker: All Team
    • 10:00
      Morning Break
    • 14
      Scanning Networks and Enumeration
      Speaker: Eng Liiban
    • 15
      Lab 3: Scanning Networks and Enumeration
      Speaker: All Team
    • 16
      Vulnerabilities, CVE, CVSS & Vulnerability Management
      Speaker: Liban
    • 17
      Lab 4: exploit some local machine with Metasploit framework
      Speaker: Eng Abdulkadir
    • 12:30
      Lunch
    • 18
      Web Application Security & Selected OWASP Concepts
      Speaker: Eng Ismail
    • 19
      Lab 5: Web Application Security
      Speaker: Eng Ismail
    • 20
      Navigating the SIEM · running KQL · triage workflow · correlating events · separating signal from noise.
      Speaker: Eng Bashir
    • 15:30
      Afternoon Break
    • 21
      Lab 6: SMB/RDP Brute force, from an internal and external attackers
      Speaker: Eng Bashir
    • 22
      Lab 7 : Network reconnaissance / port scan, Malicious PowerShell, LOLBin download and Multi-step attack mapped to ATT&CK (recon → brute → credential access)
  • Monday 21 September
    • 23
      Day 2 Review
    • 24
      Web application penetration testing concepts
      Speaker: Eng Ismail
    • 25
      Lab 8: preform real time web application penetration testing
      Speaker: All Team
    • 10:00
      Morning Break
    • 26
      CTF competitions. “Should be prepared”`
      Speaker: Ismail , Liban
    • 12:30
      Lunch
    • 27
      Risk and risk mitigation strategies
      Speaker: Eng Liban
    • 28
      endpoint attack analysis · defense-evasion & ransomware behavior · cloud control-plane attacks · threat-intel enrichment · containment & reporting
      Speaker: Eng Bashir
    • 15:30
      Afternoon Break
    • 30
      Post-Assessment, Career & Certification Roadmap, Closing