Skip to main content

Information Security Testing and AssessmentLaajuus (5 cr)

Code: 5051244

Credits

5 op

Objective

After completing the course the student:
- is able to explain the basic principles of information security testing and assessment
- can list the phases of information security testing process
- is able to organize and conduct information security risk testing to an SME sector enterprise or similar size organization
- can analyse and report the results from information security testing
- is able to give justified improvement proposals to mitigate information security vulnerabilities

Content

- Social Engineering
- Penetration Testing
- Network Discovery
- Network Service Identification
- Vulnerability Scanning
- Password Cracking

Qualifications

Courses Internet Networks and Security and Linux and Virtualization

Enrollment

02.12.2023 - 08.01.2024

Timing

01.01.2024 - 30.04.2024

Number of ECTS credits allocated

5 op

Mode of delivery

Contact teaching

Unit

Engineering and Business

Campus

Kupittaa Campus

Teaching languages
  • English
Seats

30 - 70

Degree programmes
  • Degree Programme in Information and Communication Technology
  • Degree Programme in Business Information Technology
  • Degree Programme in Information and Communications Technology
Teachers
  • Jani Ekqvist
Teacher in charge

Jani Ekqvist

Groups
  • PTIVIS21T
    Data Networks and Cybersecurity
  • PTIETS21dncs
    PTIETS21 Data Networks and Cybersecurity

Objective

After completing the course the student:
- is able to explain the basic principles of information security testing and assessment
- can list the phases of information security testing process
- is able to organize and conduct information security risk testing to an SME sector enterprise or similar size organization
- can analyse and report the results from information security testing
- is able to give justified improvement proposals to mitigate information security vulnerabilities

Content

- Social Engineering
- Penetration Testing
- Network Discovery
- Network Service Identification
- Vulnerability Scanning
- Password Cracking

Materials

We are using the TryHackMe.com training platform in addition to ItsLearning. Licenses for the duration of the course will be provided.

Exam schedules

Practical exam is in late March / early April, with re-take chance in April.

Student workload

Lectures 8h
Laboratory assignments 27h
Homework 27h
Exam 3h
Testing project 70h

Content scheduling

Course begins with introductory lecture. In laboratory exercises student learns to use the tools of trade. Finally, students perform a penetration testing engagement and report the results.

Further information

All communication will be through ItsLearning.

Evaluation scale

H-5

Assessment methods and criteria

Laboratory and homework assignments 10-20% of grade
Exam 10-20% of grade
Project report 60-70% of grade

Assessment criteria, fail (0)

Student is unable to perform and report a penetration testing engagement independently.

Assessment criteria, satisfactory (1-2)

Student understands the basics of penetration testing and is able to perform a penetration test against a web application independently. Student can write an understandable and actionable report about the test results.

Assessment criteria, good (3-4)

Student has a good grasp of information security testing methodologies and tools. Student can independently test various types of internet connected applications. Student can write an understandable and actionable report about the test results that contains guidance for both the management and the developers responsible for the application.

Assessment criteria, excellent (5)

Student is has knowledge and is able to select the best suited tool and methodology for the engagement. Student can independently test most types of internet connected applications. Student can write a clear, concise and actionable report about the test results that effectively guides management decisions and provides the software developers with detailed guidance on both fixing to found issues and methods for avoiding similar issues in the future.

Qualifications

Courses Internet Networks and Security and Linux and Virtualization

Enrollment

02.12.2022 - 15.01.2023

Timing

01.01.2023 - 30.04.2023

Number of ECTS credits allocated

5 op

Mode of delivery

Contact teaching

Unit

Engineering and Business

Campus

Kupittaa Campus

Teaching languages
  • English
Degree programmes
  • Degree Programme in Information and Communication Technology
  • Degree Programme in Information and Communications Technology
Teachers
  • Jani Ekqvist
Teacher in charge

Jani Ekqvist

Groups
  • ICTMODictprojSem
  • PTIVIS20T
    Data Networks and Cybersecurity

Objective

After completing the course the student:
- is able to explain the basic principles of information security testing and assessment
- can list the phases of information security testing process
- is able to organize and conduct information security risk testing to an SME sector enterprise or similar size organization
- can analyse and report the results from information security testing
- is able to give justified improvement proposals to mitigate information security vulnerabilities

Content

- Social Engineering
- Penetration Testing
- Network Discovery
- Network Service Identification
- Vulnerability Scanning
- Password Cracking

Evaluation scale

H-5

Qualifications

Courses Internet Networks and Security and Linux and Virtualization

Enrollment

02.12.2021 - 16.01.2022

Timing

01.01.2022 - 30.04.2022

Number of ECTS credits allocated

5 op

Mode of delivery

Contact teaching

Unit

Engineering and Business

Teaching languages
  • English
Seats

0 - 40

Degree programmes
  • Degree Programme in Information and Communication Technology
  • Degree Programme in Information and Communications Technology
Teachers
  • Jani Ekqvist
Teacher in charge

Jani Ekqvist

Groups
  • PTIVIS19T
    Data Networks and Cybersecurity

Objective

After completing the course the student:
- is able to explain the basic principles of information security testing and assessment
- can list the phases of information security testing process
- is able to organize and conduct information security risk testing to an SME sector enterprise or similar size organization
- can analyse and report the results from information security testing
- is able to give justified improvement proposals to mitigate information security vulnerabilities

Content

- Social Engineering
- Penetration Testing
- Network Discovery
- Network Service Identification
- Vulnerability Scanning
- Password Cracking

Evaluation scale

H-5

Qualifications

Courses Internet Networks and Security and Linux and Virtualization