Information Security Testing and Assessment (5 cr)

Evaluation scale

H-5

Content scheduling

Course begins with introductory lecture. In laboratory exercises student learns to use the tools of trade. Finally, students perform a penetration testing engagement and report the results.

Objective

After completing the course the student:
- is able to explain the basic principles of information security testing and assessment
- can list the phases of information security testing process
- is able to organize and conduct information security risk testing to an SME sector enterprise or similar size organization
- can analyse and report the results from information security testing
- is able to give justified improvement proposals to mitigate information security vulnerabilities

Content

- Social Engineering
- Penetration Testing
- Network Discovery
- Network Service Identification
- Vulnerability Scanning
- Password Cracking

Materials

We are using the TryHackMe.com training platform in addition to ItsLearning. Licenses for the duration of the course will be provided for students taking the course for the first time. Student is responsible for acquiring any additional licenses if course is not completed in time, or on any subsequent implementations.

Exam schedules

Mandatory Practical exam is early April, with re-take chance in April.

Completion alternatives

-

Student workload

Lectures 8h
Laboratory assignments 35h
Hackathon 8h
Exam and preparations 9h
Testing project 75h

Qualifications

Courses Internet Networks and Security and Linux and Virtualization

Further information

All communication will be through ItsLearning.