Systems Vulnerability Assessment And Testing
Definition of systems vulnerability. Methods and the testing methods using different techniques. Mitigation of risks and how to enhance the security of a company’s infrastructure. Penetration testing methodologies, test planning and scheduling. Information gathering. Password cracking. Penetration…
Learning outcomes
At the end of this course, students should be able to: 1. define systems vulnerability, assessment methods and the testing methods using techniques to effectively identify and mitigate risks to the security of a company’s infrastructure; New Computing 79 2. describe penetration testing methodologies, practice test planning and scheduling; 3. assess information gathering, password cracking penetration testing and security analysis; 4. examine the social engineering penetration testing and security analysis, internal and external penetration testing and security analysis, router penetration testing and security analysis, and effectively report and document results; 5. evaluate operating systems fingerprinting and remote network mapping, software and operational vulnerabilities, how to overcome these vulnerabilities; and 6. execute attack surface analysis, fuzz testing, patch management, and security auditing.
Course contents
Definition of systems vulnerability. Methods and the testing methods using different techniques. Mitigation of risks and how to enhance the security of a company’s infrastructure. Penetration testing methodologies, test planning and scheduling. Information gathering. Password cracking. Penetration testing and security analysis. Social engineering, Internal and external penetration testing. Router penetration testing, security analysis, reporting and documentation. Operating systems fingerprinting. Remote network mapping. Software and operational vulnerabilities. Attack surface analysis. Fuzz testing. Patch management. Security auditing. Lab work: Practical exercise on systems vulnerability, assessment methods and the testing methods using techniques to effectively identify and mitigate risks to the security of a company’s infrastructure. Perform penetration testing using various methodologies, along with the test planning and scheduling. Work on password cracking and social engineering penetration testing and security analysis. Identify software and operational vulnerabilities in a given environment and how to overcome these vulnerabilities. Execute attack surface analysis, fuzz testing, patch management, and perform security auditing.