Security Testing

This course introduces security testing at an elementary level.
1. Introduction to security testing, legal aspects of penetration testing, standards and certification.
2. Security testing frameworks and methodologies, and how to prepare, manage and conduct a professional penetration testing.
3. Technical aspects of network security covering standards, protocols, routing, firewalls showing the theoretical basis of vulnerabilities and how these may be exploited in practice.
4. Technical aspects of computer security covering operating systems, access control in windows and linux/unix, host based intrusion detection, escalation of privileges and how to exploit these vulnerabilities in practice and how to harden systems.
5. Technical aspects of Internet based applications, web services, protocols, languages (e.g. SQL) and how these may be exploited using for example SQL injection and crosssite scripting; how to exploit these vulnerabilities in practice, and how to harden the applications.