CSCI 18 - Ethical Hacking

Transfer Status

CSU

Prerequisite

CSCI 17 or Security+ Certification, or department approval

Unit(s)

3.00

• Lecture: 34.00 Contact hours/68.00 Out of class hours/102.00 Total hours/2.00 Unit(s)
• Lab: 51.00 Contact hours/0.00 Out of class hours/51.00 Total hours/1.00 Unit(s)
• Total: 85.00 Contact hours/68.00 Out of class hours/153.00 Total hours/3.00 Unit(s)

Course Description: This course introduces the network security specialist to the various methodologies for attacking a network. Students will be introduced to the concepts, principles, and techniques, supplemented by hands-on exercises, for attacking and disabling a network within the context of properly securing a network. The course will emphasize network attack methodologies with the emphasis on student use of network attack techniques and tools and appropriate defenses and countermeasures. Students will receive course content information through a variety of methods: lecture and demonstration of hacking tools will be used in addition to a virtual environment. Students will experience a hands-on practical approach to penetration testing measures and ethical hacking. (C-ID ITIS 164).

Upon successful completion of this course, the student should be able to:

1. Describe the tools and methodology a "hacker" uses to break into a computer or network.
2. Defend a computer and a Local Area Network (LAN) against a variety of different types of security attacks using several hands-on techniques.
3. Describe the legal and ethical aspects of hacking networked systems.

Topic Titles / Suggested Time Topic

Lecture

Lab

1. Demonstrations
2. Homework: Students are required to complete two hours of outside-of-class homework for each hour of lecture
3. Lecture
4. Multimedia Presentations

1. Exams/Tests
2. Lab Projects
3. Written Assignments
4. Practical Evaluations

Reading Assignments

1. Read the Input Validation Testing section of the Open Web Application Security Project (OWASP) Testing Framework posted on Canvas. Be prepared to discuss SQL injection testing in class.
2. Read the document about Equation Groups provided. Be prepared to discuss it in class.

Writing Assignments

1. Using the provided scenario and the SANS Institute guidelines, write a 2-3 page business Statement of Work and Authorization for Pen Testing agreement to conduct a grey-box penetration test on an organization. It must include preparation and planning, specifics on scope, detection, analysis and cleanup.
2. Read the Threat intelligence report: How Quantum Computing Will Change Browser Encryption by F5 Labs. Write a two-page essay on your findings. Using the provided scenario and the SANS Institute guidelines, write a 2-3 page business Statement of Work and Authorization for Pen Testing agreement to conduct a grey-box penetration test on an organization. It must include preparation and planning, specifics on scope, detection, analysis and cleanup.

Out-of-Class Assignments

1. Watch the Defcon video link and answer the questions provided.
2. Using your home network: Write an authorization for pentesting for yourself, use Kali Linux to run a pen test on your home computing environment and document your vulnerabilities and remedies professionally.

Santos, O., Taylor, R. (2018). CompTIA PenTest+ Cert Guide. Pearson, 1st. 9780789760357.

Simpson, M., et al. (2023). Hands-On Ethical Hacking and Network Defense. Cengage, 4th. 9798214028262.

Harper, A., et al. (2022). Gray Hat Hacking: The Ethical Hacker’s Handbook. McGraw-Hill, 6th. 9781264268948.

Computer Information Systems

Computer Science (Masters Required)

Computer Service Technology