CIS 450 - Penetration Testing

5 Credits

Students begin by reviewing the five fundamentals: information gathering, scanning, enumeration, exploitation and reporting. They will examine actual exploitation techniques and the business practices needed to prevent the same. Students follow the majors steps of a penetration testing engagement through the class.

Pre-requisite(s) CIS 370 and CIS 320 w/ min. 2.0
Program Admission Required Yes Admitted Program BAS - CIS
FeesAcademic Technology Fee

Quarters Typically Offered
Designed to Serve For students admitted to the BAS program in Cybersecurity and Digital Forensics.
Active Date 20240401T16:35:00

Grading Basis Decimal Grade
Class Limit 24
Contact Hours: Lecture 44 Lab 22
Total Contact Hours 66
Degree Distributions:
ProfTech Course Yes
Restricted Elective Yes
Course Outline

Define Penetration Testing
Laws and relevant regulations
Business Practices and Policies
Common tooling and methodologies for:
1. Information Gathering
2. Scanning
3. Enumeration
4. Exploitation
5. Reporting
Hardening and Testing Systems
Exploits and Payloads
Exploiting Default Configurations
Hardening and Retesting Systems
Reporting to the Client / Management

Student Learning Outcomes
Explain the relevant laws, governance, and compliance regulations concerning penetration testing

Explain the use cases, quantitative outcomes, and industry fundamentals of penetration testing

Effectively harden and test the security state of systems using standard tools

Research and report on cybersecurity threat actors such as advanced persistent threats

Generate penetration testing reports that explain how penetration testing techniques affect the related security layers to computing systems

Understand the various tactics, techniques, and procedures used by penetration testers and attackers including application, network, and privileged account exploitation