Theory and Practice of Security Attacks

Code:

CC4029

Acronym:

CC4029

Level:

400

Keywords
Classification	Keyword
OFICIAL	Computer Science

Instance: 2015/2016 - 1S

Active?	Yes
Responsible unit:	Department of Computer Science
Course/CS Responsible:	Master in Information Security

Cycles of Study/Courses

Acronym	No. of Students	Study Plan	Curricular Years	Credits UCN	Credits ECTS	Contact hours	Total Time
M:SI	19	Study plan since 2014/2015	1	-	6	42	162

Teaching language

Portuguese

Objectives

To introduce the structured application of vulnerability tests in IT systems.

To transfer a detailed knowledge about the principal intrinsic weaknesses of operating sistems, applications and computer networks.

To introduce large spectre penetration testing metholodologies.

To promote a detailed study of tools, processes and methods needed to plan, implement and deploy penetration tests.

Learning outcomes and competences

At the end of the course, students should be able to take advantage of a wide range of advanced security attack tools that will allow them to perform extensive security audits over a wide set of diverse network and computer systems.

The resulting audits will identify, evaluate and diagnose faults, risks and common vulnerabilities that put the security of IT systems at risk.

Working method

Presencial

Program

Basic information security concepts

Reconnaissance and information gathering

Scanning, sniffing and evasion

Operating systems attacks

Web-based hacking: servers and applications

Trojans and other malware

Cryptographic tools

Social engineering and physical security

Penetration testing

Mandatory literature

Matt Walker; CEH: Certified Ethical Hacker Bundle, McGraw-Hill Education, 2014. ISBN: 978-0071835572
Peter Kim; The Hacker Playbook: Pratical Guide to Penetration Testing, CreateSpace Independent Publishing Platform , 2014. ISBN: 978-1494932633

Teaching methods and learning activities

Content presentation, supervised lab work, problem solving, group projects.

Evaluation Type

Distributed evaluation without final exam

Assessment Components

designation	Weight (%)
Prova oral	25,00
Trabalho escrito	35,00
Trabalho laboratorial	40,00
Total:	100,00

Eligibility for exams

There will be three assessment components: an individual presentation (25%), a group project (40%) and individual lab work (35%).

Students must be assessed with a positive mark on all components.

Calculation formula of final grade

There will be three assessment components: an individual presentation (25%), a group project (40%) and individual lab work (35%).

Students must be assessed with a positive mark on all components.