Theory and Practice of Security Attacks

Code:

CC4029

Acronym:

CC4029

Level:

400

Keywords
Classification	Keyword
OFICIAL	Computer Science

Instance: 2022/2023 - 1S

Active?	Yes
Web Page:	https://tpas.alunos.dcc.fc.up.pt/
Responsible unit:	Department of Computer Science
Course/CS Responsible:	Master in Information Security

Cycles of Study/Courses

Acronym	No. of Students	Study Plan	Curricular Years	Credits UCN	Credits ECTS	Contact hours	Total Time
M:SI	21	Study plan since 2020/2021	1	-	6	42	162

Teaching language

Portuguese

Objectives

To introduce the structured application of vulnerability tests in IT systems.

To transfer a detailed knowledge about the principal intrinsic weaknesses of operating sistems, applications and computer networks.

To introduce large spectre penetration testing metholodologies.

To promote a detailed study of tools, processes and methods needed to plan, implement and deploy penetration tests.

Learning outcomes and competences

At the end of the course, students should be able to take advantage of a wide range of advanced security attack tools that will allow them to perform extensive security audits over a wide set of diverse network and computer systems.

The resulting audits will identify, evaluate and diagnose faults, risks and common vulnerabilities that put the security of IT systems at risk.

Working method

Presencial

Program

Basic information security concepts

Reconnaissance and information gathering

Scanning, sniffing and evasion

Operating systems attacks

Web-based hacking: servers and applications

Trojans and other malware

Cryptographic tools

Social engineering and physical security

Penetration testing

Mandatory literature

Matt Walker; CEH: Certified Ethical Hacker Bundle, McGraw-Hill Education, 2014. ISBN: 978-0071835572
Peter Kim; The Hacker Playbook: Pratical Guide to Penetration Testing, CreateSpace Independent Publishing Platform , 2014. ISBN: 978-1494932633

Teaching methods and learning activities

Content presentation, supervised lab work, problem solving, group projects.

Evaluation Type

Distributed evaluation without final exam

Assessment Components

designation	Weight (%)
Trabalho laboratorial	50,00
Trabalho prático ou de projeto	50,00
Total:	100,00

Amount of time allocated to each course unit

designation	Time (hours)
Frequência das aulas	42,00
Trabalho laboratorial	120,00
Total:	162,00

Eligibility for exams

Students must be assessed with a positive mark (>= 50%) on all components.

Calculation formula of final grade

Components:

A: Lab Work (50%)
   1: Presentations and dedication (10%)
   2: Final pentest (25%)
   3. TPAS challenges (tpas-desafios) (15%)
B: Project (50%)

Final grade = .1*A1 + .25*A2 + .15*A3 + .5*B

Special assessment (TE, DA, ...)

Students are assessed with the same components as a normal student.