Course: ECU 501 Ethical Hacking and Countermeasures
Purpose of Class:
This class is designed to provide students an insight of current security scenario and increasing hacking attempts on various information systems. The goal of the ethical hacking and countermeasures practices is to help the organizations take preemptive measures against malicious attacks by attacking the system themselves staying within legal limits.
Course Learning Outcomes:
Students who successfully complete this class will be able to:
- Assess ethical and legal requirements of security assessment and penetration testing and determine a strategy to comply with these requirements.
- Analyze different phases of hacking and recommend the strategy to use ethical hacking for assessing security of various components of information system.
- Compare and contrast different hacking techniques and analyze the legal implications of hacking.
- Examine different vulnerabilities, threats and attacks to information systems and recommend the countermeasures.
- Analyze cryptography algorithms and encryption techniques, and design implementation strategies for securing information
- Compare and contrast various network security assessment and hacking tools.
- Assess various network security techniques and tools and implement appropriate level of information security controls based on evidence, information, and research.
Required Reading:
- Ethical Hacking and Countermeasures: Attack Phases, 1st Edition, EC-Council, ISBN:9781435483606.
- Ethical Hacking and Countermeasures: Linux, Macintosh and Mobile Systems, 1st Edition, EC-Council, ISBN:9781435483644.
- Ethical Hacking and Countermeasures: Secure Network Infrastructures, 1st Edition, EC-Council, ISBN13:9781435483651.
- Ethical Hacking and Countermeasures: Threats and Defense Mechanisms, 1st Edition, EC-Council, ISBN:9781435483613.
- Ethical Hacking and Countermeasures: Web Applications and Data Servers, 1st Edition, EC-Council, ISBN:9781435483620.
- Google Hacking for Penetration Testers, by Johnny Long, Syngress Publishing © 2005, ISBN:9781931836364.
- How to Cheat at Managing Information Security, by Mark Osborne, Syngress Publishing © 2006, ISBN:9781597491105.
- Defeating the Hacker: A Non-Technical Guide to Computer Security, by Robert Schifreen, John Wiley & Sons © 2006, ISBN:9780470025550.
Week One:
Modules Covered:
- Module 01: Introduction to Ethical Hacking
- Module 02: Footprinting
- Module 03: Google Hacking
- Module 04: Scanning
- Module 05: Enumeration
Outcomes:
- Assess ethical and legal requirements of security assessment and penetration testing and determine a strategy to comply with these requirements.
- Analyze different phases of hacking and recommend the strategy to use ethical hacking for assessing security of various components of information system.
- Compare and contrast different hacking techniques and analyze the legal implications of hacking.
- Examine different vulnerabilities, threats and attacks to information systems and recommend the countermeasures.
- Compare and contrast various network security assessment and hacking tools.
- Assess various network security techniques and tools and implement appropriate level of information security controls based on evidence, information, and research.
Week Two:
Modules Covered:
- Module 06: System Hacking
- Module 07: Trojans and Backdoors
- Module 08: Viruses and Worms
- Module 09: Sniffers
- Module 10: Social Engineering
Outcomes:
- Analyze different phases of hacking and recommend the strategy to use ethical hacking for assessing security of various components of information system.
- Compare and contrast different hacking techniques and analyze the legal implications of hacking.
- Examine different vulnerabilities, threats and attacks to information systems and recommend the countermeasures.
- Analyze cryptography algorithms and encryption techniques, and design implementation strategies for securing information
- Compare and contrast various network security assessment and hacking tools.
- Assess various network security techniques and tools and implement appropriate level of information security controls based on evidence, information, and research.
Week Three:
Modules Covered:
- Module 11: Phishing Attacks
- Module 12: Hacking Email Accounts
- Module 13: Denial of Service
- Module 14: Session Hijacking
- Module 15: Hacking Webservers
- Module 16: Web Application Vulnerabilities
Outcomes:
- Compare and contrast different hacking techniques and analyze the legal implications of hacking.
- Examine different vulnerabilities, threats and attacks to information systems and recommend the countermeasures.
- Compare and contrast various network security assessment and hacking tools.
- Assess various network security techniques and tools and implement appropriate level of information security controls based on evidence, information, and research.
Week Four:
Modules Covered:
- Module 17: Web based Password Cracking Techniques
- Module 18: SQL Injection
- Module 19: Hacking Wireless Networks
- Module 20: Physical Security
- Module 21: Linux Hacking
- Module 22: Evading IDS, Firewalls and Honeypots
Outcomes:
- Analyze different phases of hacking and recommend the strategy to use ethical hacking for assessing security of various components of information system.
- Compare and contrast different hacking techniques and analyze the legal implications of hacking.
- Examine different vulnerabilities, threats and attacks to information systems and recommend the countermeasures.
- Compare and contrast various network security assessment and hacking tools.
- Assess various network security techniques and tools and implement appropriate level of information security controls based on evidence, information, and research.
Week Five:
Modules Covered:
- Module 23: Buffer Overflows
- Module 24: Cryptography
- Module 25: Penetration Testing
- Module 26: Hacking Laws
- Module 27: MAC OS X Hacking
- Module 28: Hacking Routers, Cable Modems and Firewalls
Outcomes:
- Assess ethical and legal requirements of security assessment and penetration testing and determine a strategy to comply with these requirements.
- Analyze different phases of hacking and recommend the strategy to use ethical hacking for assessing security of various components of information system.
- Compare and contrast different hacking techniques and analyze the legal implications of hacking.
- Examine different vulnerabilities, threats and attacks to information systems and recommend the countermeasures.
- Analyze cryptography algorithms and encryption techniques, and design implementation strategies for securing information
- Compare and contrast various network security assessment and hacking tools.
- Assess various network security techniques and tools and implement appropriate level of information security controls based on evidence, information, and research.
Week Six:
Modules Covered:
- Module 29: Hacking Mobile Phones, PDA and Handheld Devices,
- Module 30: Bluetooth Hacking
- Module 31: RFID Hacking
- Module 32: Hacking USB Devices
- Module 33: Hacking Database Servers
- Module 34: Hacking Web Browsers
Outcomes:
- Analyze different phases of hacking and recommend the strategy to use ethical hacking for assessing security of various components of information system.
- Compare and contrast different hacking techniques and analyze the legal implications of hacking.
- Examine different vulnerabilities, threats and attacks to information systems and recommend the countermeasures.
- Compare and contrast various network security assessment and hacking tools.
- Assess various network security techniques and tools and implement appropriate level of information security controls based on evidence, information, and research.
Weeks Seven and Eight: Summative Experiences
Introduction to Weeks: Weeks seven and eight are designed to provide cumulative experience while faculty and students are given the opportunity to finalize uncompleted work. For this course, students will engage in two summative assessments, a project and final examination.