Fundamentals of Penetration Testing

Fənnin təsviri

The course is designed to develop students’ theoretical knowledge and practical skills in planning, preparing, and conducting penetration tests. It covers the fundamental concepts, legal and ethical frameworks, methodologies, and stages of penetration testing. Students are introduced to approaches for gathering information about information systems and network environments using active and passive techniques, identifying existing vulnerabilities, and assessing the risks associated with them. In laboratory environments, controlled attack scenarios, validation of identified vulnerabilities, privilege escalation, and assessment of potential impact are examined. The course also covers the fundamental principles of penetration testing in network infrastructures, web applications, IoT environments, and other technical environments. Particular emphasis is placed on developing students’ ability to analytically assess potential threats and attack scenarios, identify key risk factors, formulate appropriate security recommendations, and professionally document and report penetration testing results.

Fənn təlim nəticələri

1. 1

   CLO 1: Explain the fundamental principles, concepts, and techniques of penetration testing.

2. 2

   CLO 2: Describe and apply the main stages of the penetration testing process.

3. 3

   CLO 3: Apply active and passive information-gathering methods during authorized penetration testing activities.

4. 4

   CLO 4: Identify security vulnerabilities in a given target, validate and assess their potential impact and associated risks, and propose appropriate mitigation measures.

5. 5

   CLO 5: Identify and appropriately use common tools and technologies employed in penetration testing.

6. 6

   CLO 6: Analyze penetration testing results and prepare professional and structured penetration testing reports.