Subject · Information security

Fundamentals of penetration testing

İF-2212y8 creditsSpring semesterMandatory3

About this subject

Credits

8

Workload

165hours

Semester

Spring

Academic year

3

Description

The subject provides students with the formation of theoretical knowledge and practical skills in planning, preparation and implementation of penetration tests. within the subject, the main concepts, legal and ethical frameworks, methodologies and stages of penetration testing are studied. students are introduced to approaches to actively and passively gather information about information systems and network environments, identify existing vulnerabilities, and assess risks posed by them. implementation of conventional attack scenarios in laboratory conditions, controlled testing of discovered vulnerabilities, enhancement of capabilities and possible impact assessment are considered. it also examines the basic principles of penetration testing in network infrastructure, web applications, iot, and other technical environments. the subject is aimed at developing students' skills to analytically evaluate potential threat and attack scenarios, identify key risk factors, prepare recommendations for appropriate security measures, and report the results of penetration tests in a professional manner.

Course learning outcomes

  1. CLO 1: You will be introduced to the principles and techniques of penetration testing.

  2. CLO 2: You will learn the stages of penetration testing.

  3. CLO 3: You will get acquainted with active and passive data collection methods.

  4. CLO 4: You will learn how to detect, exploit, measure risk, and propose ways to prevent security vulnerabilities for a given target.

  5. CLO 5: You will be introduced to the tools used during penetration testing.

  6. CLO 6: You will gain knowledge about preparing a professional report based on the results of the penetration test.