Introductory description

Increasing the robustness and resiliency of systems against threats and attacks is a key cyber security goal. Although, cyber security practitioners should be involved in system design early enough to design cyber-resiliency into the system, quite often, they are presented with legacy systems designed with little consideration to cyber-security. Notwithstanding, even well-designed systems are prone to cyber-attacks from both organised and ill-organised perpetrators.
Penetration testers must possess a good understanding of network protocols and design. This enables practitioners to gain a basic understanding of the root causes of network vulnerabilities and the associated remedial measures that can be taken, particularly where the root cause relates to network misconfiguration issues (both hardware and protocol related).

Module aims

Outline syllabus

This is an indicative module outline only to give an indication of the sort of topics that may be covered. Actual sessions held may differ.

Computer Networks

• Background. IP4/6 networks, addressing, routing, network architecture, trust domains; TCP/UDP, packet capture and analysis using tools such as Wireshark; Ingress and egress filtering via (stateful) packet firewalls.
• Network design. Enacting basic network design using tools such as packet tracer.
• Network security. Network security monitoring, passive, proactive, technical, non-technical, consequences; Operating system security, web security, embedded security, cloud and virtualisation security, security as a service
  Penetration testing
• Information gathering methods, techniques and tools. Footprinting, reconnaissance, network port scanning.
• Vulnerability exploitation. Gaining and maintaining access, covering tracks, enumeration techniques and vulnerability assessment, static and dynamic analysis of malware, social engineering, SQL injection, and zero-day exploits, session hijacking, denial-of-Service, password cracking, firewalking techniques, evading intrusion detection systems and firewalls, hacking web applications and SQL injection attacks.
• Penetration testing. Professionalism, ethics and responsible reporting; penetrations testing methodologies, standards and plans.

Learning outcomes

By the end of the module, students should be able to:

• Appraise the security posture of a network by analysing the network configuration using appropriate tools where necessary.
• Critically evaluate the configuration of network security devices to achieve a desired security posture recommending adjustments where appropriate.
• Demonstrate a comprehensive understanding of vulnerability exploitation techniques.
• Assess the results of system security tests and recommend appropriate mitigation strategies – which may include possible design and configuration changes.

Indicative reading list

Andrew, S., 2011. Tanenbaum, and J. Wetherall. Computer Networks, 5th Edition, Morgan Kaufmann
Baloch, R., 2017. Ethical hacking and penetration testing guide. CRC Press.

Research element

There is a strong emphasis on the development, growth and enhancement of individual research skills so as to provide participants with the high level research knowledge, skills and competencies needed to undertake an independent, original piece of research. The module content draws upon and highlights research within the domain and the module assessment requires participants to perform further research before preparing a response to the assessment task.

Interdisciplinary

Although the module is largely dedicated towards the development of discipline-specific technical, professional and analytical skills, there is a small emphasis on the interdisciplinary nature of the subject.

International

The module is designed in such a way that it can be taught anywhere in the world. Learning materials and examples will be drawn from a range of disciplines, cultures and countries covering the whole range of subjects and disciplines taught in WMG. One of the key issues relating to internationalisation in this module is the way that penetration testing is managed in multiple jurisdictions. The approach to gaining consent varies from country to country and this is emphasised throughout the module.

Subject specific skills

Participants will develop an advanced applied understanding of system defence and offence principles, strategies, techniques and concepts through lectures, in-class discussion and case studies outlining a number of real-world practical issues and scenarios. Participants will develop hands-on experience of managing a penetration testing project from the beginning (elucidating requirements) through the development of a professional report aimed at senior management.

Transferable skills

A penetration test is essentially a project which must be managed effectively from the start (elucidating requirements) to completion (the generation of a report). This module therefore develops transferable skills such as project management, time and resource management, and report writing.
Typically, holders of the qualification will be able to:

• communicate conclusions clearly and effectively to specialist and non-specialist audiences
• apply critical thinking to interpreting and solving problems
• apply appropriate technical skills in new and challenging scenarios
• apply self-direction and originality in tackling and solving problems, and act autonomously in planning and implementing tasks at a professional or equivalent level
• organise and manage critical resources such as time, budget and finance