RE: Graduate CS Pen Testing Class

["Paxton, Seth" <Seth.Paxton () echostar com>]

Personally, I think it would be beneficial to teach students a well known auditing methodology (NSA IAM/IEM, Octave, 
etc.). After that has been established, have the students use the methodology in a lab environment and provide an 
auditing report that would be useful for a typical corporation. 

This may not encompass the entire scope of what you have to teach, but I think it would be a good start. This would 
better prepare students on how to report their findings to management.

Seth Paxton
Data Security Engineer
Email: seth.paxton () echostar com
Phone: (307) 633-5487
EchoStar Broadcasting

 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Wesley
Sent: Monday, April 11, 2011 11:36 PM
To: pen-test () securityfocus com
Subject: Graduate CS Pen Testing Class

Hi All,

I've been asked to teach a graduate level computer science course on
network auditing and penetration. I'm hoping to make the class as
hands on as possible, covering material from enumeration to system
hacking. What practical scenarios should be included in the course
content? I'd like to cover a range of popular tools but at the same
time make it more than a script kiddie class. Each scenario should
teach concepts as well as getting students familiar with different
security tools. If you were to one day have these students either
conducting audits for you or working for you what skill set would you
like them to have?

Thanks

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------




------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------