Studies
Admissions
The Institute
Resources
Studies
Admissions
The Institute
Resources
Studies
Admissions
The Institute
Resources

CSEC407

Security Assessment, Penetration Testing and Audit

Barcelona Campus
Feb 21, 2022 - Mar 11, 2022
This course is developed for beginner and intermediate level of cyber security students and covers modern security assessment, penetration testing and security audit best practices.
Barcelona Campus
Feb 21, 2022 - Mar 11, 2022
Aleksandr Timorin

Faculty

Aleksandr Timorin

Red Team Manager at G42

Course length

3 weeks

Duration

3 hours
per day

Total hours

45 hours

Credits

6 ECTS

Language

English

Course type

Offline

Fee for single course

€1500

Fee for degree students

€750

Skills you’ll learn

PythonVulnerability ResearchCyber SecurityInformation Security AuditPenetration Testing
OverviewCourse outlineCourse materialsPrerequisitesMethod & grading

Overview

This course is developed for beginner and intermediate level of cyber security students and covers modern security assessment, penetration testing and security audit best practices. With the theory part students will perform network passive and active analysis, web application security assessment, black-box protocol analysis and fuzzing, lateral movement and attack development, measure risks.

Learning highlights

  • You will learn how to plan, perform and manage security assessment and penetration testing projects
  • You will get practical experience and real-case scenarios
  • You will get a full understanding of using Windows and Linux security assessment tools, frameworks and techniques
  • At the end of the course you will be ready to run basic security assessment and penetration testing projects by yourself

Course outline

15 classes

Dive into the details of the course and get a sense of what each class will cover.
Monday
Tuesday
Wednesday
Thursday
Friday
Monday
1

Session 1

Course intro. Fundamentals of security assessment and penetration testing. Security assessment project stages and cases.

Tuesday
2

Session 2

IT Security 101: OS, applications, processes, memory, networking, Python basics. Pentest tools: exploit packs, Kali Linux, recon services.

Wednesday
3

Session 3

Web application security. Part 1.

Thursday
4

Session 4

Web application security. Part 2.

Friday
5

Session 5

Weekly summary and lab exam.

Monday
6

Session 6

Security audit. Application security.

Tuesday
7

Session 7

Windows and Linux security. Configuration assessment, typical exploitation techniques.

Wednesday
8

Session 8

Mobile application security.

Thursday
9

Session 9

Network protocols security, common vulnerabilities. Custom protocols and implementation security analysis. Fuzzing.

Friday
10

Session 10

Weekly summary and lab exam.

Monday
11

Session 11

Reverse engineering fundamentals. Pentester workflow tools.

Tuesday
12

Session 12

Hardware and firmware security.

Wednesday
13

Session 13

Physical security. Wireless security. Practical assessment exercise.

Thursday
14

Session 14

Course summary. Future of IT Security, CTF, Bug bounty programs. QA session.

Friday
15

Session 15

Course wrap up. Final exam.

Prerequisites

Basic knowledge of OS internals, applications, processes.

Understanding of how computer network works (TCP/IP, ISO/OSI model).

Practical experience with Windows and/or Unix-like OS command line tools.

Basic knowledge of any language like PHP, Python (preferable), Ruby or any other.

Methodology

Lectures, homework, onlline tasks, everyday quizzes, weekly exams, practical final exam.

Grading

The final grade will be composed of the following criteria:
10% - Weekly exam (theory and practice)
20% - Final exam (theory and practice)
30% - Participation
40% - Homework and labs
Aleksandr Timorin

Faculty

Aleksandr Timorin

Red Team Manager at G42

Aleksandr Timorin is a Red Team Manager at G42 (Abu Dhabi, UAE).

His main expertise is driving vulnerability assessment, penetration testing and cyber security projects. Before joining G42, he had worked at Positive Technologies and Kaspersky Lab, as a security researcher.

See full profile

Apply for this course

Snap up your chance to enroll before all spaces fill up.

Security Assessment, Penetration Testing and Audit

by Aleksandr Timorin

Total hours

45 Hours

Dates

Feb 21 - Mar 11, 2022

Fee for single course

€1500

Fee for degree students

€750

Explore related courses

How to secure your spot

Complete the form below to kickstart your application

Schedule your Harbour.Space interview

If successful, get ready to join us on campus

FAQ

Will I receive a certificate after completion?

Yes. Upon completion of the course, you will receive a certificate signed by the director of the program your course belonged to.

Do I need a visa?

This depends on your case. Please check with the Spanish or Thai consulate in your country of residence about visa requirements. We will do our part to provide you with the necessary documents, such as the Certificate of Enrollment.

Can I get a discount?

Yes. The easiest way to enroll in a course at a discounted price is to register for multiple courses. Registering for multiple courses will reduce the cost per individual course. Please ask the Admissions Office for more information about the other kinds of discounts we offer and what you can do to receive one.