0x010088F6312065A70A44B630A6848498EAD80093CFEAFE161DC94D83C7C5C9A5A748B8

The course consists of three main parts: ethical hacking, incident response and digital forensics. The course is developed to be pratical and provide a unique opportunity for students to combine the skills learned from all parts into one project, where they learn, on the one hand side, how to break into systems, and on the other side, how to handle incidents following up cyber security incidents. The course was very popular. It is offered for 5th semester Bachelor students in DIGSEC study program. A reference group was formed in the beginning of the semester and was followed up by the course responsible. Due to a sudden illness of Basel in October-November, the last meeting for the reference group was not followed up.

<h3>Learning outcome</h3>Knowledge:The candidate has knowledge about different activities associated with securing, attacking and investigating computer systems, including- The candidate has general knowledge of planning for incident responseand managing the operational aspects of the incident response team.- The candidate has general knowledge of how to perform incidentresponse for various types of adverse incidents, including intrusionsfrom advanced threat actors- The candidate has general knowledge of digital Forensics methodology with a solid understanding of requirements for handling digital evidence.- The candidate has general knowledge if ethical hacking techniques that are used to understand how attacker think and operate and identify weaknesses during operations. Skills:The candidate can- Prepare for incident handling and perform incident response, as well as build, organize and manage an incident response team- Perform ethical hacking activities to identify vulnerabilities in systems at different levels, exploit these vulnerabilities to gain access, and maintain this access- Forensic acquisition of digital evidence from computer and network media General Competence:Candidates have insight into the methods of planning for incidents, defending information systems and testing these systems for weakness. In case of an incident they are able to collect evidence based on digital forensics methodologies and the relationship with incident handling.

<h3>Learning methods and activities</h3>-Lectures-Laboratory work-Exercises-Project work

Vurderingsformer:-Written examination counts for 40%-The project(s) counts for 60%-All parts must be passed. The project is offered at the end of the semester for 4 week. The first two weeks, students' groups are assigned a segregated network, which represents a network infrastructure of an organization. The students were asked to conduct a penetration testing on the network. IN the last two weeks, students' groups are giving access to other group's network and asked to conduct an incident response project with digital forensics envistigations.

NTNU:TIA:REST

Institutt for informasjonssikkerhet og kommunikasjonsteknologi

Department of Information Security and Communication Technology

Ingen hjelpemidler tillatt.

Engelsk

Anbefalte forkunnskaper

Mer om vurdering

Faglig innhold

Kursmateriell

-Årnes, A. (Ed.). (2017). Digital Forensics. John Wiley 
-Whitman, M. E., Mattord, H. J., &amp; Green, A. (2013). Principles of incident response and disaster recovery. Cengage Learning.

Læringsformer og aktiviteter

-Forelesninger
-Lab.øvelser
-Oppgaveløsning
-Prosjektarbeid



Læringsutbytte

Incident Response, Ethical Hacking and Forensics

Informasjonssikkerhet

Bachelor i IT-drift og informasjonssikkerhet

Web/Lists(guid'8b698a2d-6ad0-4f7d-b3be-219cc1979f02')/Items(8057)/FieldValuesAsText

The course is partical cyber security related course that covers three important topics in the area, which are ethical hacking, incident response and digital forensics. Each part was taught by one teacher and there were one course responsible. Apart from the lectures, there were lab sessions, exercises and demos for many of topics that were covered in the course in the three parts. Additionally, at the end, the course offers a 4-weeks project that covers all parts, which is a spcial type of a "blue team-red team" cyber security exercise. This is a special type that is developed by the course responsible and the teachers, which provides a unique opportunity for students to train all skills they learned in a practical and real-world relevent project. The project is/was very popular among students, but few thought it is requires a lot of efforts and collides with other assignments from other courses.

<h3>Learning outcome</h3>Knowledge:The candidate has knowledge about different activities associated with securing, attacking and investigating computer systems, including- The candidate has general knowledge of planning for incident responseand managing the operational aspects of the incident response team.- The candidate has general knowledge of how to perform incidentresponse for various types of adverse incidents, including intrusionsfrom advanced threat actors- The candidate has general knowledge of digital Forensics methodology with a solid understanding of requirements for handling digital evidence.- The candidate has general knowledge if ethical hacking techniques that are used to understand how attacker think and operate and identify weaknesses during operations. Skills:The candidate can- Prepare for incident handling and perform incident response, as well as build, organize and manage an incident response team- Perform ethical hacking activities to identify vulnerabilities in systems at different levels, exploit these vulnerabilities to gain access, and maintain this access- Forensic acquisition of digital evidence from computer and network media General Competence:Candidates have insight into the methods of planning for incidents, defending information systems and testing these systems for weakness. In case of an incident they are able to collect evidence based on digital forensics methodologies and the relationship with incident handling.

<h3>Learning methods and activities</h3>-Lectures-Laboratory work-Exercises-Project work, which is a practical cyber security exercise conducted by students at the end of the semester (4 weeks).

<h3>Further on evaluation</h3>Vurderingsformer:-Written examination counts for 40%-The project(s) counts for 60%-All parts must be passed.

1. Årnes, A. (Ed.). (2017). Digital Forensics. John Wiley &amp; Sons.2. Whitman, M. E., Mattord, H. J., &amp; Green, A. (2013). Principles of incident response and disaster recovery. Cengage Learning.

Web/Lists(guid'8b698a2d-6ad0-4f7d-b3be-219cc1979f02')/Items(1350)/FieldValuesAsText

Incident Response, Ethical Hacking and Forensics - IMT3004