Instructor: Cong Pu »
(Email: , Office Phone: (304) 696-6204, Office: WAEC 3109)
Class Level: Graduate
Course Offering: Every Semester
Prerequisite: None

This course focuses on the complete cycle of enterprise security from identifying vulnerabilities, detecting application exploitation and post exploitation mitigations and analysis for an enterprise level cyber infrastructure.

• Sean-Philip Oriyano. Penetration Testing Essentials. Pearson. 1st Edition. ISBN-10: 1119235308. ISBN-13: 978-1119235309.
• Georgia Weidman. Penetration Testing: A Hands-On Introduction to Hacking. 1st Edition. ISBN-10: 1593275641. ISBN-13: 978-1593275648.
• OWASP Testing Guide v4.
• William Stallings, Lawrie Brown. Computer Security: Principles and Practice. Pearson. 4th Edition. ISBN-10: 9780134794105. ISBN-13: 978-0134794105.
• William Stallings. Cryptography and Network Security: Principles and Practice. Pearson. 7th Edition. ISBN-10: 0134444280. ISBN-13: 978-0134444284.

Date	Topic	Slides & Asgmts
Jan 11	Welcome & Course Introduction	[Syllabus]
Jan 18	Principles of Successful Testing and Testing Techniques	[Slide] [Research Asgmt 1]
Jan 25	Information Gathering	[Slide] [Research Asgmt 2] [Lab Asgmt 1]
Feb 01	Identity Management Testing	[Slide] [Research Asgmt 3] [Lab Asgmt 2]
Feb 08	Exam 1
Feb 15	Authentication Testing	[Slide] [Research Asgmt 4] [Lab Asgmt 3]
Feb 22	Authorization Testing	[Slide] [Research Asgmt 5] [Lab Asgmt 4]
Mar 01	Exam 2
Mar 08	Session Management Testing	[Slide] [Research Asgmt 6] [Lab Asgmt 5]
Mar 15	Spring Break
Mar 22	Client Side Testing	[Slide] [Research Asgmt 7] [Lab Asgmt 6]
Mar 29	Exam 3
April 05	Input Validation Testing	[Slide] [Research Asgmt 8] [Lab Asgmt 7]
April 12	Input Validation Testing	[Slide] [Research Asgmt 9] [Lab Asgmt 8]
April 19	“Dead Week”
April 26	Exam 4

None.