Penetration Testing

Specialists in IT security are in demand like never before. Threats from online attackers are increasing in particular. To protect themselves, companies need IT security experts who can identify vulnerabilities in their IT systems and present these in a report. To give students a clear insight into the tasks of a penetration tester, they will be performing a penetration test on a fictitious company network and applications:

Dubius Payment Ltd. is a relatively new payment service provider. As the company processes credit card information in its systems, it is subject to the security standard of the credit card industry, the PCI DSS (Payment Card Industry Data Security). In order to obtain PCI certification, the company is obligated to undertake penetration testing of its IT systems, and they have opted to hire you for the job.

In addition to the same technical procedures used by malicious attacker they learn all the necessary steps to carry out a professional penetration test. Specifically, they will not only be able to identify and exploit security gaps in company networks and applications, but also convince a prospective client with an organized approach and a structured pentest report on their findings.

 


FAQ

Is the lecture "Penetration Testing" identical to the "Pentest Training" of the binsec academy?

At University of Applied Sciences Darmstadt (HDA) Penetration Testing is taught as a classroom lecture and as an online self-study course. The course materials of the online self-study course are identical to the course materials of the Pentest Training. In both cases a part of the laboratory environment of Dubius Payment Ltd. is used. At the university the exam form is still the written exam in both cases. The BACPP certificate is not granted.

Kontakt

Portrait: Sauer, Dominik

Kommunikation

dominik.sauer@h-da.de

1