Handbook

 The unit is organised into these topics:

1. Introduction to ethical hacking and software security, e.g. types of hackers, hacking concepts and phases
2. Computer security review, e.g. access control, authentication, security architecture, cryptography
3. Network security, reconnaissance, scanning, spoofing, and defenses
4. Pentesting process, reporting, ethics and laws
5. Malware and attack technology, e.g. botnets, polymorphic/metamorphic malware, malware economy, adversarial behaviors, attack techniques
6. Software security, Common Vulnerabilities and Exposures (CVE), Common Weakness Enumeration (CWE), buffer overflows/overreads, race conditions
7. Web technologies, HTTP, scripting, DB/SQL, microservice architecture
8. Web attacks, e.g. SQL injection, session hijacking, cross-site request forgery, cross-site scripting
9. Secure software development and lifecycle, source code analysis and analysis tools 
10. Active directory and Cloud attacks
11. Human factors, risk perception, social engineering
12. Ethics and laws