Ethical Hacking CYB502 Assessment

Module Leader: AHMED AL-ANI

Level: 5

Module Name:

Ethical Hacking and Intrusion Detection

Module Code: 55-508815

Assignment Title:

Ethical Hacking

Individual

Weighting: 50

Magnitude: 2000 words

Submission date/time: 01/May/2025

Blackboard submission Y/N
Turnitin submission Y/N

Format: e.g. Word

Planned feedback date:

Mode of feedback:

In-module retrieval available: Yes/No

Module Learning Outcomes

• Analyse legal, social, ethical and professional issues in cyber security

• Evaluate different approaches to testing and analysing network security through ethical hacking.

• Analyse vulnerabilities to apply appropriate security countermeasures in computing systems, networks and web applications.

• Collect, analyse (including through the use of appropriate mathematical and statistical concepts) and evaluate digital evidence.

• Apply the concepts and features of intrusion detection, prevention and incident response.

Marking Criteria

Comment

Weight

Methodology Design

This section focuses on

• Design of a methodology

Firstly, a clear methodology

should be presented,

with sufficient detail so that a technical reader can

understand the approach taken and what each stage.

attempts to do.

This can include but is not limited to:

• The types of scans performed.

• The types of vulnerabilities assessed.

• The techniques used.

• The tools to be used

10%

Methodology Effectiveness & Efficiency

This section focuses on

• Host enumeration and fingerprinting

• Service enumeration and fingerprinting

• Vulnerability Scanning

The report should then reflect you executing each step of the methodology. It should show each stage being executed efficiently with the least number of commands used, each command should run with the optimal options. The way the tools/commands are used should simulate attack from a malicious hacker. The output of the commands should also be show clearly and the output should be in its most efficient form. Or with a filter (i.e grep) used to extract the most important/key pieces of information Overall - You should show the execution of each step of the Ethical Hacking Methodology you present. Marks are awarded for how effective and efficient you are.

10%

Specific Results

This section focuses on each machine.

• Vulnerability Exploitation

• A clear and concise description of what the vulnerability is.

• A comment or indicator on how serious the issue is

• A repeatable example should be given.

• An explanation on why each item presents a security risk.

• Advice on how to fix/remediate the issues found.

70%

Report Summary

A technical and management summary are both presented which are tailored for each audience and highlight the key findings and approach

10%