IAAS 482 - Vulnerability Assessment

3 Credits
This course will provide methodologies for identifying and prioritizing information assets and threats to information assets. Topics will include risk analysis, architecture components of an incident response plan, legal and public relations implications of security and privacy issues, and the framework of a disaster recovery plan. Other areas of interest will include identifying explicit weaknesses and strengths of the security of various networking operating systems, discovering and recommending corrections to known vulnerabilities in network infrastructures, and recommending systems for the physical hardening of popular network components. Resources will be identified to allow for discovery of patches and programs to address the latest security threats.

Prerequisite(s): CSCI 360 or IAAS 481
Course Learning Outcomes:
1. Determine an appropriate methodology for determining an organization’s risk, weaknesses, and security posture.
2. Perform audits and assessments.
3. Conduct penetration studies and architecture reviews.
4. Examine weaknesses using current tools, including vulnerability scanners and OS fingerprinting tools.
5. Audit and make recommendations to improve the security posture of an organization.