Reference no: EM133104670

COS7029-B Ethical Hacking - University of Bradford

Task: Development of EH Portfolio

The second task is to develop a portfolio covering the key aspects of ethical hacking and developing a penetration test to mitigate the vulnerabilities identified in either the following web applications/websites or any computing areas (network, application or software) selected by students.

Web application: The Buggy Web Application - bWAPP: Some of the flaws In this application are: Cross-site scripting (XSS), DoS (denial-of-service) attacks, Man-in- the-middle attacks, Server-side request forgery (SSRF), SQL injection, etc.

This portfolio includes following two tasks:

1. Strategic Penetration Testing

This task requires performing strategic penetration testing to demonstrate an understanding of the tools and methods used in the pre-defined domain.

The students can choose 4 domains for their portfolio. For each chosen domain, they have to provide a detailed description of vulnerabilities and provide evidence of how the identified vulnerabilities might be exploited through well-labeled figures (obtained via pen tests). Students can use the TryHackMe platform, or a virtual machine installed in their computers (with Kali, Parrot, or any LINUX distribution and Windows OSs) to perform pen tests. The students are required to use references to support discussion (where appropriate).

2. Mitigation Techniques
The purpose of this task is to discuss the mitigation techniques applied to protect the information system against the "Strategic Penetration Tests". The students are required to evaluate the effectiveness of these techniques by using the results produced from pen tests as evidence for their discussion. The students are required to provide reasoning of choices with underlying research.

3. Submission of Portfolio
• The portfolio should be written on A4, double spaced with normal margins.
• The title should be on the front page with student's name, UB number and programme of study.

• A table of content page should be included.
• Pages and sections should be numbered. Appendices can be used where appropriate.
• The portfolio should be properly referenced using Harvard referencing style.
• Final date to submit the Portfolio is Monday 16th May by 16:00 via CANVAS. Failure to meet this deadline will result in a mark of zero being awarded for this part of the assessment (as per University of Bradford Regulations).

4. Summary
External examiners rigorously review the complete assessment documentation to ensure that each aligns with the QAA and the Framework for Higher Education Qualification (FHEQ) guidelines and other similar programs in other institutions. The FHEQ Framework identifies what students much achieve if they are to receive a qualification at Level 7 (Master's Qualification). The pass mark at the University of Bradford is 40%, and to achieve a pass, all students must demonstrate the skills outlined by the FHEQ if they are to be awarded a degree at this level.

Attachment:- Ethical Hacking.rar