University of Mauritius

C-DAC School of Advanced Computing

Executive Development Programme

Training Workshop on Ethical Hacking and Penetration Testing

(MQA approved)

11-13 May 2011, University of Mauritius

Introduction
The year 2009 has seen a strategic change in cyber attack profile. The attacks have shown
that the attacking community has learned ability to perform targeted attacks, which is a
concern for cyber security personnel. Reports on cyber security have predicted that future
attacks will be concentrating on data more than what was happening earlier. Both
governmental and private data will be targeted where data corruption, data destruction or
data theft will be of prime concern, putting cyber infrastructure across the world at stake.
Unless multi-pronged strategies are devised to fight this threat, 2010 will see more
attacks on data and services.
One way to know the enemy is to think like the enemy. To shield your network from
hackers, you must think like one. In other words, you must learn to hack. Of course,
hacking is illegal, so you must become part of a new breed called the Ethical Hacker.
Ethical hacking, being a means of identifying potential vulnerabilities within the network
infrastructure of an organisation, needs an authorisation from its management to penetrate
its network with force.
The Training Workshop on Ethical Hacking and Penetration Testing will provide an
interactive environment where it will be shown how to scan, test, hack and secure a
system. The lab intensive programme will give each participant in-depth knowledge and
practical experience with the current essential security systems. Participants will begin by
understanding how ethical hacking works and then move on to scanning, testing and
hacking their own networks, no real network is harmed. They will then learn how
intruders escalate privileges and what steps can be taken to secure an information system.

Objectives
The Training Workshop aims to bring together IT and security professionals, industry
experts, academicians, and students to share their experiences, acquire knowledge and
gain an understanding of the key tools, techniques and strategies needed to safe-guard an
information system. When participants complete this 3-day programme, they will have:
C-DAC School of Advanced Computing, Mauritius

Expertise on ethical hackers methodologies.

Practical skills on hacking tools and techniques.
Know-how on the tactics and techniques used by penetration testers.
In-demand career skills of a professional security tester.

Methodology
The Training Workshop will employ a right mix of lectures, hands-on sessions,
demonstrations, and case studies. Real-world examples will be used throughout the
course in conjunction with numerous tutorial exercises to develop field-proven, practical
ethical hacking and penetration testing skills. Participants will receive registration kits
containing training presentations and demo CDs of security tools.

Audience
The Training Workshop will help IT Professionals, Information Security Practitioners,
Corporate Business and Management Executives, System Administrators, and Law
Enforcement Personnel to learn ways and means of investigating vulnerabilities and
attack techniques used by hackers to pre-empt cyber attacks on their IT infrastructure.
MQA approved Certificate of Attendance will be issued to all the participants.

Resource Persons
V.K. Bhadran, Director, Resource Centre for Cyber Forensics, C-DAC, Ministry
of Communications & IT, India.
V.K. Bhadran, an expert in network security and forensics, has 25 years work
experience in the ICT sector. He is heading a group of scientists involved in the
development of tools for cyber forensics, cyber crime investigation and training
activities. He is currently developing a package for Enterprise Security and
Forensics Systems which helps organisations in securing transactions over their
network.
Leela Putten, Performance & Security Test Analyst, Rubric Consulting, South Africa
Leela Putten is a graduate of the University of Mauritius with an MSc from
Strathclyde University in Forensic Informatics. Her thesis was about evaluating
Virtual Honeynets as a platform to assess penetration testing tools and methods.
She is now working in South Africa as a specialist in Security Testing.
Kaleem Usmani, Officer-in-Charge, Computer Emergency Response Team
(CERT), National Computer Board, Mauritius
Kaleem Usmani is a Certified Ethical Hacker and is working in the field of
Information Systems and Computer Security for several years.
C-DAC School of Advanced Computing, Mauritius

Programme Outline
DAY 1
Session 1: Recent Trends in Cyber Crimes

1 hr

Session 2: Ethical Hacking Fundamentals

1 hr

Session 3: Footprinting, Scanning and Enumeration

2 hrs

Session 4: Hands-on: Scanning and Enumeration

2 hrs

DAY 2
Session 5: Penetration Testing

1.5 hrs

Session 6: Hacking a Computer System

1.5 hrs

Session 7: Introduction to Cryptography

1 hr

Session 8: Hands-on: Penetration and Access

2 hrs

DAY 3
Session 9: Session Hijacking

1 hr

Session 10: Web Server Attacks

1 hr

Session 11: Web Application Attacks

1 hr

Session 12: SQL Injection Attacks

1 hr

Session 13: Hands-on: Hacking

2 hrs

Fees

Rs 15,000 per participant for general candidates.

Discounted rate of Rs 12,000 per participant for a corporate batch of minimum 10.
Special rate of Rs 12,000 per participant from government/parastatal sectors.
Special rate of Rs 12,000 per participant for C-SAC/UoM alumnus.
Sponsored rate of Rs 10,000 per participant for students of C-SAC/UoM/UTM.
Since the Training Workshop is MQA approved,
participants could avail HRDC refund as applicable.

C-DAC School of Advanced Computing, Mauritius

Organisers
C-DAC School of Advanced Computing: C-SAC was set up in Mauritius in 2002 to
promote education, training, research and consultancy in the field of ICT and its
applications in Mauritius. C-DAC is an R&D organisation of the Government of India
and is involved in design, development and deployment of advanced ICT based solutions
and ICT training. www.csac.mu
University of Mauritius: UoM is a dynamic and internationally recognised university
with a long established tradition in providing excellence in education. www.uom.ac.mu

Coordinators
1. Dr. C.P. Johnson
Director
C-DAC School of Advanced Computing
24, St. Jean Road, Quatre Bornes, Mauritius
Tel: 230-4255849; Tel/Fax: 230-4275516
E-mail: johnson@csac.mu , info@csac.mu

C-DAC School of Advanced Computing, Mauritius

2. Mr. Gavin Sathan

Lecturer, Dept. of Computer Sciences
University of Mauritius
Rduit, Mauritius
Tel: 230-4037400; Fax: 4657144
E-mail: s.sathan@uom.ac.mu