查詢教學大綱與進度

教學大綱與進度

課程基本資料：

學年期課號課程名稱階段學分時數修教師班級人撤備註

113-1 336192 網路安全與滲透測試 1 3.0 3 ★ 謝文彬資工所
電資外生所
創新資安學位學程 53 3 資工四所資安學程和電資外班合開

學年期	課號	課程名稱	階段	學分	時數	修	教師	班級	人	撤	備註
113-1	336192	網路安全與滲透測試	1	3.0	3	★	謝文彬	資工所電資外生所創新資安學位學程	53	3	資工四所資安學程和電資外班合開

教學大綱與進度：

教師姓名謝文彬　教師諮商時間(Office Hours)

Email wbhsieh@ntut.edu.tw

最後更新時間 2025-01-23 15:21:52

課程大綱本課程除了介紹技術的原理之外，更著重在實際資安檢測工具的使用，以Kali Linux虛擬機實際進行實作分析與演練，讓學生能更了解技術原理的真實應用情境。課程內容包含： ●計算機網路回顧 ●網頁安全 ●滲透測試 ●弱點評估及測試工具 ●入侵偵測工具 In addition to introducing the principles of technology, this course also focuses on the use of actual security detection tools. It uses the Kali Linux virtual machine for actual implementation analysis and drills, so that students can better understand the real application scenarios of technical principles. Course content includes: ●Computer Network Review ●Web security: SQL injection, XSS attack, etc. ●Penetration test ●Vulnerability assessment and testing tools ●Intrusion detection tools

課程進度 1. Introduction to CryberSecurity and PenTest 2. Latest information security incidents 3. Latest information security incidents / Basic exploit techniques (I) 4. Basic exploit techniques (II) 5. Known and famous information security protection mechanisms 6. Social engineering based on Machine Learning 7. Web security - SQL injection (I) 8. Web security - SQL injection (II) 9. Mid-exam 10. Web security - XSS attack (I) 11. Web security - XSS attack (II) 12. Web security - CSRF attack 13. Web security - JWT vulnerability(I) 14. Web security - JWT vulnerability(II) 15. PenTest tools - practices (I) 16. PenTest tools - practices (II) & Presentation (I) 17. Presentation (II) 18. Presentation (III) & Conclusion

評量方式與標準 Attendance: 20% Mid-exam/Personal Report : 30% Final project: 40% In-class practices : 10%

使用教材、參考書目或其他 【遵守智慧財產權觀念，請使用正版教科書，不得使用非法影印教科書】

使用外文原文書：是
Self-made materials Reference: 1. Robert Seacord, Secure Coding in C and C++, SEI Series. 2. Fred Long et al., CERT Oracle Coding Standard for Java, SEI Series. 3. Chiheb Chebbi, Mastering Machine Learning for Penetration Testing, Packt Publishing Ltd.

課程諮詢管道 office hour Wed. 12:00-18:00 or by appointment
office location: General Studies Building 501-1

延伸教學與資源

課程對應SDGs指標 SDG4：優質教育（Quality Education）
SDG8：尊嚴就業與經濟發展（Decent Work and Economic Growth）

課程是否導入AI

備註 The course content may be adjusted in response to contemporary developments or to reflect the actual progress of the course. Please bring your own laptop and download the following VM first Kali Linux (virtual box version) https://www.kali.org/get-kali/#kali-virtual-machines

教師姓名	謝文彬　教師諮商時間(Office Hours)
Email	wbhsieh@ntut.edu.tw
最後更新時間	2025-01-23 15:21:52
課程大綱	本課程除了介紹技術的原理之外，更著重在實際資安檢測工具的使用，以Kali Linux虛擬機實際進行實作分析與演練，讓學生能更了解技術原理的真實應用情境。課程內容包含： ●計算機網路回顧 ●網頁安全 ●滲透測試 ●弱點評估及測試工具 ●入侵偵測工具 In addition to introducing the principles of technology, this course also focuses on the use of actual security detection tools. It uses the Kali Linux virtual machine for actual implementation analysis and drills, so that students can better understand the real application scenarios of technical principles. Course content includes: ●Computer Network Review ●Web security: SQL injection, XSS attack, etc. ●Penetration test ●Vulnerability assessment and testing tools ●Intrusion detection tools
課程進度	1. Introduction to CryberSecurity and PenTest 2. Latest information security incidents 3. Latest information security incidents / Basic exploit techniques (I) 4. Basic exploit techniques (II) 5. Known and famous information security protection mechanisms 6. Social engineering based on Machine Learning 7. Web security - SQL injection (I) 8. Web security - SQL injection (II) 9. Mid-exam 10. Web security - XSS attack (I) 11. Web security - XSS attack (II) 12. Web security - CSRF attack 13. Web security - JWT vulnerability(I) 14. Web security - JWT vulnerability(II) 15. PenTest tools - practices (I) 16. PenTest tools - practices (II) & Presentation (I) 17. Presentation (II) 18. Presentation (III) & Conclusion
評量方式與標準	Attendance: 20% Mid-exam/Personal Report : 30% Final project: 40% In-class practices : 10%
使用教材、參考書目或其他	【遵守智慧財產權觀念，請使用正版教科書，不得使用非法影印教科書】使用外文原文書：是 Self-made materials Reference: 1. Robert Seacord, Secure Coding in C and C++, SEI Series. 2. Fred Long et al., CERT Oracle Coding Standard for Java, SEI Series. 3. Chiheb Chebbi, Mastering Machine Learning for Penetration Testing, Packt Publishing Ltd.
課程諮詢管道	office hour Wed. 12:00-18:00 or by appointment office location: General Studies Building 501-1
延伸教學與資源
課程對應SDGs指標	SDG4：優質教育（Quality Education） SDG8：尊嚴就業與經濟發展（Decent Work and Economic Growth）
課程是否導入AI
備註	The course content may be adjusted in response to contemporary developments or to reflect the actual progress of the course. Please bring your own laptop and download the following VM first Kali Linux (virtual box version) https://www.kali.org/get-kali/#kali-virtual-machines