-: In this section of the course, we're going to talk about 2 2
how you can mitigate software vulnerabilities and attacks. 3 3
Now, we're again going to be working in domain two, 4 4
vulnerability management, 5 5
and this time we'll specifically be focusing 6 6
on objectives 2.2, 2.4, and 2.5. 7 7
Objective 2.2 states that given a scenario, 8 8
you must be able to analyze output 9 9
from vulnerability assessment tools. 10 10
And we'll be specifically looking at our demonstration 11 11
of the Metasploit framework 12 12
that we use in penetration testing 13 13
and vulnerability assessment 14 14
as the tool that we're going to be considering the output of. 15 15
We'll also be looking at objective 2.4, 16 16
which states that given a scenario, 17 17
you must be able to recommend controls 18 18
to mitigate attacks and software vulnerabilities. 19 19
And we'll also look at objective 2.5, 20 20
which states that you must be able 21 21
to explain concepts related to vulnerability response, 22 22
handling and management. 23 23
Now first, we're going to begin by describing 24 24
the software development lifecycle 25 25
which is known as the SDLC. 26 26
Then we're going to be going into concepts 27 27
like privilege escalation and root kits, 28 28
different types of overflow attacks, 29 29
race conditions, improper error handling, 30 30
and other design vulnerabilities. 31 31
Next, we're going to discuss the various best practices 32 32
that are used to be able to go forth 33 33
and correct all these different vulnerabilities 34 34
on different platforms that you may be working with. 35 35
After that, we're going to go through a quick demonstration 36 36
of how to use the Metasploit framework 37 37
to break into a vulnerable piece of software 38 38
just like a penetration tester or a attacker might do 39 39
to a vulnerable piece of software installed 40 40
on one of your network devices. 41 41
And finally, we're going to take a short quiz 42 42
to see what you learned during this section of the course 43 43
and review each of those quiz questions fully 44 44
to ensure you can explain 45 45
why the correct answer was correct. 46 46
So let's dive into all the different ways 47 47
to mitigate software vulnerabilities and attacks 48 48
in this section of the course.