In the Vrije Universiteit's course "Privacy en Beveiliging" several privacy and security related issues are discussed. The course is separated in 2 hours of college and 2 hours of practical tutorial lessons per week. In 2009-2010 I have given the practical tutorial lessons. When giving these lectures I was free to fill in the content for the pracical tutorials, which eventually turned into the following lesson format:
In particular, the security demo was found to be very interesting by students, for it was a great in depth technical approach to security for the Computer Scientist group attending the class as well as a security eye-opener for the Information and Multimedia Management group.
In these security demo's I showed the students several penetration testing techniques such as vulnerability scanning, exploiting services using known exploits and hash-stealing/cracking in a real life way by running an attacker and victim pc in virtual machines. By doing so, the students got a real look at the way a hacker would attack or test a system, instead of just learning the theory. In this way, the course topics become very alive and the students were able to ask questions, make suggestions and get inspired to start researching the topics in more depth than the course covers.
This way of teaching was really an eye opener for myself, the professor giving the lecture and the students. It was also a great way of sharing my hands on knowledge of computer security and penetration testing in an educational and productive way. Further information on this course can be found in the practical course slides and notes found below.