
In CYB 642, you will learn how to implement an attack surface management program
and integrate that function into a traditional information security program. Through
a series of practical exercises, you will explore popular open-source tools like Amass,
Nmap, Aquatone, ffuf, dirsearch, and httprobe. As you follow along with the labs,
you’ll experience the key stages of the attack surface management process; including
management of data sources, asset discovery, tracking attack surface changes, pri-
oritization of findings, reducing an organization’s attack surface, and providing the
inventory to other traditional security functions.
- Teacher: John Oevering