[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-179314-105":59,"doc-detail-179314-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","phase-i-creation-of-a-vulnerable-system-phase-ii-vulnerability-identification-and-exploitation-phase-iii-development-of-defense-strategy","Phase I: Creation of a Vulnerable System - Phase II: Vulnerability Identification and Exploitation - Phase III: Development of Defense Strategy","","This document outlines a three-phase approach to understanding and mitigating system vulnerabilities, designed for educational purposes within a case study or course project. Phase I focuses on the creation of a vulnerable system, either set up by an instructor or developed collaboratively by students. Phase II involves students actively identifying, evaluating, and exploiting identified vulnerabilities, with guidance provided through hints. Subsequently, Phase III engages students in developing defense strategies to mitigate or avoid the risks associated with these vulnerabilities, leveraging the knowledge gained from the previous phase. The document includes a table detailing various areas within a system, the specific vulnerabilities they might possess, and their associated risk levels, ranging from High to Low. Examples include unnecessary sudo access, weak password aging, unencrypted private files, and disabled SELinux as examples of vulnerabilities with Significant to Moderate risks. The educational framework encourages hands-on learning through practical application and strategic thinking to build robust cybersecurity awareness and defensive capabilities.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/phase-i-creation-of-a-vulnerable-system-phase-ii-vulnerability-identification-and-exploitation-phase-iii-development-of-defense-strategy/179314/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/phase-i-creation-of-a-vulnerable-system-phase-ii-vulnerability-identification-and-exploitation-phase-iii-development-of-defense-strategy/179314.png","ImageObject",300,407,{"name":92,"@type":93},"Seraphina","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-15","2026-09-02",true,{"@type":102,"interactionType":103,"userInteractionCount":29},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"What are the main phases of the vulnerability management process described?","Question",{"text":112,"@type":113},"The process is divided into three main phases: Creation of a Vulnerable System, Vulnerability Identification and Exploitation, and Development of Defense Strategy.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What is the objective of Phase II?",{"text":117,"@type":113},"In Phase II, students are tasked with identifying, evaluating, and exploiting the vulnerabilities within the system created in Phase I, using provided hints.",{"name":119,"@type":110,"acceptedAnswer":120},"What does Phase III entail?",{"text":121,"@type":113},"Phase III focuses on developing a strategy to mitigate or avoid the risks discovered in the previous phases, based on the knowledge gained from identifying and exploiting vulnerabilities.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},179314,1791100662,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":29,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":34,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":143,"read_time":144},962075114101,"https://ap-avatar.wpscdn.com/avatar/e000253a75eb197efd?x-image-process=image/resize,m_fixed,w_180,h_180&k=1780044092746381165","| Area | Vulnerability Created | Risk Level |\n| --- | --- | --- |\n| Getting Up and Running | Unnecessary sudo access | High |\n|  | Grub without password-protection | High |\n| User Privileges\u003Cbr>& Permissions | Weak password aging control | Medium |\n|  | No account lockout | High |\n| File Systems | Writable and executable boot | High |\n|  | A file containing root password | High |\n| Encryption | Unencrypted private file | High |\n|  | Old version of SSL | Medium |\n| Service | Telnet enabled | Low |\n|  | Disabled SELinux | Medium |\n| Network and Firewalls | IPtables not configured correctly | Medium |\n|  | Constantly running Apache | Medium |\n| Application | Unsecure NTP server | Medium |\n|  | Open ports for unneeded services | Low |\n| Alerts and Updates | No alerts to user for\u003Cbr>downloading available updates | Medium |\n|  | Disabled auto system updates | Low |","cbCaigwzK4kcSyJn","https://ap.wps.com/l/cbCaigwzK4kcSyJn","pdf",791318,"English","# Phase I: Creation of a Vulnerable System\n## Phase II: Vulnerability Identification and Exploitation\n## Phase III: Development of Defense Strategy","[{\"question\":\"What are the main phases of the vulnerability management process described?\",\"answer\":\"The process is divided into three main phases: Creation of a Vulnerable System, Vulnerability Identification and Exploitation, and Development of Defense Strategy.\"},{\"question\":\"What is the objective of Phase II?\",\"answer\":\"In Phase II, students are tasked with identifying, evaluating, and exploiting the vulnerabilities within the system created in Phase I, using provided hints.\"},{\"question\":\"What does Phase III entail?\",\"answer\":\"Phase III focuses on developing a strategy to mitigate or avoid the risks discovered in the previous phases, based on the knowledge gained from identifying and exploiting vulnerabilities.\"}]","Phase I: Creation of a Vulnerable System - Phase II: Vulnerability Identification and Exploitation - Phase III: Development of Defense Strategy | PDF",1788336321,18]