Assessment of Network Penetration Testing Knowledge Among Final-Year Computer Engineering Students in South East Universities

Network penetration testing is a core cybersecurity professional skill, and assessing its theoretical and practical knowledge among final-year Computer Engineering students at South East Nigerian universities provides a curriculum adequacy benchmark for producing work-ready security graduates. This study assessed network penetration testing knowledge among final-year Computer Engineering students at the University of Nigeria Nsukka, Enugu State University of Science and Technology, and Michael Okpara University of Agriculture Umudike, South East Nigeria. A structured knowledge assessment covering reconnaissance, scanning, exploitation, post-exploitation, and reporting phases was administered to 220 students (approximately 73 per institution). Results showed a mean score of 44.6 out of 100. Reconnaissance methods were best understood (mean 58.3), while post-exploitation techniques and reporting were least understood (mean 31.7 and 38.4 respectively). Students at institutions with cybersecurity laboratory facilities scored 18.4 points higher than students at institutions without (p < 0.001). Only 18.2 percent had practised penetration testing tools outside of required coursework. Certification awareness (CEH, OSCP) was held by 43.2 percent. The study concludes that penetration testing knowledge is inadequate across surveyed institutions and recommends dedicated cybersecurity laboratory infrastructure, integration of hands-on penetration testing into the Computer Engineering programme across South East universities, and industry mentorship connections linking students with professional penetration testers. Keywords: penetration testing, Computer Engineering students, South East Nigeria, cybersecurity curriculum, security laboratory