Assessment of Ethical Hacking Knowledge Among Computer Science Students in Federal Universities in the South West

Ethical hacking skills are essential for the Nigerian cybersecurity workforce, and understanding the current knowledge base of Computer Science students at South West federal universities provides a foundation for curriculum alignment with industry demands. This study assessed ethical hacking knowledge among final-year Computer Science students at the Federal University of Agriculture Abeokuta, University of Lagos, and Obafemi Awolowo University, representing the South West geopolitical zone. A structured knowledge test covering penetration testing methodology, OWASP Top 10 vulnerabilities, reconnaissance techniques, exploitation fundamentals, and legal and ethical frameworks was administered to 240 final-year CS students (80 per institution). Results showed a mean knowledge score of 52.8 out of 100. OWASP vulnerability knowledge was highest (mean 62.4) while legal and ethical framework knowledge was lowest (mean 41.6). Students at institutions offering a dedicated security course scored significantly higher than those without such a course (p < 0.001). Only 22.5 percent had practised on ethical hacking platforms such as Hack The Box or TryHackMe. Only 14.6 percent had participated in a Capture-the-Flag competition. The study recommends mandatory ethical hacking and penetration testing modules in South West federal university CS curricula, integration of online hacking platform practice into coursework, and industry-academic CTF competition partnerships to develop practical skills alongside theoretical knowledge. Keywords: ethical hacking, Computer Science students, South West Nigeria, penetration testing, cybersecurity curriculum