Introduction to Ethical Hacking. General Introduction to Ethical Hacking Practitioner

Transcription

1 Introduction to Ethical Hacking

2 General Introduction to Ethical Hacking Practitioner

3 General Information 3

4 SECO-Institute Cyber Security & Governance Certification Program 4

5 In General The Ethical Hacking Practitioner course is the second level of the Certified Ethical Hacking Officer certification track. This course will allow you to acquire intermediate-level Ethical Hacking skills. You will familiarise yourself with such techniques as analysing network traffic, hacking wireless networks, scanning networks, and penetrating computer systems and websites. The course offers a perfect mix of theory and practice, where practical examples are illuminated with case studies. 5

6 Learning Objectives Students know what steps to take in the preparation and execution of a hack (pentest) Students are able to use open and closed sources to gain intelligence on a target Students are able to gather intelligence by scanning (network, footprinting & vulnerability) Students know how to verify the vulnerabilities found Students understand the PKI and possible attack vectors 6

7 Course Topics The course consists of 8 topics, a recapitulation module and a lab exercise (Capture the Flag) Module 1: Introduction to Ethical Hacking Practitioner Module 2: Reconnaissance and Intelligence Gathering Module 3: Infrastructure Security Part I Module 4: Infrastructure Security Part II Module 5: Web Applications I Module 6: Web Applications II 7

8 Course Topics Module 7: Systems and Applications Module 8: Exploiting Buffer Overflows Recapitulation Capture the Flag Note: Capture the Flag is a practical exercise that makes up 30% of your final examination score. Your CtF results should be saved as a text file and be uploaded to the online examination environment as part of your exam 8

9 Course Material 9

10 Structure of the Course The course material is made up of: One slide deck per course module (both notes and tablet version) Each module consists of: An introduction including a description of the learning objectives A graphical depiction of the course structure and/or a brief content overview Theory mixed with practice questions or a case study A concluding summary A Goody Bag with additional information, recommended literature, etc. 10

11 Version number The version number of the course material can be found at the back cover of each slide deck. The version number of this course is EHP-EN a 11

12 Icons Used in Course Material Essential information students must know for the exam Useful information that will be briefly discussed but is not part of the exam Homework that will not be covered in class but is part of the exam Definition Goody Bag: useful links, literature, etc. Region-specific information The lack of an icon doesn t mean the given material is not part of the exam. It still is! 12

13 13

14 Bicsma BV SECO-Institute uses the fictional business Bicsma in its exercises Bicsma is a fictional organisation created to provide context for the case studies and practical exercises in the courses of the SECO-Institute. Information about the Bicsma BV organisation model can be found at The username is bicsma and the password is training 14

15 Bicsma BV Welcome! 15

16 Examination 16

17 Examination SECO-Institute allows you to take exams online. Our online examination system allows you to book your exam and take it at any place convenient to you. You can book your exam at the SECO-Institute website When selecting your exam, make sure you select the 2018 version Exam results are communicated one month after completion of the exam You will receive your certificate after the results have been published 17

18 Exam Regulations Pass mark: 60% out of 100% Open book/notes: no The exam regulations can be found on the SECO-Institute website: Time allotted for the exam: 2 hours Number of questions: 10 Multiple choice: 3 points per question 5 Open questions: 8 points per question The last lab exercise makes up 30% of the final examination score, thus results should be saved as a text file. These file should be uploaded to the online examination environment. 18

19 Certification 19

20 Certification Upon successful completion of your exam, you can claim your certification title at the SECO-Institute 20

21 Certification The SECO-Institute issues 3 types of certification titles: SECO-Institute Practitioner certification titles: Upon successful completion of a Practitioner exam, you can claim the Practitioner title. SECO-Institute Expert certification titles: Upon successful completion of an Expert exam, you can claim the Expert title. SECO-Institute Certified Officer certification titles: In the possession of an expert-level certification, you can apply for the highest-level qualification: the Certified Officer certification. This certification does not only require students to possess (at least expert-level) subject knowledge but also a minimum of 3 years of full-time work experience. 21

22 EHP-EN a Module 3: Infrastructure Security Part I 22