ethical hacking research paper ppt

Academia.edu no longer supports Internet Explorer.

To browse Academia.edu and the wider internet faster and more securely, please take a few seconds to  upgrade your browser .

Enter the email address you signed up with and we'll email you a reset link.

• We're Hiring!
• Help Center

SEMINAR PRESENTATION FOR ETHICAL HACKING

Related Papers

International Journal of Innovative Research in Science, Engineering and Technology

gurpreet juneja

The state of security on the internet is bad and getting worse. One reaction to this state of affairs is termed as Ethical Hacking which attempts to increase security protection by identifying and patching known security vulnerabilities on systems owned by other parties. As public and private organizations migrate more of their critical functions to the Internet, criminals have more opportunity and incentive to gain access to sensitive information through the Web application. Thus the need of protecting the systems from the nuisance of hacking generated by the hackers is to promote the persons who will punch back the illegal attacks on our computer systems. So, Ethical hacking is an assessment to test and check an information technology environment for possible weak links and vulnerabilities. Ethical hacking describes the process of hacking a network in an ethical way, therefore with good intentions. This paper describes what ethical hacking is, what it can do, an ethical hacking me...

American journal of Engineering Research (AJER)

Ethical hackers use the same methods and techniques to test and bypass a system's defenses as their less-principled counterparts, but rather than taking advantage of any vulnerabilities found, they document them and provide actionable advice on how to fix them so the organization can improve its overall security. The purpose of ethical hacking is to evaluate the security of a network or system's infrastructure. It entails finding and attempting to exploit any vulnerabilities to determine whether unauthorized access or other malicious activities are possible. Vulnerabilities tend to be found in poor or improper system configuration, known and unknown hardware or software flaws, and operational weaknesses in process or technical countermeasures. One of the first examples of ethical hacking occurred in the 1970s, when the United States government used groups of experts called "red teams" to hack its own computer systems. It has become a sizable sub-industry within the information security market and has expanded to also cover the physical and human elements of an organization's defenses. A successful test doesn't necessarily mean a network or system is 100% secure, but it should be able to withstand automated attacks and unskilled hackers.

International Journal of Engineering Research and Technology (IJERT)

IJERT Journal

https://www.ijert.org/ethical-hacking-techniques-with-penetration-testing https://www.ijert.org/research/ethical-hacking-techniques-with-penetration-testing-IJERTCONV7IS11044.pdf Hacking is an activity in which a person exploits the weakness in a system for self-profit or gratification. Ethical hacking is an identical activity which aims to find and rectify the weaknesses in a system. In the growing era of internet computer security is of utmost concern for the organizations and government. These organizations are using Internet in their wide variety of applications such as electronic commerce, marketing and database access. But at the same time, data and network security is a serious issue that has to be talked about. This paper attempts to discuss the overview of hacking and how ethical hacking disturbs the security. Also the Ethical Hackers and Malicious Hackers are different from each other and playing their important roles in security. This paper studied the different types of hacking with its phases. The hacking can also be categorized mainly in three categories such as white hat, black hat and grey hat hacking. This paper also presents a comparison of the hacking categories with different methods of penetration testing.

Pakistan Journal of Engineering and Technology

Mahnoor Arshad

Hacking is a typical method for breaching personal and confidential information. As a result, hacking is also known as infiltration. Intrusions, on the other hand, were not always recognized as theft and were employed for productive purposes. A person or corporation that does ethical hacking and receives incentives from a network or system owner for testing can enter an apparatus (system or network) to locate, repair, and expose network flaws. Most ethical hackers, also known as black hat hackers, test systems using different approaches, methodologies, and tools. Because today's life is lived in a digital world, we need to protect our privacy from cyber-attacks. The proposed paper discussed ethical hacking and its ramifications, in which black hackers "hack" networks. The proposed research emphasizes ethical hacking tactics. This research also examines the impact of ethical hacking on business, education, health, society, the workplace, technology, sensitive informatio...

IAEME PUBLICATION

IAEME Publication

An ethical hacker is the network specialist & computer who pounce some security systems on the behalf of its possessor seeking amenability that could be exploited by a malicious hacker. The Internet's explosive growth has conduct many virtuous things: e-commerce, e-mail, collaborative computing & new fields for advertisement and information distribution. Ethical hacking has become a main anxiety for businesses & governments, also known as the intrusion testing or penetration testing or red teaming. Organizations are concerned about the probability of being "hacked" & potential clients are concerned about keeping personal information under control. Hackers are classified according to their work and knowledge. The white hat hackers are the ethical hackers. Ethical hackers use hacking approaches to ensure safety. Ethical hacking is needed to protect the system from the hacker's damage. The major reason behind the ethical hacking study is to assess the security and report back to the owner of the target system. This paper provides a brief ideas of the ethical hacking & every aspects.

Rishabh Upadhyay

The Paper includes the Vulnerability Assessment of University of Allahabad network

Regina Hartley

The purpose of this study is to address the issues and concerns of network security professionals due to the prominence of information technologies and growing dependence on the Internet. Growing concern stems from the apparent lack of security inherent within information technologies and information systems. Such topics as identity theft and the latest computer virus are addressed in light of inherent dangers and implications from attackers world wide. Particular emphasis is placed upon the need for determining a potential proactive measure to improve network security. Measures consisting of a hacking methodology in network security to combat the exacerbating topics associated with the Internet and computer networks world wide are examined. The study includes a history of hacking, investigation into present day issues and concerns, and topics such as cyber terrorism, identity theft, and economical considerations are focused on. The study concludes by examining ethical hacking as a ...

nimesha nishadhi

In modern technical world internet is the main information provider and storing method. The security state on the internet is getting worse. Ethical Hacking techniques are introduced to increase online security by identifying known security vulnerabilities related with systems of others. The public and private organizations immigrate most of their crutial data to the internet, hackers and crackers have more opportunity to gain access to sensitive information through the online application. Therefore, the importance of securing the systems from the affliction of immense hacking is to encourage the persons who will caster back the illegal attacks on a computer system. Ethical hacking is an examination to check an information technology environment for potential exhausted links and vulnerabilities. Ethical hacking traverses the technique of hacking a network in an ethical manner including with virtuous viewpoint. This research paper explores ethical hacking introduction, types of ethical hackers, ethics behind ethical hacking, ethical hacking methodology, some tools which can be used for an ethical hack, cyber security concepts

Hacking has become an extensive trouble with the beginning of the digital age, almost worldwide access to the internet and other digital media. It is significant for individuals, corporations, and the government to guard them from being susceptible to such attacks. The purpose of this paper is to provide information about ethical hacking; their skill to share advanced security knowledge and capabilities with organization and pointing out their vulnerabilities.

IBM Systems Journal

parmeshwar chaurasia

RELATED PAPERS

IJESRT Journal

2017 IEEE International Conference on Power, Control, Signals and Instrumentation Engineering (ICPCSI)

SONALI PATIL

EPiC Series in Computing

minhaz chowdhury

International Journal of Engineering Applied Sciences and Technology

Rupali Kasar

International Journal of Innovative Research in Computer Science & Technology

Dr. Yojna Arora

Meenaakshi N . Munjal

Ajinkya Rode

DIVYANSH JAIN

Neeraj Tripathi

The International Library of Ethics, Law and Technology

Michele Loi

International Journal Of Engineering And Computer Science

Isromi Janwar

MWAIS 2017 Proceedings

Jacob Young

International Journal of Scientific Research in Science and Technology

International Journal of Scientific Research in Science and Technology IJSRST

IEEE 2002 International Symposium on Technology and Society (ISTAS'02). Social Implications of Information and Communication Technology. Proceedings (Cat. No.02CH37293)

Zouheir Trabelsi

Saeed Khodadad

Danish Jamil

The Ethics of Cybersecurity

IRJET Journal

International Journal of Advanced Trends in Computer Science and Engineering

WARSE The World Academy of Research in Science and Engineering

Abhineet Anand

International Journal of Information and Communication Technology Education

Margaret McCoey

Journal of International Technology and Information Management

John McAlaney

•   We're Hiring!
•   Help Center
• Find new research papers in:
• Health Sciences
• Earth Sciences
• Cognitive Science
• Mathematics
• Computer Science
• Academia ©2024

IEEE Account

• Change Username/Password
• Update Address

Purchase Details

• Payment Options
• Order History
• View Purchased Documents

Profile Information

• Communications Preferences
• Profession and Education
• Technical Interests
• US & Canada: +1 800 678 4333
• Worldwide: +1 732 981 0060
• Contact & Support
• About IEEE Xplore
• Accessibility
• Terms of Use
• Nondiscrimination Policy
• Privacy & Opting Out of Cookies

A not-for-profit organization, IEEE is the world's largest technical professional organization dedicated to advancing technology for the benefit of humanity. © Copyright 2024 IEEE - All rights reserved. Use of this web site signifies your agreement to the terms and conditions.

Top 5 Ethical Hacking: Real-World Case Studies and Techniques Overview

Explore ethical hacking with real-world case studies, uncover key techniques, strategies, and lessons learned in cybersecurity practices and defense mechanisms.

What is Ethical Hacking?

The importance of ethical hacking in cybersecurity, ethical hacking vs. malicious hacking, ethical responsibilities and legal aspects, skills required for ethical hacking, ethical hacking 1: penetration testing of a corporate network, ethical hacking 2: simulating a social engineering attack, ethical hacking 3: assessing web application vulnerabilities, ethical hacking 4: breaching wireless security, ethical hacking 5: detecting insider threats.

Ethical hacking is crucial in today's cybersecurity world , as it helps organizations identify and fix vulnerabilities before malicious hackers can exploit them. Organizations are expected to spend over $300 billion on cybersecurity by 2024, with a significant portion going to ethical hacking services and penetration testing.

These statistics prove that ethical hacking plays a substantial role in today's cybersecurity landscape. In this article, we explore the world of ethical hacking through real-life examples. Each example discusses individual elements of ethical hacking, from penetration testing to social engineering, as well as ethical hacking tools, approaches, and tactics used by professionals in the field. We will also talk about the lessons learned from these scenarios and how they can be applied to improve security measures.

Whether you are a cybersecurity professional or an enthusiast, this article offers a deep dive into the practical application of ethical hacking that will surely help give you a clear understanding of this practice of using hacker techniques and methods.

Understanding Ethical Hacking

In the following sections, we will introduce you to the concept of ethical hacking, why ethical hacking is a vital cybersecurity practice that helps organizations protect themselves from the ever-growing threat of cyberattacks , the difference between ethical and malicious hacking, the ethical and legal standards, and the necessary skills of ethical hackers that play a crucial role in protecting the digital world.

Ethical hacking , also known as white-hat hacking , involves the authorized use of hacking techniques to identify vulnerabilities in computer systems, networks vulnerabilities, and applications that malicious hackers can exploit. Ethical hackers use the same techniques and ethical hacking tools as their malicious counterparts, but do so with the permission and approval of the organization being audited.

Ethical hacking aims to improve an organization's network security by finding weaknesses, reporting them, and proposing appropriate solutions and remediation measures. Ethical hacking analysis can include various activities, including network penetration testing, application security vulnerability assessment, social engineering simulations, and more. We will talk about these and other types of ethical hacking studies later. For now, let's learn about the importance and benefits of ethical hacking in cybersecurity.

The ideal solution for large-scale projects. Impeccable protection, high performance and flexible settings.

In today’s interconnected digital world, the danger of cyberattacks is constantly growing. Cyberattacks are becoming more targeted and sophisticated, making ethical hacking analyses especially important as they allows organizations to avoid these threats. Ethical hackers help prevent data breaches , financial losses, and reputational damage by identifying and remediating security vulnerabilities before they are exploited. Regular ethical hacking assessments are also essential to maintaining a robust cybersecurity posture, as they ensure that defenses remain effective against new and emerging threats.

Renting our virtual private servers or virtual dedicated servers is a win-win option for creating a robust and secure digital infrastructure for your growing business .

While ethical and malicious hackers (commonly referred to as black-hat hackers) use similar methods, their goals are very different.

Certified ethical hackers operate under strict rules, have explicit permission from the organization, and are carefully monitored and documented to ensure that their actions comply with ethical and legal regulations, which we will discuss in the next section of the article.

Ethical hacking comes with a lot of responsibility. Ethical hackers or white-hat hackers must follow a strict code of conduct to ensure their actions do not cause harm or violate any laws. Ethical responsibilities include:

• Getting explicit permission before conducting any tests.
• Clearly defining the scope of their work.
• Reporting all results to the organization without using them for personal gain.

In addition, ethical hackers must be aware of and comply with the relevant legal frameworks:

• Data protection regulations
• Computer crime laws

Ethical hackers must act within the law because any unauthorized hacking, even with good intentions, can lead to serious legal consequences.

Ethical hacking requires a diverse set of skills, such as:

• Technical knowledge
• Analytical thinking
• Problem-solving skills

Essential skills include a deep understanding of operating systems (OS), networking, and various programming languages and familiarity with penetration testing ethical hacking tools and techniques such as Nmap , Metasploit , and Wireshark . Since cybersecurity constantly changes, true hackers must stay up-to-date with the latest trends and threats. In addition, good communication skills are essential, as honest ethical hackers must clearly explain their findings and advice to technical and non-technical stakeholders.

Scenario Overview

In this study, an ethical hacker was tasked with performing a penetration test on an extensive corporate network.

Objective : To assess the security vulnerability of its internal systems, discover potential vulnerabilities, and ensure compliance with industry standards.

The network consisted of many vital assets, such as servers, databases, and workstations, each of which needed to be tested to ensure that it did not interfere with day-to-day operations.

Ethical Hacking Tools and Techniques Used

Results and Lessons Learned

Using ethical hacking such as penetration testing, the following vulnerabilities were identified, and solutions were quickly provided to fix them.

Conclusion: Conducting regular penetration tests is critical to identifying hidden vulnerabilities, strengthening an organization's technical defenses, and increasing employee awareness.

In this case study, a company hired an ethical hacker to conduct a simulated social engineering attack to determine its employees' susceptibility to psychological manipulation techniques.

Objective : To determine how easy it was to trick employees into revealing sensitive data or taking actions that could jeopardize the organization's security. The test was conducted without prior warning to the staff to ensure adequate responses.

Psychological Manipulation Techniques

The ethical hacker used several social engineering tactics:

Results and Mitigation Strategies

The social engineering attack simulation showed that many employees were vulnerable to social engineering attacks. The results of the social engineering attack simulation and the corresponding mitigation strategies are listed below:

Conclusion : Social engineering attacks exploit human psychology rather than technical vulnerabilities. Therefore, ongoing employee training and awareness are essential to mitigate these threats and ensure that staff are the first line of defense against potential attacks.

In this example, an ethical hacker was hired to perform a vulnerability assessment of a web application used by a financial company. Given the critical nature of the data ( sensitive customer information : personal data and financial transactions) handled by the application, the company wanted to ensure that it was protected from potential cyberattacks.

Objective : Identify and exploit any vulnerabilities in the application and provide recommendations on how to secure it.

Identify and Exploit Common Vulnerabilities

During Ethical Hacking 3, the following automated ethical hacking tools were used to scan the vulnerability of web applications: OWASP ZAP and Burp Suite , several vulnerabilities and their exploitation options were identified:

Securing the Application After the Assessment

After identifying and exploiting these vulnerabilities, the ethical hacker gave the company a detailed report outlining the issues and their potential impact. The report also offered the following recommendations to secure the application:

• Use parameterized queries to prevent SQL injection.
• Validate and sanitize input data to mitigate XSS.
• Implement appropriate access controls to avoid IDOR.

Conclusion : Regular vulnerability assessments of web applications, especially those that handle personal data, are important. Promptly identifying and remediating vulnerabilities is critical to protecting against potential cyber threats and ensuring the network security and integrity of customer data.

In this case study, a large retail company hired an ethical hacker to assess the security of its wireless network after concerns about unauthorized access. The company relied heavily on its wireless network for point of sale (POS) systems and inventory management, making the network a critical component of its day-to-day operations.

Objective : To identify any vulnerabilities in the wireless network that attackers could exploit for network hacking, as well as provide recommendations for securing the wireless network.

Wireless Hacking Techniques

During the wireless security system assessment to discover accessible networks and identify any weaknesses in their configurations, the following ethical hacking tools were used: Kismet and Airodump-ng . The ethical hacker identified the following wireless security breaches:

• The company was using outdated encryption protocols (WEP) for some of its access points, which were easily hacked.
• By sniffing packets from a wireless network, it is possible to successfully crack WEP encryption and gain access to the network, intercepting data, including sensitive information, transmitted between POS systems and company servers.
• Poorly configured access points with weak passwords further undermine network security .

Steps to Secure Wireless Networks

After demonstrating the vulnerabilities, the ethical hacker gave the company a detailed report highlighting the risks associated with outdated encryption protocols and weak access point configurations. To secure the wireless network, the following steps were recommended:

• Upgrade encryption to WPA3: To prevent network traffic from being easily decrypted, r eplace WEP with WPA3 , the latest and most secure wireless encryption standard.
• Harden access point configurations: To minimize attack vectors, reconfigure all wireless access points with strong complex passwords and disable unused access points.
• Implement network segmentation: Segment critical systems such as POS devices into separate VLANs with strict access controls to limit potential damage in the event of a breach.
• Regular security audits: Conduct regular security audits and penetration tests to ensure the network is always secure and compliant with industry standards.

Conclusion : Modern encryption protocols and robust security practices are important for wireless networks. By addressing these vulnerabilities, a company can significantly reduce the risk of unauthorized access and ensure the security of sensitive data transmitted over its wireless infrastructure.

In this case, a financial institution engaged an ethical hacker to address its insider threat issues. The company was experiencing several suspicious activities, including unauthorized access to sensitive customer data and unexplained financial transactions.

Objective : Identify any insider threats or vulnerabilities in the organization’s internal security controls and recommend strategies to effectively monitor and respond to such threats.

Monitoring and Response Strategies

The ethical hacker began by implementing advanced monitoring ethical hacking tools and strategies to detect unusual activity on the network:

Using Security information and event management (SIEM) systems, the hacker set up real-time alerts for unauthorized access attempts, unusual file transfers, and abnormal behavior patterns. The SIEM system was configured to aggregate and analyze logs from multiple sources, including network devices, servers, and user workstations, to provide a comprehensive view of potential threats.

The ethical hacker also thoroughly audited user access controls, identifying instances where employees were accessing sensitive information outside their job descriptions. The audit identified multiple accounts with elevated privileges being misused to access sensitive data. The hacker then implemented strict Role Based Access Control (RBAC) to ensure that employees could only access the information required for their roles.

In response to the identified threats, the ethical hacker recommended implementing User and Entity Behavior Analytics (UEBA) tools to monitor user activity for deviations from normal behavior. This approach allowed the company to proactively detect and respond to potential insider threats.

Lessons Learned and Preventive Measures

The Insider Threat Detection Study highlighted several key points:

• Continuous monitoring and real-time alerting are essential to detect insider threats before they cause significant damage.
• Regular user privilege audits are needed to prevent unauthorized access to sensitive information.
• Implementing strong access controls and behavioral analytics to mitigate insider threats is essential.

As a preventive measure, the company has developed a robust insider threat program:

• Regularly training employees on security best practices and the implications of insider threats
• Instituting periodic audits of access control and monitoring systems to ensure their effectiveness over time.

Conclusion : Access monitoring and control are essential in detecting and preventing insider threats, which can be among the most challenging cybersecurity risks. By implementing these strategies, an organization can significantly reduce the risk of insider threat incidents and strengthen its overall security posture.

Get the most out of your budget with our affordable, efficient VPS solutions. Fast NVMe, 30+ countries, managed and unmanaged VPS.

In conclusion, ethical hacking is vital in today’s cybersecurity world, providing organizations with the tools and expertise needed to protect against increasingly sophisticated cyber threats. As cyber risks continue to evolve, the role of ethical hacking will only become more critical. We hope the real-life examples and case studies of ethical hacking in this article have helped you understand how ethical hackers discover vulnerabilities, strengthen defenses, and improve overall security. By staying up-to-date with the latest techniques and regularly testing your systems, you can better protect your digital assets and maintain a robust defense against potential attacks.

VPS for Ethical Hacking

Choose the suitable configuration and enjoy all the benefits of a virtual private server.

Related articles

Mastering Linux Server Security: Stats, Challenges, and Best Practices

Explore essential Linux server security recommendations to safeguard your system from threats. Enhance your server's...

Software and Security Audit on Server: How and Why

Explore the fundamental stages of a comprehensive server security audit with our detailed checklist. Whether you're an...

Web Fortress: Understanding Importance of Firewall

Get acquainted with firewalls and their role in network security. Discover the main types of firewalls and the...

The latest news, profitable discounts, and informative articles - subscribe to the is*hosting blog and be the first to receive a useful newsletter.

ETHICAL HACKING

Oct 29, 2019

520 likes | 1.74k Views

ETHICAL HACKING. Syed saqib raza Rizvi Lecture 13. OVERVIEW OF HACKING :. HACK : EXAMINE SOMETHING VERY MINUTELY. THE RAPID CRAFTING OF NEW PROGRAM OR THE MAKING OF CHANGES TO EXISTING , USUALLY COMPLICATED SOFTWARE . HACKER : THE PERSON WHO HACKS . CRACKER :

Share Presentation

• ethical hacking
• ethical hacker
• vulnerability analysis
• ethical hacking process
• ethical hacking tiger teams

Presentation Transcript

ETHICAL HACKING Syed saqibrazaRizviLecture 13

OVERVIEW OF HACKING : • HACK : • EXAMINE SOMETHING VERY MINUTELY. • THE RAPID CRAFTING OF NEW PROGRAM OR THE MAKING OF CHANGES TO EXISTING , USUALLY COMPLICATED SOFTWARE . • HACKER : • THE PERSON WHO HACKS . • CRACKER : • SYSTEM INTRUDER OR DESTROYER .

What is ETHICAL HACKING ? • INDEPENDENT COMPUTER SECURITY PROFESSSIONALS BREAKING INTO THE COMPUTER SYSTEM . • NEITHER DAMAGE THE TARGET SYSTEMS NOR STEAL THE INFORMATION. • EVALUATE TARGET SYSTEM SECURITY AND REPORT BACK TO OWNER ABOUT THE VULNERABALITIES FOUND .

TYPES OF HACKERS

DESCRIPTION about the types of hackers : • PROFESSIONAL HACKERS : • BLACK HATS _____ THE BAD GUYS • WHITE HATS _____PROFESSIONAL SECURITY EXPERTS • SCRIPT KIDDIES : • MOSTLY KIDS /STUDENTS : • Use tools created by black hats , - To get free stuff - Impress their peers - Not to get caught

UNEMPLOYED ADULT HACKERS : • FORMER SCRIPT KIDDIES - CAN’T GET EMPLOYMENT IN THE FIELD - WANT RECOGNITION IN HACKER’S COMMUNITY - BIG IN EASTERN EUROPEAN COUNTRIES • IDEOLOGICAL HACKERS : • HACK AS A MECHANISM TO PROMOTE SOME POLITICAL AND IDEOLOGICAL PURPOSE • USUALLY CONCIDE WITH POLITICAL EVENTS .

TYPES OF HACKING

Description :

ETHICAL HACKERS ARE NOT CRIMINAL HACKERS

BUT HOW ????

COMPLETELY TRUSTWORTHY STRONG PROGRAMMING AND COMPUTER NETWORKING SKILLS LEARN ABOUT THE SYSTEM AND TRYING TO FIND ITS WEEKNESSES TECHNIQUES OF CRIMINAL- HACKERS – DETECTION – PREVENTION NO EX- HACKERS PUBLISH RESEARCH PAPERS AND RELEASED SECURITY

DIFFERENCE B/W ETHICALHACKER PERFORM MOST OF THE SAME ACTIVITIES BUT WITH THE OWNER’S PERMISSION AND EMPLOYED BY COMPANIES TO PERFORM PENETRATION TESTS . HACKER • ACCESS COMPUTER SYSTEM OR NETWORK WITHOUT AUTHORIZATION AND BREAKS THE LAW

MODES OF ETHICAL HACKING INSIDER ATTACK OUTSIDER ATTACK STOLEN EQUIPMENT ATTACK PHYSICAL ENTRY SOCIAL ENGINEERING ATTACK

THE ETHICAL HACKING PROCESS

Ethical hackers must follow a strict scientific process in order to obtain useable and legal results • Planning • Reconnaissance • Enumeration • Vulnerability Analysis • Exploitation • Final Analysis • Deliverables

1- PLANNING : • Planning is essential for having a successful project. It provides an opportunity to give critical thought to what needs to be done, allows for goals to be set, and allows for a risk assessment to evaluate how a project should be carried out. • There are a large number of external factors that need to be considered when planning to carry out an ethical hack. These factors include existing security policies , culture, laws and regulations, best practices, and industry requirements. Each of these factors play an integral role in the decision making process when it comes to ethical hacking. The planning phase of an ethical hack will have a profound influence on how the hack is performed and the information shared and collected, and will directly influence the deliverable and integration of the results into the security program. • The planning phase will describe many of the details of a controlled attack. It will attempt to answer questions regarding how the attack is going to be supported and controlled, what the underlying actions that must be performed and who does what, when, where, and for how long

2- Reconnaissance • Reconnaissance  is the search for available information or resources to assist in an attack. This can be as simple as a ping or browsing newsgroups on the Internet in search of disgruntled employees divulging secret information or as messy as digging through the trash to find receipts or letters. • Reconnaissance can include social engineering, tapping phones and networks, or even theft. The search for information is limited only by the extremes at which the organization and ethical hacker are willing to go in order to recover the information they are searching for. • The reconnaissance phase introduces the relationship between the tasks that must be completed and the methods that will need to be used in order to protect the organization's assets and information.

3- Enumeration • Enumeration is also known as network or vulnerability discovery. It is the act of obtaining information that is readily available from the target's system, applications and networks. It is important to note that the enumeration phase is often the point where the line between an ethical hack and a malicious attack can become blurred as it is often easy to go outside of the boundaries outlined in the original attack plan. • In order to construct a picture of an organization's environment, several tools and techniques are available. These tools and techniques include port scanning andNMap . Although it is rather simple to collect information, it is rather difficult to determine the value of the information in the hands of a hacker. • At first glance, enumeration is simple: take the collected data and evaluate it collectively to establish a plan for more reconnaissance or building a matrix for the vulnerability analysis phase. However, the enumeration phase is where the ethical hacker's ability to make logical deductions plays an enormous role

4- Vulnerability Analysis • In order to effectively analyze data, an ethical hacker must employ a logical and pragmatic approach. In the vulnerability analysis phase, the collected information is compared with known vulnerabilities in a practical process. • Information is useful no matter what the source. Any little bit can help in discovering options for exploitation and may possibly lead to discoveries that may not have been found otherwise. Known vulnerabilities, incidents, service packs, updates, and even available hacker tools help in identifying a point of attack. The Internet provides a vast amount of information that can easily be associated with the architecture and strong and weak points of a system

5-Exploitation • A significant amount of time is spent planning and evaluated an ethical hack. Of course, all this planning must eventually lead to some form of attack. The exploitation of a system can be as easy as running a small tool or as intricate as a series of complex steps that must be executed in a particular way in order to gain access. • The exploitation process is broken down into a set of subtasks which can be many steps or a single step in performing the attack. As each step is performed, an evaluation takes place to ensure that the expected outcome is being met. Any divergence from the attack plan is classified into two determinations: Expectations: Are the expectations of the exploitation being met or are the results conflicting with the organization's assumptions? Technical: Is the system reacting in an unexpected manner, which is having an impact on the exploitation and the engagement as a whole?

6- Final Analysis • Although the exploitation phase has a number of checks and validations to ensure success, a final analysis is required to categorize the vulnerabilities of the system in terms of their level of exposure and to assist in the derivation of a mitigation plan. The final analysis phase provides a link between the exploitation phase and the creation of a deliverable. • A comprehensive view of the entire attack must exist in order to construct a bigger picture of the security posture of the environment and express the vulnerabilities in a clear and useful manner. The final analysis is part interpretation and part empirical results

7- Deliverables • Deliverables communicate the results of tests in numerous ways. Some deliverables are short and concise, only providing a list of vulnerabilities and how to fix them, while others are long and detailed, providing a list of vulnerabilities with detailed descriptions regarding how they were found, how to exploit them, the implications of having such a vulnerability and how to remedy the situation. • The deliverable phase is a way for an ethical hacker to convey the results of their tests. Recently, ethical hacking has become so commoditized that if a deliverable does not instill fear into the hearts of executives, it could be considered a failure

ETHICAL HACKING SKILLS AND KNOWLEDGE

Required skills • An ethical hacker is required to possess a vast arrangement of computer skills. It is not feasible for each ethical hacker to be an expert is every field and thus ethical hacking tiger teams whose members have complementing skills are created to provide an organization with a team possessing the complete skill set required of an ethical hacker. • Organizations may have a wide variety of computer systems and it is essential for any ethical hacker to have expertise in operating systems, as well as network hardware platforms. It is also fundamental that an ethical hacker posses a solid foundation of the principles of information security .

Salaries and Trends

A survey done by the International Data Corp (IDC) says that the worldwide demand for information security professionals stands at 60,000 and companies such as Wipro, Infosys, IBM, Airtel and Reliance are always looking for good ethical hackers

In the United Kingdom, the following trends have been seen for demand and salaries of ethical hackers.

Although there are benefits to teaching and employing ethical hacking techniques, there are problems that lead some to question the practice. It is feared that schools may be teaching dangerous skills to students that are unable to make correct decisions on how to use them.

Marcus J. Ranum, a computer security professional has openly objected to the term ethical hacker, saying "There's no such thing as an 'ethical hacker' - that's like saying 'ethical rapist' - it's a contradiction in terms" [9]. A significant part of the controversy surrounding ethical hacking arises from the older definition of hacker and its association with the idea of a computer criminal.However, some organizations do not seem to mind the association and have had a significant increase in careers where CEH and other ethical hacking certifications are preferred or required.

1. Ethical Issues One of the concerns about teaching ethical hacking is that the wrong people may be taught very dangerous skills. Hacking skills were traditionally acquired by many hours of practice or intense tutoring from another hacker. University programs and commercial training classes are now offering a new way for aspiring hackers to learn how to penetrate systems. Teaching students how to attack systems without providing ethical training may be teaching criminals and terrorists how to pursue their illegal activities. Some individuals have compared teaching ethical hacking to undergraduate students to handing them a loaded gun.

2. Legal Liability • Adding ethical hacking to a curriculum raises a variety of legal issues where schools and faculty members may be held responsible for the actions of their students. The use of many hacking tools outside of an isolated test network may be illegal. By allowing unmonitored hacking sessions, the school or faculty member may be allowing a breach of the law or violation of software licensing agreements. • In a case of The United States versus Morris, a judge determined that the Computer Fraud and Misuse Act (18 USC 1030) applies to educational institutions and that an individual is liable for the accidental release of malware. The schools that facilitated the creation of malware would be liable for damages from malware released from their labs.

Forcing Services and Information on Organizations and Society • Sometimes ethical hackers operate without the permission or knowledge of the owners of a system. The rationale given for this is that they are only testing security and do not intend to cause damage or compromise any individual’s privacy. • However, ethical hackers may be able to uncover information about Web sites and applications that the owners of these sites and applications do not want uncovered. The situation is compared to finding a note on your refrigerator informing you that "I was testing the security of back doors in the neighborhood and found yours unlocked. I just looked around. I didn't take anything. You should fix your lock." This situation is what leads to the necessity for a proper test plan and strict guidelines for following it.

FUTURE SCOPE OF ETHICAL HACKING

AS IT IS AN INVOLVING BRANCH ,THE SCOPE OF ENHANCEMENT IN TECHNOLOGY IS IMMENSE . NO ETHICAL HACKER CAN ENSURE THE SYSTEM SECURITY BY USING THE SAME TECHNIQUES REPEATEDLY . HOW WOULD HAVE TO IMPROVE , DEVELOP AND EXPLORE NEW AVENUES REPEATEDLY. MORE ENHANCED SOFTWARE’S SHOULD BE USED FOR OPTIMUM PROTECTION . TOOLS USED, NEED TO BE UPDATED REGULARLY AND MORE EFFICIENT ONES NEED TO BE DEVELOPED

References • Twincling Society Ethical Hacking Seminar2006. Retrieved March 27, 2009. • Krutz, Ronald L. and Vines, Russell Dean. The CEH Prep Guide: The Comprehensive Guide to Certified Ethical Hacking.Published by John Wiley and Sons, 2007. • Palmer, Charles. Ethical HackingPublished in IBM Systems Journal: End-to-End Security, Volume 40, Issue 3, 2001. • Tiller, James S. The ethical hack: a framework for business value penetration testingPublished by CRC Press, 2005. • Beaver, Kevin and McClure, Stuart. Hacking For DummiesPublished by For Dummies, 2006. • Certified Ethical Hacking Seminar2006. Retrieved March 27, 2009. • Certified Ethical Hacking EC-Council2009. Retrieved March 27, 2009. • Certified Ethical Hacking EC-Council2009. Retrieved March 27, 2009. • Ethical Hacking Jobs2009. Retrieved March 27, 2009. • D'Ottavi, Alberto. Interview: Father of the Firewall2003. Retrieved March 27, 2009. • Livermore, Jeffery. What Are Faculty Attitudes Toward Teaching Ethical Hacking and Penetration Testing?Published in Proceedings of the 11th Colloquium for Information Systems Security Education, 2007

• More by User

ETHICAL HACKING...

ETHICAL HACKING. INDEX. Ethical Hacking Terminology. What is Ethical hacking? Who are Ethical hacker? How many types of hackers? White Hats (Ethical hackers) Black Hats (Malicious hackers) Gray Hats (Good or bad hackers) How to Be Ethical ? The Phases of Ethical Hacking . Reconnaissance

1.33k views • 18 slides

ETHICAL HACKING. PRESENTED By :. Sarjerao M engane. CONTENT. INTRODUCTION. METHODOLOGY. REPORTING. HISTORY. CONCLUSION . TYPES OF HACKERS. ETHICAL HACKING. ADVANTAGES AND DISADVANTAGES. HACKING . CONCLUSION. ETHICAL HACKING COMMANDMENTS. REFERENCE.

22.93k views • 19 slides

Ethical Hacking

Wilfridus Bambang ( [email protected]). Ethical Hacking. Overview. Old School Hackers: History of Hacking Ec -Council: Certified Ethical Hacker Learning Competencies Hacking Tools Hacker Challenge Websites Additional Web Sites. Old School Hackers: History of Hacking .

1.18k views • 65 slides

Ethical Hacking: Hacking GMail

Ethical Hacking: Hacking GMail. What do Hackers Do?. Get into computer systems without valid accounts and passwords Take over Web servers Collect passwords from Internet traffic Take over computers with remote access trojans And much, much more. Ethical Hackers.

506 views • 10 slides

Ethical Hacking. License to hack. OVERVIEW. Ethical Hacking ? Why do ethical hackers hack? Ethical Hacking - Process Reporting Keeping It Legal . What is Ethical Hacking ?. It is legal Permission is obtained from the target Identify vulnerabilities visible from Internet

1.88k views • 12 slides

ETHICAL Hacking

ETHICAL Hacking. Eyüp ÇELİK BİLGİ TEKNOLOJİLERİ GÜVENLİK UZMANI. Hacking Evresi. Hacking Evresi. Password Cracking. Active Online Attack. Dictionary Attack. Brute-Force Attack. Keylogger. Donanimsal Keyloggerlar. YAZILIMSAL KEYLOGGERLAR. TROJANLAR. PaSSIVE ONLINE ATTACK. SNIFFING.

788 views • 26 slides

Ethical Hacking. Keith Brooks CIO and Director of Services Vanessa Brooks, Inc. Twitter/Skype: lotusevangelist [email protected]. Adapted from Zephyr Gauray’s slides found here: http://www.slideworld.com/slideshow.aspx/Ethical-Hacking-ppt-2766165

1.74k views • 34 slides

Ethical Hacking. CISS 301 Orientation Summer 2012. Instructor: Buddy Spisak. Office Hours: Monday’s 6:30 -7:40 p.m. in BS-143 (Jun. 11 to Jul. 30, 2012) I am also available through email or you can chat with me using Microsoft’s Windows Messenger (when I am available).

613 views • 29 slides

Ethical Hacking. CISS 301 Orientation Summer 2013. Instructor: Buddy Spisak. Office Hours: Monday 7:30 -8:30 p.m. in BS-143 (Jun. 10 to Jul. 29, 2013) I am also available through email, or you can chat with me using Microsoft ’ s Windows Messenger (when I am available).

520 views • 29 slides

Computer Science Innovations, LLC. Ethical Hacking. Overview. Define Security Discretionary Access Control Trusted Computer System Evaluation Criteria (TCSEC) - Orange Book 1984 by MITRE Corporation Basis for all we do in Security Define Security, how me measure it. Long-term goal.

1.71k views • 133 slides

Ethical Hacking. Pratheeba Murugesan. HACKER. AENDA. What is Ethical Hacking? Who are ethical hackers? Every Website-A Target Get out of jail free card Kinds of Testing Final Report. Ethical Hacking.

701 views • 10 slides

An ethical hacker is a computer and networking expert who systematically attempts to penetrate a computer system or network on behalf of its owners for the purpose of finding security vulnerabilities that a malicious hacker could potentially exploit.

246 views • 8 slides

Ethical Hacking Training- Chandigarh School of Ethical Hacking

http://www.ethicalhackingchandigarh.com/ethical-hacking-courses-in-chandigarh-mohali/ Chandigarh School of Ethical Hacking is 6 Weeks, 6 Months Ethical Hacking, Certified Ethical Hacking, Cyber Security Training provider in Chandigarh

168 views • 1 slides

Be the best ethical Hacker of today's World.Get your self admitted with the best ethical hacking in Delhi that will provide you 100% placement assistance and a popular certificate

322 views • 6 slides

Ethical Hacking Course | Hacking Course

Triad square infosec pvt ltd is one of the india best training IT institute .we have list of software programing training, information security training and consulting and these programs helps the individual their skills & knowledge for better prospects.

111 views • 2 slides

Ethical Hacking: Overview

Ethical Hacking: Overview. Presented By Team Neptune { Eric, Amy, Aung, Sophia, Venus Mae}. Ethical Hacking Principles Managing Incidents Exploring Security Policies Creating Security Policies SANS Web Application Security Policy. Topic Overview. Ethical Hacking Principles.

792 views • 48 slides

Ethical Hacking. AGENDA. What is Ethical Hacking? Who are ethical hackers? Every Website-A Target Get out of jail free card Kinds of Testing Final Report. Ethical Hacking. Independent computer security Professionals breaking into the computer systems.

401 views • 9 slides

270 views • 10 slides

ETHICAL HACKING. Presentation By: FATHIMA SHIMNA S3 ECE ROLL NO: 31. What is Hacking?. Hacking refers to an array of activities which are done to intrude some one else’s personal information space so as to use it for malicious, unwanted purposes.

767 views • 19 slides

Today's security is that the main downside and every one the work is finished over the net mistreatment knowledge. whereas the information is out there, there square measure many varieties of users who act with knowledge and a few of them for his or her would like it all for his or her gaining data. There square measure numerous techniques used for cover of information however the hacker or cracker is a lot of intelligent to hack the security, there square measure 2 classes of hackers theyre completely different from one another on the idea of their arrange. The one who has smart plans square measure referred to as moral hackers as a result of the ethics to use their talent and techniques of hacking to supply security to the organization. this idea describes concerning the hacking, styles of hackers, rules of moral hacking and also the blessings of the moral hacking. Mukesh. M | Dr. S. Vengateshkumar "Ethical Hacking" Published in International Journal of Trend in Scientific Research and Development (ijtsrd), ISSN: 2456-6470, Volume-3 | Issue-6 , October 2019, URL: https://www.ijtsrd.com/papers/ijtsrd29351.pdf Paper URL: https://www.ijtsrd.com/engineering/computer-engineering/29351/ethical-hacking/mukesh-m

466 views • 3 slides

ETHICAL HACKING: AN IMPACT ON SOCIETY

• 7(1):922-931

• Manav Rachna International University

Abstract and Figures

Discover the world's research

• 25+ million members
• 160+ million publication pages
• 2.3+ billion citations

• PERS UBIQUIT COMPUT

• Michał Choraś

• Junaid Arshad
• Muhammad Talha

• Jambi Ratna Raja Kumar
• D. G. Bhalke
• Swati Nikam
• هبة صلاح الدين النموري

• Joseph Dedy Irawan

• Didi Kurnaedi

• Manisha Mathur
• P D Scholar
• Jyoti Prasant Raghav

• Abhijeet Das

• J. Erickson
• Syed A. Saleem
• David Kennedy
• Jim O'gorman
• Devon Kearns
• Mati Aharoni
• Ankit Fadia
• Recruit researchers
• Join for free
• Login Email Tip: Most researchers use their institutional email address as their ResearchGate login Password Forgot password? Keep me logged in Log in or Continue with Google Welcome back! Please log in. Email · Hint Tip: Most researchers use their institutional email address as their ResearchGate login Password Forgot password? Keep me logged in Log in or Continue with Google No account? Sign up