CEHv6 Resource Guide.indd - Algebra

Page 178
1. Introduction to Ethical Hacking
Module Brief:
http://www.eccouncil.org
Module Briefi ng
This module offers to professionals an understanding of the subject “Ethical Hacking”. It is important to bear in
mind that hackers break into a system for various reasons and purposes. Therefore, it is important to comprehend
how malicious hackers exploit systems and the probable reasons behind the attacks.
As Sun Tzu put it in the ‘Art of War’, “If you know yourself but not the enemy, for every victory gained, you
will also suffer a defeat.” It is the duty of system administrators and network security professionals to guard
their infrastructure against exploits by knowing the enemy (the malicious hacker(s), who seek to use that very
infrastructure for illegal activities).
2. Hacking Laws
Module Brief:
This module discusses various Cyber Laws that are enforced in countries around the globe. SPY ACT, U.S. Federal
Laws, United Kingdom’s Cyber Laws, European Laws, Japan’s Cyber Laws, Australia Cybercrime Act 2001, and
Indian Law: The Information Technology Act, Germany’s Cyber Laws, Singapore’s Cyber Laws, Belgium Law,
Brazilian Law, Canadian Laws, France Laws and Italian Laws are discussed.
3. Footprinting
Module Brief:
Note that there is no ‘one way’ for hackers to approach a system. The intent behind their activities cannot be
foreknown and all activity must be treated as a threat. Note that the focus of this course is not to teach the fi ner
aspects of hacking, rather to emphasize on the vulnerability – threat – attack methods – tools – countermeasures
threads of discussion.
Therefore, the focus is not on the diverse details of ‘how to’ hack, rather the discussion is focused on where one
must look for vulnerabilities, what threat the vulnerability poses, what are the ways in which a cracker can exploit
the vulnerability, and what countermeasures should be advocated in the light of the threat. The objective of using
tools is to save on time and resources, and defend resources in a proactive and effi cient manner. It is assumed that
readers possess good programming skills and are familiar with various technical environments. There are several
tools available to the hacker and may range from simple code compilation software to source code text fi les available
on the Internet.
EC-Council