Certified Ethical Hacker

Objectives :	The CEH Program certifies individuals in the specific network security discipline of Ethical Hacking from a vendor-neutral perspective. A Certified Ethical Hacker is a skilled professional who understands and knows how to look for the weaknesses and vulnerabilities in target systems and uses the same knowledge and tools as a malicious hacker.   The Certified Ethical Hacker certification will fortify the application knowledge of security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.
Prerequisites:	A Certified Ethical Hacker candidate should have at least two years of information technology security experience, a strong working knowledge of TCP/IP, and a basic familiarity with Linux.
Benefits:	This class will immerse the student into an interactive environment where they will be shown how to scan, test, and secure their own systems. The lab-intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. Students will begin by understanding how perimeter defences work and then be led into scanning and attacking their own networks. Students then learn how intruders escalate privileges and what steps can be taken to secure a system. Students will also learn about intrusion detection, policy creation, social engineering, open source intelligence, incident handling, and log interpretation.
Duration:	Five Days
Additional Information	The CEH Program certifies individuals in the specific network security discipline of Ethical Hacking from a vendor-neutral perspective. The Certified Ethical Hacker certification will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.

Introduction to Ethical Hacking
Explaining the Certification	Introducing Security
Introducing Hacking
Foot printing
Defining Foot printing	Information Gathering Methodology
Locate the Network Range	Hacking Tools
Scanning
Definition of Scanning	Types of scanning
Objectives of Scanning	Scanning Methodology
Classification of Scanning	Hacking Tools
Countermeasures	Scanning
Enumeration
What is Enumeration?	NetBios Null Sessions
Hacking Tools	Enumerating User Accounts
Active Directory Enumeration and Countermeasures
System Hacking
Administrator Password Guessing	Manual Password Cracking Algorithm
Automated Password Cracking	Password Types
Types of Password Attacks	Hacking Tools
Trojans and Backdoors
Effect on Business	What is a Trojan?
Overt and Covert Channels	Indications of a Trojan Attack
Reverse Engineering Trojans	Backdoor Countermeasures
Sniffers
Definition of sniffing	How a Sniffer works?
Passive Sniffing	Active Sniffing
Hacking Tools	Sniffing Countermeasures
Denial of Service
What is Denial of Service?	Goal of DoS(Denial of Service)
Impact and Modes of Attack	DoS Attack Classification
Hacking Tools	Countermeasures for Reflected DoS
Tools for Detecting DDOS Attacks
Social Engineering
What is Social Engineering?	Art of Manipulation
Human Weakness	Common Types of Social Engineering
Human Based Impersonation

Session Hijacking
Understanding Session Hijacking	Spoofing vs Hijacking
Steps in Session Hijacking	Types of Session Hijacking
Hacking Tools	Protection against Session Hijacking
Countermeasures: IP Security
Hacking Web Servers
Popular Web Servers and Common Security Threats	Apache Vulnerability
Attack against IIS Console	Hacking Tools
Countermeasures	Increasing Web Server Security
Web Application Vulnerabilities
Web Application Hacking	Anatomy of an Attack
Web Application Threats	Carnivore
Google Hacking	Countermeasures
Web Based Password Cracking Techniques
Authentication- Definition	Authentication Mechanisms
Password Guessing	Query String
Cookies	Password Crackers Available
Hacking Tools	Countermeasures
SQL Injection
Attacking SQL Servers	SQL Server Resolution Service (SSRS)
Osql-L Probing	Port Scanning
SQL Server Talks	Preventive Measures
Hacking Wireless Networks
Wireless Basics	Components of Wireless Network
Access Point Positioning	Rogue Access Points
Tools to Generate Rogue Access Points	Scanning Tools
Sniffing Tools	Securing Wireless Networks
Worms and Viruses
Virus Characteristics	Symptoms of ‘virus-like’ attack
Indications of a Virus Attack	Virus / Worms found in the wild
Virus writing tools	Virus Checkers
Virus Analyzers
Physical Security
Understanding Physical Security	Factors Affecting Physical Security
Wiretapping	Lock Picking Techniques
Spying Technologies

Linux Hacking
Linux Basics	Linux Vulnerabilities
Scanning Networks	Scanning Tools
Linux Security Tools	Advanced Intrusion Detection System
Linux Security Auditing Tool	Linux Security Countermeasures
Evading Firewalls, IDS and Honeypots
Intrusion Detection Systems	Ways to Detect Intrusion
Types of Intrusion Detection System	Intrusion Detection Tools
Honeypot Project	Tools to Detect Honeypot
Buffer Overflows
Buffer Overflows	How a Buffer Overflow Occurs
Shellcode	NOPS
Countermeasures
Cryptography
Public-key Cryptography	Working of Encryption
Digital Signature	Digital Certificate
RSA (Rivest Shamir Adleman)	RSA Attacks
Penetration Testing
Penetration Test vs. Vulnerability Test	Reliance on Checklists and Templates
Phases of Penetration Testing	Risk Analysis
Types of Penetration Testing	Types of Ethical Hacking
SANS Institute Top 20 Security Vulnerabilities	Penetration Testing Deliverable Templates
Active Reconnaissance

email on info@sensetraining.co.uk

or call 0870 4296445 ...

and speak to one of our Training advisors for more detailed information.