CISSP / CEH // SEC550

Ethical Hacking and Countermeasures (CEH)

Intense, immersive training on hacking, testing and securing your systems.

Course Description

This class will immerse the student into an interactive environment where they will be shown how to scan, test, hack and secure their own systems. The lab intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. Students will begin by understanding how perimeter defenses work and then be lead into scanning and attacking their own networks, no real network is harmed. Students then learn how intruders escalate privileges and what steps can be taken to secure a system. Students will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation. When a student leaves this intensive 5 day class they will have hands on understanding and experience in Ethical Hacking.

Audience

This course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure. Not anyone can be a student, the Accredited Training Centers (ATC) will make sure the applicants work for legitimate companies. Ethical Hacking and Countermeasures course mission is to educate, introduce and demonstrate hacking tools for penetration testing purposes only. Prior to attending this course, you will be asked to sign an agreement stating that you will not use the newly acquired skills for illegal or malicious attacks and you will not use such tools in an attempt to compromise any computer system, and to indemnify EC-Council with respect to the use or misuse of these tools, regardless of intent.

Prerequisites

Please note that this is an advanced security class that assumes familiarity with security concepts and technologies. This fast-paced hands-on class assumes knowledge of authentication, authorization, data and network encryption, and network attacks.

Students should have a strong understanding of computer networking including the TCP/IP Protocol Suite, IP Routing and LAN Switching Concepts, and a strong understanding of the Internet (Access, Services, Traffic Flow).

Students must be familiar with Windows client and server operating systems (XP/2003/2008/7). We also recommend students have basic familiarity with of UNIX/LINUX operating environments as found in the following:

CompTIA Network+ certification, or CCENT Cisco® Certified Entry-level Network Technician

CISSP or SSCP certification (or prior attendance of SEC250)

At least one year hands-on experience in computer security (two years preferred)

What You Will Learn

You will learn how to scan, test, hack and secure systems. Through the use of hand-on labs, students then learn how intruders escalate privileges and what steps can be taken to secure a system. Students will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation.

The Certified Ethical Hacker exam 312-50 may be taken on the last day of the training (optional). Students need to pass the online Prometric exam to receive CEH certification.

Course Outline

  • ​Introduction to Ethical Hacking
  • Footprinting
  • Scanning
  • Enumeration
  • System Hacking
  • Trojans and Backdoors
  • Sniffers
  • Denial of Service
  • Social Engineering
  • Session Hijacking
  • Hacking Web Servers
  • Web Application Vulnerabilities
  • Web-based Password Cracking Techniques
  • SQL Injection
  • Hacking Wireless Networks
  • Virus and Worms
  • Physical Security
  • Linux Hacking
  • Evading IDS, Firewalls, and Honeypots
  • Buffer Overflows
  • Cryptography
  • Penetration Testing
  • Covert Hacking
  • Writing Virus Codes
  • Assembly Language Tutorial
  • Exploit Writing
  • Smashing the Stack for Fun and Profit
  • Windows Based Buffer Overflow Exploit Writing
  • Reverse Engineering