Course Outline

Note: EC-Council's fundamental courses are conducted by selected academic partners such as colleges and universities around the world.

Module 1: Information Security Fundamentals

• Information Security: Objective
• Why Security ?
• The Security, Functionality and Ease of Use Triangle
• Elements of Security
• Can Hacking Be Ethical?
• Trends in Security
• 20-Year Trend: Stronger Attack Tools
• Essential Terminology
• Statistics Related to Security
• Case Study
• Information Security Laws & Regulations

Module 2: Addressing Threats

• What is a Threat?
• Current Scenario
• Knowing Terms Vulnerability, Exploit
• Top Vulnerabilities in Windows
• Sniffing
• External  Threat
• Types of External Threats
• Social Engineering
• Denial of Service Attack
• Virus
• Worms
• Trojans
• Organizational Threat
• Accidental Security Breach
• Automated Computer Attack
• General Prevention

Module 3: Backdoors, virus and worms

• Introduction
• Terminologies
• What is a Trojan?
• Working of Trojans
• Overt and Covert channels
• Difference Between Virus and Worm
• Virus History
• Life Cycle of Virus
• Access Methods of a Virus
• Indications of a Virus attack.
• Underground Writers
• Prevention is Better than Cure
• Anti-Virus Software
• Popular Anti-Virus Packages
• New Virus

 Module 4: Introduction to Linux Operating System

• Why Linux?
• Linux Basics
• Compiling Programs in Linux
• Linux Security
• Why Do Hackers Use Linux?
• Why is Linux Hacked?
• Linux Vulnerabilities in 2003
• How to Apply Patches to Vulnerable Programs
• Linux Rootkits
• Famous Linux Root Kits
• Rootkit: T0rn
• Rootkit : ramen
• Rootkit :Adore
• Rootkit Countermeasures
• Preventing Rootkits

 Module 5 : Password Cracking

• Authentication - Definition
• Microsoft Passport Authentication
• What is A Password Cracker?
• Modus Operandi of an attacker using password cracker
• How Does A Password Cracker Work?
• Attacks - Classification
• Password guessing
• Dictionary Maker
• LOphtcrack
• John The Ripper
• Brutus
• Passwords: Dos
• Passwords Don’ts
• Password Generators

Module 6: Cryptography

• Basics of Cryptography
• Public-key Cryptography
• Working of Encryption
• Digital Signature
• What is SSH?
• RSA (Rivest Shamir Adleman)
• RSA Attacks
• RSA Challenge
• MD5
• SHA (Secure Hash Algorithm)
• Code Breaking: Methodologies
• Disk Encryption
• Role of Cryptography in Data Security

Module 7 : Web Servers and web applications

• Web Servers
• How Web Servers Work?
• How are Web Servers Compromised?
• IIS Components
• Popular Web Servers and Common Security Threats
• Apache Vulnerability
• Attacks against IIS
• Increasing Web server Security
• Web Application Set Up
• Web Application Threats

 Module 8: Wireless Networks

• Introduction to Wireless Networking
• Business and Wireless Attacks
• Basics
• Components of a Wireless Network
• Types of Wireless Network
• Setting up WLAN
• Detecting a Wireless Network
• How to Access a WLAN
• Advantages and Disadvantages of Wireless Network
• Antennas
• SSIDs
• Access Point Positioning
• Rogue Access Points
• Tools to Detect Rogue Access Points: Netstumbler

Module 9 : Intrusion Detection System

• Intrusion Detection Systems(IDS)
• Types of Intrusion Detection System.
• Ways to Detect an Intrusion
• System Integrity Verifiers (SIV)
• Intrusion Detection Tools.
• Snort 2.1.0
• LogIDS 1.0
• IDS Software Vendors

Module 10 : Firewalls and Honey Pots.

• Introduction
• Terminology
• What is a Firewall?
• Firewall Identification
• Firewalking
• Banner Grabbing
• Placing Backdoors through Firewalls
• Common Tool for Testing Firewall and IDS
• What is an Honeypot?
• The Honeynet  Project
• Types of Honeypots       
• Advantages  and Disadvantages of an Honeypot.              
• Where to Place Honeypot?
• Honeypots:
• Honeypot-KFSensor
• Honeypot-Specter
• What to Do When Hacked?

Module 11: Hacking Cycle

• Problem Definition -Impact of Security Breach
• Information Security: Objective
• The Security, Functionality and Ease of Use Triangle
• Trends in Security
• 20-Year Trend: Stronger Attack Tools
• Elements of Security
• Precepts of Security
• What Does a Malicious Hacker Do?
• Phase 1 - Reconnaissance
• Phase 2 - Scanning
• Phase 3 - Gaining Access
• Phase 4 - Maintaining Access
• Phase 5 - Covering Tracks
• Computer Crimes and Implications
• Legal Perspective (US Federal Law)

Module 12: Introduction to Ethical Hacking

• Hacker Classes
• Hacking Terminology
• Hacktivism
• Can Hacking Be Ethical?
• What do Ethical Hackers do?
• Skill Profile of an Ethical Hacker
• How do they go about it?
• Penetration Testing vis-à-vis Ethical Hacking
• Modes of Ethical Hacking
• Security Testing
• General Prevention
• Computer Crimes and Security Survey