Skip to main content

Introduction to Ethical Hacking

Introduction to Ethical Hacking


Who do Ethical Hacking? :

  1. Ethical Hacker 
    • Hacker who are employed by their company to perform penetration test
  2. Penetration Tester (PenTester)
    • Penetration Tester are someone who is hired to perform penetration test
    • They are hired, but they are not the staff of the company like Ethical Hacker
    • Only report their findings (vulnerabilities)
  3. Security Tester
    • Like Penetration Tester, but they analyze the company security
    • Also provide solution


Some term for hacker role:

  1. Hackers
    • someone who constantly find security flaw and use it
    • Usually, someone who access the system or network without authorization
  2. Crackers
    • Like hacker, they also find security flaw and use it
    • but, they use it break into the system to steal or damage the data in it
    • U.S. Department of Justice calls both hacker
  3. Ethical Hackers
    • Perform the same activities but, with the owner's permission
  4. Script kiddies or packet monkey
    • Young inexperience hacker
    • they use other more expert hacker code


Skill needed to be a good Ethical Hacker:

  1. Be a computer System Expert who have a good programming and computer networking skill.
  2. Must have the Hacker mindset
  3. Know various hacking technique such as Footprinting, Sniffing, Trojan attack, ect
  4. Know the legal rules for hacking activity

Term usually used in ethical hacking:

  1. Blue team and Red Team
    • Blue Team
      • The internal team who defend the system from the attacker
      • Goal: to think about how the attack will come and prepare for it
    • Red Team
      • The Team or people who perform the penetration without the knowledge and consent of the IT staff
      • Basically, the one who do the hacking
      • Goal: to find vulnerabilities and hack the system
  2. Black hat, white hat, gray hat
    • Black hat
      • hacker who use their skill for bad things
    • White hat
      • good hacker, can also be called Ethical hacker
    • Gray hat
      • the one in the middle of both, he/she could be white and black but not all the time.
      • they can also do pen-test without the knowledge of the target party, but they might not mean to do bad things with it. (usually they report it for some money

Comments

Post a Comment