Certified Ethical Hacker - CEH v11

Objectives

• Key issues include plaguing the information security world, ethical hacking, information security controls, laws, and standards
• Perform foot printing and reconnaissance using the latest foot printing techniques and tools as a critical pre-attack phase required in ethical hacking
• Network scanning techniques and scanning counter measures
• Enumeration techniques and enumeration counter measures
• Vulnerability analysis to identify security loopholes in the target organization’s network, communication infrastructure, and end systems
• System hacking methodology, steganography, steganalysis attacks, and covering tracks to discover system and network vulnerabilities
• Different types of malware (Trojan, Virus, worms, etc.), system auditing for malware attacks, malware analysis, and countermeasures
• Packet sniffing techniques to discover network vulnerabilities and countermeasures to defend sniffing
• Social engineering techniques and how to identify theft attacks to audit human level vulnerabilities and suggest social engineering counter measures
• DoS/DDoS attack techniques and tools to audit a target and DoS/DDoS countermeasures
• Session hijacking techniques to discover network-level session management, authentication/authorization, cryptographic weaknesses, and countermeasures
• Web server attacks and a comprehensive attack methodology to audit vulnerabilities in web server infrastructure, and counter measures
• Web application attacks and comprehensive web application hacking methodology to audit vulnerabilities in web applications, and counter measures
• SQL injection attack techniques, injection detection tools to detect SQL injection attempts, and countermeasures
• Wireless encryption, wireless hacking methodology, wireless hacking tools, and Wi-Fi security tools
• Mobile platform attack vector, android vulnerability exploitations, and mobile security guidelines and tools
• Firewall, IDS and honeypot evasion techniques, evasion tools and techniques to audit a network perimeter for weaknesses, and countermeasures
• Cloud computing concepts (Container technology, server less computing), various threats/attacks, and security techniques and tools
• Penetration testing, security audit, vulnerability assessment, and penetration testing roadmap
• Threats to IoT and OT platforms and learn how to defend IoT and OT devices securely
• Cryptography ciphers, Public Key Infrastructure (PKI), cryptography attacks, and cryptanalysis tools.