Wednesday, April 30, 2008

Why should you be concerned?

Does this sound familiar?
“We have a good firewall, an anti-virus and know the people we work with.”
A good firewall can be mis-configured and turn out to be the best thing a hacker can use against you.
The anti-virus may not be updated and your system can be compromised.
The mail from your friend can turn your machine into a zombie for further attacks.
You could be held responsible for the attack by the law enforcement agencies!

“Our employees are so well connected that we work in real-time.”
Ever heard of spoofing? Information can be stolen in real-time and sold even before you can blink and click?
How sure can you be that the access point you have logged onto is not a rogue access point?
Are you really sure that you have not let a hacker take advantage of your lack of awareness and compromised your network?

“I just browse and check my mail… I don’t see why or how I can be hacked.”
You can be hacked while simply browsing – you don’t have to click or open anything!
A poll of more than 150 CIOs by IDG's CIO Magazine found that 64 percent of senior technology executives are worried about hackers stealing their e-mail and personal identity.
Identity theft can even drive you bankrupt!

Is your security skills or talent pool on the cutting edge of security practices?
A recent study identified the following as probable reasons behind a hack attack. Predominantly, the cause seemed to be personnel related:
High turnover of administrators and technical staff in the IT departments
Gap in position
Lack of proper training
Poor direction


What can you do about it?
Empower your personnel with knowledge and techniques that can be shared and implemented.
Educate yourself and your personnel.
Empower with knowledge
Enforce practices that build on this knowledge base
Excel in your e-business

Why certify? Won’t experience suffice?
Experience and knowledge are important, but one must have the ability to apply the knowledge and call upon the experiences.
Certification helps establish a common baseline. It expresses a generally accepted and recognized level of understanding of the topic.
It is a fact that top industry leaders are looking for a methodology to obtain appropriately skilled practitioners.

What CEH offers…
CEH is about ‘hacking technology’.
It details the diverse ways hackers use technology to circumvent applications or exploit vulnerabilities to gain access to valuable information.
CEH is about mapping risk assessment to business value .
CEH is not just tools and techniques. It also outlines how the assessor can project the cost of retaining a security risk.

CEH version 5 offers in-depth knowledge across 22 domains and over 1000 tools.
CEH provides the most exhaustive, in-depth knowledge across 22 domains that will definitely find a place in an organization. Each domain details several tools that a hacker can use and the countermeasures you can take against their use.

CEH uniquely balances theoretic knowledge with real world application.
“Why hacker tools?” – because you need to:
think like a hacker,
penetrate through the mind of a hacker and
work like a hacker,
if you want to test the impregnability of your network.

What makes CEH different?
We believe it is never too early to learn defensive measures to protect your information assets.
It doesn’t take a hack to motivate you to learn.
“To subjugate the enemy's army without doing battle is the highest of excellence.” – Sun Tzu
We believe in a dynamic methodology that adapts with the complexity of the real world.
Defining the Objective (the “what”)
Competitive Intelligence Gathering (the “where”)
Formulating the attack strategy (the “how”)
Evaluating the target (the “who”)
Compromising the target (the “when”)
Analyzing the results (the “why”)
We believe that security is of paramount importance and anything that compromises business value needs to be addressed.
It doesn’t matter if a script kiddy hacks into your network, but if it leaves a gaping hole for more malicious hackers, you are in serious trouble.
We do not look at security from merely a diagnostic perspective, but from a remedial one.

CEH does not just present hacking technology, detail exploits and traverse domains.
It also advocates best practices and remedial measures that can be shared and implemented.
“Nobody ever learnt swimming by reading a book and not getting wet."

"ANYONE WHO HAS NEVER MADE A MISTAKE HAS NEVER TRIED ANYTHING NEW."
-ALBERT EINSTEIN

No comments: