Certified Ethical Hacker
Encyclopedia
The Certified Ethical Hacker (C|EH) is a professional certification
provided by the International Council of E-Commerce Consultants (EC-Council.)
An Ethical Hacker
is one name given to a Penetration Tester. An ethical hacker is usually employed by an organization who trusts him or her to attempt to penetrate networks and/or computer systems, using the same methods as a hacker
, for the purpose of finding and fixing computer security vulnerabilities. Unauthorized hacking (i.e., gaining access to computer systems without prior authorization from the owner) is a crime in most countries, but penetration testing done by request of the owner of the targeted system(s) or network(s) is not.
A Certified Ethical Hacker has obtained a certification in how to look for the weaknesses and vulnerabilities in target systems and uses the same knowledge and tools as a hacker.
The exam code for C|EH is 312-50. The certification is in Version 7.1 as of 14 June 2011.
The EC-Council offers another certification, known as Certified Network Defense Architect (C|NDA). This certification is designed for United States Government Agencies, and is available only to members of selected agencies. Other than the name, the content of the course is exactly the same. The exam code for C|NDA is 312-99.
To get a more detailed understanding of this process, see the Ethical Hack page.
in the US, and universities in Asia, and Europe include EC Council's C|EH program as part of their course modules.
(prices in other countries may differ), and is administered via computer at an EC-Council Accredited Training Center, Pearson VUE
, or Prometric
testing center (in the United States
).
, have objected to the term ethical hacker: "There's no such thing as an 'ethical hacker' - that's like saying 'ethical rapist' - it's a contradiction in terms." Part of the controversy may arise from the older, less stigmatized, definition of hacker
, which has since become synonymous with computer criminal.
On the other hand, some companies do not seem to mind the association. According to EC-Council, there has been an increase of careers where C|EH and other ethical hacking certifications are preferred or required. Even the US government accepts this association and requires C|EH accreditation for some jobs per 8570 guidelines.
Professional certification
Professional certification, trade certification, or professional designation, often called simply certification or qualification, is a designation earned by a person to assure qualification to perform a job or task...
provided by the International Council of E-Commerce Consultants (EC-Council.)
An Ethical Hacker
White hat
The term "white hat" in Internet slang refers to an ethical hacker, or a computer security expert, who specializes in penetration testing and in other testing methodologies to ensure the security of an organization's information systems...
is one name given to a Penetration Tester. An ethical hacker is usually employed by an organization who trusts him or her to attempt to penetrate networks and/or computer systems, using the same methods as a hacker
Hacker (computer security)
In computer security and everyday language, a hacker is someone who breaks into computers and computer networks. Hackers may be motivated by a multitude of reasons, including profit, protest, or because of the challenge...
, for the purpose of finding and fixing computer security vulnerabilities. Unauthorized hacking (i.e., gaining access to computer systems without prior authorization from the owner) is a crime in most countries, but penetration testing done by request of the owner of the targeted system(s) or network(s) is not.
A Certified Ethical Hacker has obtained a certification in how to look for the weaknesses and vulnerabilities in target systems and uses the same knowledge and tools as a hacker.
The exam code for C|EH is 312-50. The certification is in Version 7.1 as of 14 June 2011.
The EC-Council offers another certification, known as Certified Network Defense Architect (C|NDA). This certification is designed for United States Government Agencies, and is available only to members of selected agencies. Other than the name, the content of the course is exactly the same. The exam code for C|NDA is 312-99.
To get a more detailed understanding of this process, see the Ethical Hack page.
Certification coursework
The coursework of version 7 contains 19 modules, which consists of instructor-led training and self-study. Some training centers, Western Governors UniversityWestern Governors University
Western Governors University is a private, nonprofit, American online university with nearly 30,000 students across the United States and in military bases overseas, as of December 2011. It is a competency-based university...
in the US, and universities in Asia, and Europe include EC Council's C|EH program as part of their course modules.
Examination
Certification is achieved by taking the CEH examination after having either attended training at an ATC (Accredited Training Center) or done self-study. If a candidate opts for self-study, an application must be filled out and proof submitted of 2 years of relevant information security work experience. In case you do not have two years of information security related work experience, you can send them a request detailing your educational background and request for consideration on a case basis. The current version of the C|EH is V6 uses EC-Council's exam 312-50, as did v5. Although the new version V7 has recently been launched. This exam has 150 multiple-choice questions, a 4 hour time limit, and requires at least a score of 70% to pass. The earlier v4 had 125 multiple-choice questions and a three hour time limit. The version 7 exam costs US$500 and the version 6 exam costs $250 (both with an additional $100 eligibility fee) in the United StatesUnited States
The United States of America is a federal constitutional republic comprising fifty states and a federal district...
(prices in other countries may differ), and is administered via computer at an EC-Council Accredited Training Center, Pearson VUE
Pearson VUE
Pearson VUE is an electronic testing company owned by British media company Pearson PLC. Founded in 1994 by E. Clarke Porter as Virtual University Enterprises, the company now operates in 165 countries with more than 5,000 authorized test centres ....
, or Prometric
Prometric
Prometric is a U.S. company in the test administration industry. Prometric operates a test center network composed of over 10,000 sites in 160 countries...
testing center (in the United States
United States
The United States of America is a federal constitutional republic comprising fifty states and a federal district...
).
Recertification
EC-Council Continuing Education (ECE) points serve to ensure that all certified professionals maintain and further their knowledge. Professionals must meet ECE requirements to avoid revocation of certification. Members holding the C|EH/C|NDA designation (as well as other EC-Council certifications) must recertify under this program every three years for a minimum of 120 credits (40 credits per year).Controversy
Certain computer security professionals, such as Marcus J. RanumMarcus J. Ranum
Marcus J. Ranum is a computer and network security researcher and industry leader. He is credited with a number of innovations in firewalls, including building the first Internet email server for the whitehouse.gov domain, and intrusion detection systems...
, have objected to the term ethical hacker: "There's no such thing as an 'ethical hacker' - that's like saying 'ethical rapist' - it's a contradiction in terms." Part of the controversy may arise from the older, less stigmatized, definition of hacker
Hacker (computer security)
In computer security and everyday language, a hacker is someone who breaks into computers and computer networks. Hackers may be motivated by a multitude of reasons, including profit, protest, or because of the challenge...
, which has since become synonymous with computer criminal.
On the other hand, some companies do not seem to mind the association. According to EC-Council, there has been an increase of careers where C|EH and other ethical hacking certifications are preferred or required. Even the US government accepts this association and requires C|EH accreditation for some jobs per 8570 guidelines.
Further reading
- Graves, Kimberly; CEH Certified Ethical Hacker Study Guide, Wiley, John & Sons, Incorporated, 2010. ISBN 978-0470525203
- Graves, Kimberly; Official Certified Ethical Hacker Review Guide, Sybex Publishing, 2006. ISBN 978-0782144376
- Gregg, Michael; Certified Ethical Hacker Exam Prep, Que Publishing, 2006. ISBN 978-0789735317