ethical hacking chapt1

Ethical Hacker

A security professional who uses hacking techniques legally and with permission to identify and fix security vulnerabilities.

Penetration Test

A simulated cyberattack to identify and exploit vulnerabilities in a system.

Black Box Model

A penetration testing method where the tester has no prior knowledge of the system being tested.

Certified Ethical Hacker (CEH)

A certification that validates an individual’s knowledge of ethical hacking techniques and security threats.

Certified Information Systems Security Professional (CISSP)

A certification for professionals who develop and manage security policies and procedures.

Crackers

Malicious hackers who break into systems to steal or damage data.

Gray Box Model

A penetration testing approach where the tester has partial knowledge of the system.

Hacker

A person skilled in computer systems who may use their knowledge for ethical or malicious purposes.

Hacktivist

A hacker who attacks systems for political or social activism reasons.

Institute for Security and Open Methodologies (ISECOM)

An organization that develops open security testing methodologies.

Offensive Security Certified Professional (OSCP)

A hands-on ethical hacking certification focused on penetration testing.

Open Source Security Testing Methodology Manual (OSSTMM)

A framework for security testing and assessments.

OSSTMM Professional Security Tester (OPST)

A certification for professionals who use OSSTMM methodologies in security testing.

Packet Monkeys

Hackers who launch pre-scripted attacks without understanding them.

Red Team

A group that acts as adversaries to test an organization's security defenses.

Script Kiddies

Inexperienced hackers who use pre-made tools to attack systems without deep knowledge.

Security Test

A process to evaluate the security of a system or network.

SANS Institute

A cybersecurity training and certification organization.

Vulnerability Assessment

The process of identifying and prioritizing security weaknesses in a system.

White Box Model

A penetration testing method where the tester has full knowledge of the system being tested.