As IT Security Managers, we manage corporate IT Security through Penetration Testing, Vulnerability Assessments and Cyber Threat Monitoring in South Africa.
Definition of an Ethical Hacker
Ethical Hackers, also known as penetration testing, intrusion testing, or red teaming, is the controversial act of providing Security by locating weaknesses and vulnerabilities of computer and information systems and network & information security by duplicating the intent and actions of malicious hackers.
Ethical Hackers, also known as a whitehat hacker, or simply a whitehat, is a it security professional who applies their hacking skills for defensive purposes on behalf of the owners of information systems.
Ethical hacking refers to the act of locating weaknesses and vulnerabilities of computer and information systems and cyber security by duplicating the intent and actions of malicious hackers. Ethical hacking is also known as penetration testing, intrusion testing, pentest or red teaming. Ethical hackers are security professionals who applies their hacking skills for defensive purposes on behalf of the owners of information systems. By conducting penetration tests, an ethical hacker looks to answer the following four basic questions:
- What information/locations/systems can an attacker gain access?
- What can an attacker see on the target?
- What can an attacker do with available information?
- Does anyone at the target system notice the attempts?
Ethical hackers operate with the knowledge and permission of the organization for which they are trying to defend. In some cases, the organization will neglect to inform their security team of the activities that will be carried out by an ethical hacker in an attempt to test the effectiveness of the information security team. This is referred to as a double-blind environment. In order to operate effectively and legally, an ethical hacker must be informed of the assets that should be protected, potential threat sources, and the extent to which the organization will support an ethical hacker's efforts.
WikiPedia
