This subject introduces students to ethical hacking, focusing on legal hacking practices performed with the organization’s permission to enhance network security. It explores how attackers target networks, the tools they use, and how ethical hackers can apply similar techniques. The emphasis is on understanding the reality of data loss and securing data against various types of attacks.

Knowledge Core Competency Objectives:

1. List the fundamentals of ethical hacking.
2. Describe ways data can be stored and how cryptography can be defeated.
3. List the different stages of an attack.
4. Summarize how to set up an environment for identifying insecurities and data leakages.
5. State the concepts of extensions to bypass security controls and perform injection attacks.
6. List different attacks specific to cross-platform apps.
7. List varieties of malware and how each can be created, used, or defended against.
8. Explain how to target, analyze, and work with mobile devices.
9. Summarize the process of integrating secure cloud technologies.

Skill Core Competency Objectives:

1. Analyze the stages an ethical hacker requires to compromise a target system.
2. Utilize tools and techniques for penetration testing.
3. Critically evaluate security techniques used to protect system and user data.
4. Demonstrate systematic understanding of security concepts at the policy and strategy levels in a computer system.
5. Apply stages to prevent a cyber attack.
6. Perform basic reconnaissance exercises.
7. Scan and enumerate a network and a computer system.
8. Utilize various types of malware and cyber attack vectors and players.
9. Execute basic attacks against network and computer systems.
10. Perform various methods for evading security controls.
11. Perform vulnerability and pen testing assessments and exercises.

Upon completing this subject, students are expected to possess both knowledge and practical skills to secure vulnerabilities, understand attack techniques, and defend applications, contributing to the enhancement of cybersecurity measures within an organization.