Ethical Hacking & Countermeasures & Workshop

21-04-2025 - 25-04-2025 4200 Dubai

Course Introduction:

 

This course will immerse the participants into an interactive environment where they will be shown how to scan, test, hack and secure their own systems. The lab intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. Students will begin by understanding how perimeter defenses work and then be lead into scanning and attacking their own networks, no real network is harmed. Participants then learn how intruders escalate privileges and what steps can be taken to secure a system. Students will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation.

 

Course Objectives:

 

 

  • Explain accepted data warehouse terminology
  • Explain the goals of data warehousing
  • Identify the stages of the data warehousing lifecycle
  • Apply the star schema model to a business case problem
  • De-normalize relational tables into high level summary tables
  • Design and Implement a multi-dimensional data cube using SQL Server Analysis Services

 

Who Should Attend?

 

This course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.

                    

Course Outline:

                                                                                                                                                                                     

Introduction to Ethical Hacking
Internet is Integral Part of Business and Personal Life - What Happens Online in 60 Seconds

 Information Security Overview

  • Year of the Mega Breach
  • Data Breach Statistics
  • Malware Trends in 2014
  • Essential Terminology
  • Elements of Information Security
  • The Security, Functionality, and Usability Triangle

 

Information Security Threats and Attack Vectors

  • Motives, Goals, and Objectives of Information Security Attacks
  • Top Information Security Attack Vectors
  • Information Security Threat Categories
  • Types of Attacks on a System
    • Operating System Attacks
    • Examples of OS Vulnerabilities
    • Misconfiguration Attacks
    • Application-Level Attacks
    • Examples of Application-Level Attacks
    • Shrink Wrap Code Attacks
    • Information Warfare

 

Hacking Concepts, Types, and Phases

  • What is Hacking
  • Who is a Hacker?
  • Hacker Classes
  • Hacking Phases
    • Reconnaissance
    • Scanning
    • Gaining Access
    • Maintaining Access
    • Clearing Tracks

 

Ethical Hacking Concepts and Scope

  • What is Ethical Hacking?
  • Why Ethical Hacking is Necessary
  • Scope and Limitations of Ethical Hacking
  • Skills of an Ethical Hacker

 

Information Security Controls

  • Information Assurance (IA)
  • Information Security Management Program
  • Threat Modeling
  • Enterprise Information Security Architecture (EISA)
  • Network Security Zoning
  • Defense in Depth
  • Information Security Policies

 

Types of Security Policies

  • Examples of Security Policies
  • Privacy Policies at Workplace
  • Steps to Create and Implement Security Policies
  • HR/Legal Implications of Security Policy Enforcement

 

Physical Security

  • Physical Security Controls

Incident Management

  • Incident Management Process
  • Responsibilities of an Incident Response Team

 

What is Vulnerability Assessment?

  •   Types of  Vulnerability Assessment
  •   Network Vulnerability Assessment Methodology
  •   Vulnerability Research
  •   Vulnerability Research Websites

 

Penetration Testing

  • Why Penetration Testing
  • Comparing Security Audit, Vulnerability Assessment, and Penetration Testing
  • Blue Teaming/Red Teaming
  • Types of Penetration Testing
  • Phases of Penetration Testing
  • Security Testing Methodology
  • Penetration Testing Methodology

 

Information Security Laws and Standards

  • Payment Card Industry Data Security Standard (PCI-DSS)
  • ISO/IEC 27001:2013
  • Health Insurance Portability and Accountability Act (HIPAA)
  • Sarbanes Oxley Act (SOX)
  • The Digital Millennium Copyright Act (DMCA) and Federal Information Security Management Act (FISMA)
  • Cyber Law in Different Countries

 

 

Course Methodology:

 

A variety of methodologies will be used during the course that includes:

  • (30%) Based on Case Studies
  • (30%) Techniques 
  • (30%) Role Play
  • (10%) Concepts
  • Pre-test and Post-test
  • Variety of Learning Methods
  • Lectures
  • Case Studies and Self Questionaires
  • Group Work
  • Discussion
  • Presentation

 

Course Fees:

 

To be advice as per course location. This rate includes participant’s manual, Hands-Outs, buffet lunch, coffee/tea on arrival, morning & afternoon of each day.

 

Course Certificate:

 

International Center for Training & Development (ICTD) will award an internationally recognized certificate(s) for each delegate on completion of training.

 

Course Timings:

 

Daily Course Timings:

    08:00 - 08:20       Morning Coffee / Tea

    08:20 - 10:00       First Session

    10:00 - 10:20       Coffee / Tea / Snacks

    10:20 - 12:20       Second Session

    12:20 - 13:30       Lunch Break & Prayer Break

    13:30 - 15:00       Last Session

 

Courses By Category
2024
English Training Plan
2024
Arabic Training Plan
Approved Provider

Global Innovation Institute…

ICXI Assessment

Abu Dhabi Centre for…

EFQM

International Accreditation…

Our Clients
Chat on WhatsApp