About the Program

Certified Network Defender (CND) is a vendor-neutral, hands-on, instructor-led comprehensive network security certification training program. It is a skills-based, lab intensive program based on a job-task analysis and cybersecurity education framework presented by the National Initiative of Cybersecurity Education (NICE). The course has also been mapped to global job roles and responsibilities and the Department of Defense (DoD) job roles for system/network administrators. The course is designed and developed after extensive market research and surveys.

The program prepares network administrators on network security technologies and operations to attain Defense-in-Depth network security preparedness. It covers the protect, detect and respond approach to network security. The course contains hands-on labs, based on major network security tools and techniques which will provide network administrators real world expertise on current network security technologies and operations. The study-kit provides you with over 10 GB of network security best practices, assessments and protection tools. The kit also contains templates for various network policies and a large number of white papers for additional learning.

About the Exam

• Exam title: CND
• Exam code: 312-38
• Number of questions: 100
• Duration: 4 Hours
• Availability: ECC Exam
• Test Format: Interactive Multiple Choice Questions

Passing Score

In order to maintain the high integrity of our certifications exams, EC-Council Exams are provided in multiple forms (I.e. different question banks). Each form is carefully analyzed through beta testing with an appropriate sample group under the purview of a committee of subject matter experts that ensure that each of our exams not only has academic rigor but also has “real world” applicability. We also have a process to determine the difficulty rating of each question. The individual rating then contributes to an overall “Cut Score” for each exam form. To ensure each form has equal assessment standards, cut scores are set on a “per exam form” basis. Depending on which exam form is challenged, cut scores can range from 60% to 85%.

CND Course Outline

Module 01: Computer Network and Defense Fundamentals.

Module 02: Network Security Threats, Vulnerabilities, and Attacks.

Module 03: Network Security Controls, Protocols, and Devices.

Module 04: Network Security Policy Design and Implementation.

Module 05: Physical Security.

Module 06: Host Security.

Module 07: Secure Firewall Configuration and Management.

Module 08: Secure IDS Configuration and Management.

Module 09: Secure VPN Configuration and Management.

Module 10: Wireless Network Defense.

Module 11: Network Traffic Monitoring and Analysis.

Module 12: Network Risk and Vulnerability Management.

Module 13: Data Backup and Recovery.

Module 14: Network Incident Response and Management.

Who Is It For?

• Network Administrators
• Network security Administrators
• Network Security Engineer
• Network Defense Technicians
• CND Analyst
• Security Analyst
• Security Operator
• Anyone who involves in network operations

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

About the Program

Our security experts have designed over 140 labs which mimic real time scenarios in the course to help you “live” through an attack as if it were real and provide you with access to over 2200 commonly used hacking tools to immerse you into the hacker world.

As “a picture tells a thousand words”, our developers have all this and more for you in over 1685 graphically rich, specially designed slides to help you grasp complex security concepts in depth which will be presented to you in a 5 day hands on class by our Certified EC-Council Instructor.

The goal of this course is to help you master an ethical hacking methodology that can be used in a penetration testing or ethical hacking situation. You walk out the door with ethical hacking skills that are highly in demand, as well as the internationally recognized Certified Ethical Hacker certification! This course prepares you for EC-Council Certified Ethical Hacker exam 312-50.

What is New in CEH Version 10 Course

Module 01: Introduction to Ethical Hacking

Module 02: Footprinting and Reconnaissance

Module 03: Scanning Networks

Module 04: Enumeration

Module 05: Vulnerability Analysis

Module 06: System Hacking

Module 07: Malware Threats

Module 08: Sniffing

Module 09: Social Engineering

Module 10: Denial-of-Service

Module 11: Session Hijacking

Module 12: Evading IDS, Firewalls, and Honeypots

Module 13: Hacking Web Servers

Module 14: Hacking Web Applications

Module 15: SQL Injection

Module 16: Hacking Wireless Networks

Module 17: Hacking Mobile Platforms

Module 18: IoT Hacking

Module 19: Cloud Computing

Module 20: Cryptography

Who Is It For?

The Certified Ethical Hacking training course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.

Duration: 5 Days (9:00 AM – 5:00 PM)

Eligibility Criteria:
In order to be eligible to attempt EC-Council CEH, certification examination, candidate may opt to:

Attend Official Training:
If a candidate have completed an official EC-Council training either at an Accredited Training Center, via the iClass platform, or at an approved academic institution, the candidate is eligible to attempt the relevant EC-Council exam without going through the application process. For more information click HERE

Attempt Exam without Official Training:
In order to be considered for the EC-Council CEH exam without attending official training, candidate must have at least 2 years of work experience in the Information Security domain and remit a non-refundable eligibility application fee of USD 100.00 along with their application form. For more information click HERE

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

About the Program

Our security experts have designed over 140 labs which mimic real time scenarios in the course to help you “live” through an attack as if it were real and provide you with access to over 2200 commonly used hacking tools to immerse you into the hacker world.

As “a picture tells a thousand words”, our developers have all this and more for you in over 1685 graphically rich, specially designed slides to help you grasp complex security concepts in depth which will be presented to you in a 5 day hands on class by our Certified EC-Council Instructor.

The goal of this course is to help you master an ethical hacking methodology that can be used in a penetration testing or ethical hacking situation. You walk out the door with ethical hacking skills that are highly in demand, as well as the internationally recognized Certified Ethical Hacker certification! This course prepares you for EC-Council Certified Ethical Hacker exam 312-50.

About the Hands-On (Practical) Exam

The C|EH (Practical) is a 6 hours practical exam built to exacting specifications by subject matter experts in the Ethical Hacking field. Professionals that possess the C|EH credential are be able to sit for exam that will test their limits in unearthing vulnerabilities across major operating systems, databases, and networks. To those who meet and exceed the skills level set, they will earn the new industry required certification – the C|EH (Practical) certification.

C|EH (Practical) is available only as an online and fully proctored exam because we insist that that is the only way quality can be assured. EC-Council is the first in the world to offer a fully online, remote proctored practical exam in the world!

The overall benefit of a practical exam that is fully proctored anywhere in the world will provide organizations with a skills-validated and trusted credential when employing cybersecurity professionals. With its global availability, organizations can now quickly train, test and deploy a cyber-ready workforce effectively.

What is New in CEH Version 10 Course

Module 01: Introduction to Ethical Hacking

Module 02: Footprinting and Reconnaissance

Module 03: Scanning Networks

Module 04: Enumeration

Module 05: Vulnerability Analysis

Module 06: System Hacking

Module 07: Malware Threats

Module 08: Sniffing

Module 09: Social Engineering

Module 10: Denial-of-Service

Module 11: Session Hijacking

Module 12: Evading IDS, Firewalls, and Honeypots

Module 13: Hacking Web Servers

Module 14: Hacking Web Applications

Module 15: SQL Injection

Module 16: Hacking Wireless Networks

Module 17: Hacking Mobile Platforms

Module 18: IoT Hacking

Module 19: Cloud Computing

Module 20: Cryptography

Who Is It For?

The Certified Ethical Hacking training course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.

Duration: 5 Days (9:00 AM – 5:00 PM)

Eligibility Criteria:
In order to be eligible to attempt EC-Council CEH, certification examination, candidate may opt to:

Attend Official Training:
If a candidate have completed an official EC-Council training either at an Accredited Training Center, via the iClass platform, or at an approved academic institution, the candidate is eligible to attempt the relevant EC-Council exam without going through the application process. For more information click HERE

Attempt Exam without Official Training:
In order to be considered for the EC-Council CEH exam without attending official training, candidate must have at least 2 years of work experience in the Information Security domain and remit a non-refundable eligibility application fee of USD 100.00 along with their application form. For more information click HERE

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

About the Program

Course Duration:
Total Training: 3 Days (9:00 AM to 5:00 PM) or 24 hours
Certification:
The C|TIA exam can be challenged post the completion of attending the complete official C|TIA course. Candidates that successfully pass the exam will receive their C|TIA certificate and membership privileges. Members are required to adhere to the policies of EC-Council’s Continuing Education Policy.

Course Outline

• Introduction to Threat Intelligence
• Cyber Threats and Kill Chain Methodology
• Requirements, Planning, Direction, and Review
• Data Collection and Processing
• Data Analysis
• Intelligence Reporting and Dissemination

Who Is It For?

• Ethical Hackers
• Security Practitioners, Engineers, Analysts, Specialist, Architects, and Managers
• Threat Intelligence Analysts, Associates, Researchers, Consultants
• Threat Hunters
• SOC Professionals
• Digital Forensic and Malware Analysts
• Incident Response Team Members
• Any mid-level to high-level cybersecurity professionals with a minimum of 2 years of experience.
• Individuals from the information security profession and who want to enrich their skills and knowledge in the field of cyber threat intelligence.
• Individuals interested in preventing cyber threats.

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

About the Exam

C|TIA allows cybersecurity professionals to demonstrate their mastery of the knowledge and skills required for threat intelligence

Number of Questions: 50
Duration: 2 hours
Availability: EC-Council Exam Portal
Test Format: Multiple Choice
Passing Score: 70%

Eligibility Criteria
To be eligible to challenge the C|TIA Exam, the candidate must either:

• Attend official EC-Council C|TIA training through an accredited EC-Council Partner (Accredited Training Center, iWeek, or iLearn) (All candidates are required to pay the USD100 application fee unless your training fee already includes this) or
• Submit an application showing a minimum of 2 years working experience in information security (All candidates are required to pay USD 100 as a non-refundable application fee)

Brochure

About the Program

The ECSA pentest program takes the tools and techniques you learned in the Certified Ethical Hacker course (CEH) and enhances your ability into full exploitation by teaching you how to apply the skills learned in the CEH by utilizing EC-Council’s published penetration testing methodology. It focuses on pentesting methodology with an emphasis on hands-on learning.

Course Outline

Module 00: Penetration Testing Essential Concepts (Self-Study)
Module 01: Introduction to Penetration Testing and Methodologies
Module 02: Penetration Testing Scoping and Engagement Methodology
Module 03: Open-Source Intelligence (OSINT) Methodology
Module 04: Social Engineering Penetration Testing Methodology
Module 05: Network Penetration Testing Methodology – External
Module 06: Network Penetration Testing Methodology – Internal
Module 07: Network Penetration Testing Methodology – Perimeter Devices
Module 08: Web Application Penetration Testing Methodology
Module 09: Database Penetration Testing Methodology
Module 10: Wireless Penetration Testing Methodology
Module 11: Cloud Penetration Testing Methodology
Module 12: Report Writing and Post Testing Actions

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

Who Is It For?

• Ethical Hackers
• Penetration Testers
• Network server administrators
• Firewall Administrators
• Security Testers
• System Administrators and Risk Assessment professionals

Eligibility Criteria:

There is no predefined eligibility criteria for those interested in attempting the ECSA (Practical) exam. You can purchase the exam dashboard code here

Clause: Age Requirements and Policies Concerning Minors

The age requirement for attending the training or attempting the exam is restricted to any candidate that is at least 18 years old.

Application Process

In order to proceed with the exam the below steps will need to be completed:

• The exam dashboard code can be purchased here.
• Upon successful purchase, the candidate will be sent the exam dashboard code with instructions to schedule the exam.

Note:The exam dashboard code is valid for 1 year from date of receipt.

• Should you require the exam dashboard code validity to be extended, kindly contact practicals@eccouncil.org before the expiry date. Only valid/ active codes can be extended.
• The exam needs to be scheduled a min 3 days prior to the desired exam date. Exam slots are subject to availability.

 

Brochure

Course Outline

Module 01 Introduction to Vulnerability Assessment and Penetration Testing
Module 02 Information Gathering Methodology
Module 03 Scanning and Enumeration
Module 04 Identify Vulnerabilities
Module 05 Exploitation
Module 06 Post Exploitation
Module 07 Advanced Tips and Techniques
Module 08 Preparing a Report
Module 09 Practice Ranges

Key Elements

Real world, performance based assessment:
The successful candidates need to demonstrate a mastery of the skills required to conduct a full black box penetration test that simulates a complex network of a multi-national organization in real time. The exam environment via EC-Council’s cloud based cyber range, iLabs, has multiple networks with different militarized and de-militarized zones. You will follow the entire process of “Cyber kill chain”, taking you from reconnaissance, scanning, enumeration, gaining access, maintaining access, then exploiting vulnerabilities that you will have to seek out in a network that only a true penetration tester will be able to break.

Methodical Approach:
To build on the technical skills taught in the Certified Ethical Hacking course, the repeatable and documentable methodology provided in the EC Council security analyst program , the EC-Council LPT (Master) course emphasizes application of this methodical approach to penetration testing. The LPT (Master) practical exam thoroughly tests the application of the penetration testing process and lifecycle knowledge and the skills required in an examination that even our reviewers have called “extremely challenging”.

Penetration test report:
Many have described report writing as one of least preferred, yet arguably one of the most critical parts of any penetration testing engagement. While so many cyber security courses are offered globally to cover various subjects in the penetration testing realm, hardly any are dedicated to this very important skill, especially almost since half of all time spent at any penetration testing engagement can revolve around writing and reporting the core findings of the engagement to the client.

The key skill also lies in communicating a highly technical finding in an elaborate penetration test engagement to someone to the senior management and the board of directors can be very challenging and frustrating at times. Mastery of communication, research and report writing is required to make sense of technically complex topics like specific vulnerabilities and their resulting exploits in a meaningful manner to make educated decisions to improve the security posture of the organization. The candidates are required to submit a comprehensive report of their findings, methodology used, corroborative screenshots, scripts, custom exploits, or any other method they have used to penetrate the network within 45 days after completing the three challenges. The submitted report should be very clear, so that we should be able to compromise the target again by following the report.

Remote Proctoring

EC-Council launches the first ever remotely proctored online Pen-Testing Exam as a mechanism to ensure the authenticity of the test taker. This not only adds credibility to the overall title but also eliminates external influences that can change the exam outcome. While this test does not limit the test taker to explore his research skills and take advantage of documented resources available, it keeps a check on the individual capability of dealing with the challenges by himself.

Eligibility Criteria

There is no predefined eligibility criteria for those interested in attempting the LPT (Master) exam. You can purchase the exam dashboard code here.

Clause: Age Requirements and Policies Concerning Minors

The age requirement for attending the training or attempting the exam is restricted to any candidate that is at least 18 years old.

Application process

In order to proceed with the exam the below steps will need to be completed:

• The exam dashboard code can be purchased here.
• Upon successful purchase, the candidate will be sent the exam dashboard code with instructions to schedule the exam.

Note:The exam dashboard code is valid for 1 year from date of receipt.

• Should you require the exam dashboard code validity to be extended, kindly contact lpt@eccouncil.org before the expiry date. Only valid/ active codes can be extended.
• The exam needs to be scheduled a min 3 days prior to the desired exam date. Exam slots are subject to availability.

Renewal Cycle, Certification Fees & ECE Scheme

The certification is valid for 2 years from the date of approval and members must then renew annually.

For renewals, members will need to remit USD250 per annum which can be done at our online store.

LPT (master) certification falls under the ECE Policy. Members must ensure that they meet the ECE requirement.

Should you have any queries, please do not hesitate to write in to lpt@eccouncil.org.

LPT (Master) Credential

• Successful candidates will receive the LPT (Master) Welcome Kit consisting of:
  • • Printed Certificate
    • Welcome Letter
    • Lapel Pin
    • EC-Council LPT (Master) T-shirt
• The LPT (Master) license is valid for 2 years. After the initial 2 years, members will have to renew their LPT (Master) license by remitting the annual USD 250 renewal fee.

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

Course Outline

• Module 01: Introduction to Incident Handling and Response
• Module 02: Incident Handling and Response Process
• Module 03: Forensic Readiness and First Response
• Module 04: Handling and Responding to Malware Incidents
• Module 05: Handling and Responding to Email Security Incidents
• Module 06: Handling and Responding to Network Security Incidents
• Module 07: Handling and Responding to Web Application Security Incidents
• Module 08: Handling and Responding to Cloud Security Incidents
• Module 09: Handling and Responding to Insider Threats

Who Is It For?

The incident handling skills taught in E|CIH are complementary to the job roles below as well as many other cybersecurity jobs:

• Penetration Testers
• Vulnerability Assessment Auditors
• Risk Assessment Administrators
• Network Administrators
• Application Security Engineers
• Cyber Forensic Investigators/ Analyst and SOC Analyst
• System Administrators/Engineers
• Firewall Administrators and Network Managers/IT Managers

E|CIH is a specialist-level program that caters to mid-level to high-level cybersecurity professionals. In order to increase your chances of success, it is recommended that you have at least 1 year of experience in the cybersecurity domain.

E|CIH members are ambitious security professionals who work in Fortune 500 organizations globally.

About the Exam

E|CIH allows cybersecurity professionals to demonstrate their mastery of the knowledge and skills required for Incident Handling

Eligibility Criteria

To be eligible to sit the E|CIH Exam, the candidate must either:

Attend official E|CIH training through any of EC-Council’s Authorized Training Centers (ATCs) or attend EC-Council’s live online training via iWeek or join our self-study program through iLearn (see https://iclass.eccouncil.org).

OR

Candidates with a minimum of 1 year of work experience in the domain that would like to apply to take the exam directly without attending training are required to pay the USD100 Eligibility Application Fee. This fee is included in your training fee should you choose to attend training.

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Masterclass
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

About the Program

Digital forensic practices stem from forensic science, the science of collecting and examining evidence or materials. Digital or computer forensics focuses on the digital domain including computer forensics, network forensics, and mobile forensics. As the cyber security profession evolves, organizations are learning the importance of employing digital forensic practices into their everyday activities. Computer forensic practices can help investigate attacks, system anomalies, or even help System administrators detect a problem by defining what is normal functional specifications and validating system information for irregular behaviors.

In the event of a cyber-attack or incident, it is critical investigations be carried out in a manner that is forensically sound to preserve evidence in the event of a breach of the law. Far too many cyber-attacks are occurring across the globe where laws are clearly broken and due to improper or non-existent forensic investigations, the cyber criminals go either unidentified, undetected, or are simply not prosecuted.

Cyber Security professionals who acquire a firm grasp on the principles of digital forensics can become invaluable members of Incident Handling and Incident response teams. The Computer Hacking Forensic Investigator course provides a strong baseline knowledge of key concepts and practices in the digital forensic domains relevant to today’s organizations. CHFI provides its attendees a firm grasp on the domains of digital forensics.

About the Exam

The CHFI certification is awarded after successfully passing the exam EC0 312-49. CHFI EC0 312-49 exams are available at ECC exam center around the world.

CHFI Exam Details

• Number of Questions: 150
• Test Duration: 4 hours
• Test Format: Multiple choice
• Test Delivery: ECC exam portal

Passing Score

In order to maintain the high integrity of our certifications exams, EC-Council Exams are provided in multiple forms (I.e. different question banks). Each form is carefully analyzed through beta testing with an appropriate sample group under the purview of a committee of subject matter experts that ensure that each of our exams not only has academic rigor but also has “real world” applicability. We also have a process to determine the difficulty rating of each question. The individual rating then contributes to an overall “Cut Score” for each exam form. To ensure each form has equal assessment standards, cut scores are set on a “per exam form” basis. Depending on which exam form is challenged, cut scores can range from 60% to 78%.

Who Is It For?

The CHFI program is designed for all IT professionals involved with information system security, computer forensics, and incident response.

Target Audience

• Police and other law enforcement personnel
• Defense and Military personnel
• e-Business Security professionals
• Systems administrators
• Legal professionals
• Banking, Insurance and other professionals
• Government agencies
• IT managers

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

About the Program

EC-Council’s CCISO Program has certified leading information security professionals around the world. A core group of high-level information security executives, the CCISO Advisory Board, contributed by forming the foundation of the program and outlining the content that would be covered by the exam, body of knowledge, and training. Some members of the Board contributed as authors, others as exam writers, others as quality assurance checks, and still others as trainers. Each segment of the program was developed with the aspiring CISO in mind and looks to transfer the knowledge of seasoned professionals to the next generation in the areas that are most critical in the development and maintenance of a successful information security program.

The Certified CISO (CCISO) program is the first of its kind training and certification program aimed at producing top-level information security executives. The CCISO does not focus solely on technical knowledge but on the application of information security management principles from an executive management point of view. The program was developed by sitting CISOs for current and aspiring CISOs.

In order to sit for the CCISO exam and earn the certification, candidates must meet the basic CCISO requirements. Candidates who do not yet meet the CCISO requirements but are interested in information security management can pursue the EC-Council Information Security Management (EISM) certification.

About the Exam

The EISM Exam is based on the same bank of questions as the CCISO exam – questions written by CISOs for current and aspiring CISOs. The difference is, there are scenario-based questions that require years of on the job experience to answer on the CCISO exam. These are omitted from the EISM exam and only the basic information security management questions remain.

EISM Exam Details

• Number of Questions: 150
• Test Duration: 2 hours
• Test Format: Multiple choice
• Passing Score: 70% is the minimum passing score

NICE Framework

The NICE Cybersecurity Workforce Framework (NCWF)(link is external) NIST Special Publication 800-181, is a national resource that categorizes and describes cybersecurity work.The NCWF provides employers, employees, educators, students, and training providers with a common language to define cybersecurity work as well as a common set of tasks and skills required to perform cybersecurity work.

EC-Council has mapped the domains of CCISO to the NCWF in the following document.

About the Exam

There is no exam for CNDA.

Who Is It For?

This course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure. This course was specially designed for Government Agencies.

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Introduction and History of Cryptography

• What is Cryptography?
• History of Cryptography
• Mono-Alphabet Substitution
  • Caesar Cipher
  • Atbash Cipher
  • Affine Cipher
  • ROT13 Cipher
  • Scytale
  • Single Substitution Weaknesses
• Multi-Alphabet Substitution
  • Cipher Disk
  • Vigenère Cipher
    • Vigenère Cipher: Example
    • Breaking the Vigenère Cipher
  • Playfair Cipher
  • ADFGVX Cipher
• Homophonic Substitution
• Null Ciphers
• Book Ciphers
• Rail Fence Ciphers
• The Enigma Machine
• CrypTool

Symmetric Cryptography & Hashes

• Symmetric Cryptography
• Information Theory
  • Information Theory Cryptography Concepts
• Kerckhoffs’s Principle
• Substitution
• Transposition
• Binary Math
  • Binary AND
  • Binary OR
  • Binary XOR
• Block Cipher vs. Stream Cipher
• Symmetric Block Cipher Algorithms
  • Basic Facts of the Feistel Function
    • The Feistel Function
    • Unbalanced Feistel Cipher
  • Data Encryption Standard (DES)
  • 3DES
    • DESx
    • Whitening
  • Advanced Encryption Standard (AES)
    • AES General Overview
    • AES Specifics
  • Blowfish
  • Serpent
  • Twofish
  • Skipjack
  • International Data Encryption Algorithm (IDEA)
  • CAST
  • Tiny Encryption Algorithm (TEA)
  • SHARK
• Symmetric Algorithm Methods
  • Electronic Codebook (ECB)
  • Cipher-Block Chaining (CBC)
  • Propagating Cipher-Block Chaining (PCBC)
  • Cipher Feedback (CFB)
  • Output Feedback (OFB)
  • Counter (CTR)
  • Initialization Vector (IV)
• Symmetric Stream Ciphers
  • Example of Symmetric Stream Ciphers: RC4
  • Example of Symmetric Stream Ciphers: FISH
  • Example of Symmetric Stream Ciphers: PIKE
• Hash Function
  • Hash – Salt
  • MD5
    • The MD5 Algorithm
  • MD6
  • Secure Hash Algorithm (SHA)
  • FORK-256
  • RIPEMD-160
  • GOST
  • Tiger
  • MAC and HMAC
• CryptoBench

Number Theory and Asymmetric Cryptography

• Asymmetric Encryption
• Basic Number Facts
  • Prime Numbers
  • Co-Prime Numbers
  • Euler’s Totient
  • Modulus Operator
  • Fibonacci Numbers
• Birthday Theorem
  • Birthday Paradox
    • Birthday Paradox: Probability
  • Birthday Attack
• Random Number Generator
  • Classification of Random Number Generator
  • Traits of a Good PRNG
  • Naor-Reingold and Mersenne Twister Pseudorandom Function
  • Linear Congruential Generator
  • Lehmer Random Number Generator
  • Lagged Fibonacci Generator (LFG)
  • Blum Blum Shub
  • Yarrow
  • Fortuna
• Diffie-Hellman
• Rivest Shamir Adleman (RSA)
  • RSA – How it Works
  • RSA Example
• Menezes–Qu–Vanstone
• Digital Signature Algorithm
  • Signing with DSA
• Elliptic Curve
  • Elliptic Curve Variations
• Elgamal
• CrypTool

Applications of Cryptography

• FIPS Standards
• Digital Signatures
• What is a Digital Certificate?
  • Digital Certificates
    • X.509
    • X.509 Certificates
    • X.509 Certificate Content
    • X.509 Certificate File Extensions
• Certificate Authority (CA)
  • Certificate Authority – Verisign
• Registration Authority (RA)
• Public Key Infrastructure (PKI)
• Digital Certificate Terminology
• Server-based Certificate Validation Protocol
• Digital Certificate Management
• Trust Models
• Certificates and Web Servers
• Microsoft Certificate Services
• Windows Certificates: certmgr.msc
• Authentication
  • Password Authentication Protocol (PAP)
  • Shiva Password Authentication Protocol (S-PAP)
  • Challenge-Handshake Authentication Protocol (CHAP)
  • Kerberos
    • Components of Kerberos System
    • Kerberos Authentication Process
• Pretty Good Privacy (PGP)
  • PGP Certificates
• Wi-Fi Encryption
  • Wired Equivalent Privacy (WEP)
  • WPA – Wi-Fi Protected Access
  • WPA2
• SSL
• TLS
• Virtual Private Network (VPN)
  • Point-to-Point Tunneling Protocol (PPTP)
    • PPTP VPN
  • Layer 2 Tunneling Protocol VPN
  • Internet Protocol Security VPN
  • SSL/TLS VPN
• Encrypting Files
  • Backing up the EFS key
  • Restoring the EFS Key
• BitLocker
  • BitLocker: Screenshot
• Disk Encryption Software: VeraCrypt
• Common Cryptography Mistakes
• Steganography
  • Steganography Terms
  • Historical Steganography
  • Steganography Details
  • Other Forms of Steganography
  • How to Embed?
  • Steganographic File Systems
  • Steganography Implementations
  • Demonstration
• Steganalysis
  • Steganalysis – Raw Quick Pair
  • Steganalysis – Chi-Square Analysis
  • Steganalysis – Audio Steganalysis
• Steganography Detection Tools
• National Security Agency and Cryptography
  • NSA Suite A Encryption Algorithms
  • NSA Suite B Encryption Algorithms
  • National Security Agency: Type 1 Algorithms
  • National Security Agency: Type 2 Algorithms
  • National Security Agency: Type 3 Algorithms
  • National Security Agency: Type 4 Algorithms
• Unbreakable Encryption

Mr. Kevin Cardwell spent 22 years in the U.S. Navy, during this time he tested and evaluated surveillance and weapon system software, some of this work was on projects like the Multi-Sensor Torpedo Alertment Processor (MSTRAP), Tactical Decision Support System (TDSS), Computer Aided Dead Reckoning Tracer (CADRT), Advanced Radar Periscope Discrimination and Detection (ARPDD), and the Remote Mine Hunting System (RMHS). He has worked as both software and systems engineer on a variety of Department of Defense projects and early on was chosen as a member of the project to bring Internet access to ships at sea. Following this highly successful project he was selected to head the team that built a Network Operations Center (NOC) that provided services to the commands ashore and ships at sea in the Norwegian Sea and Atlantic Ocean. He served as the Leading Chief of Information Security at the NOC for six years prior to retiring from the U.S. Navy. During this time, he was the leader of a 5 person Red Team that had a 100% success rate at compromising systems and networks.

Mr. Cardwell currently works as a free-lance consultant and provides consulting services for companies throughout the world, and as an advisor to numerous government entities within the US and UK. He is an instructor, technical editor and author for computer forensics, and hacking courses. He is technical editor of the Learning Tree Course Ethical Hacking and Countermeasures and Computer Forensics. He is author of the Controlling Network Access course. He has presented at Blackhat USA Conferences. He is a contributing author to the Computer Hacking Forensics Investigator V3 Study Guide and The Best Damn Cybercrime and Digital Forensics Book Period. He is a Certified Ethical Hacker (CEH), Certified Security analyst (E|CSA), Qualified Penetration Tester (QPT), Certified in Handheld Forensics, Computer Hacking Forensic Investigator (CHFI) and Live Computer Forensics Expert (LCFE), and holds a BS in Computer Science from National University in California and a MS in Software Engineering from the Southern Methodist University (SMU) in Texas. His current research projects are in Computer Forensic evidence collection on “live” systems, Professional Security Testing and Advanced Rootkit technologies. He developed the Strategy and Training Development Plan for the first Government CERT in the country of Oman, he serves as a professional training consultant to the Oman Information Technology Authority, and is currently developing the team to man the first Commercial Security Operations Center in the country of Oman.

Students completing this course will gain an in-depth knowledge in the following areas:

• Staging a strong defense against popular security threats
• Fortifying your organization with a good foundation of risk protection methods
• Applying latest references and guidance on best practices in the field of cyber security
• Securing your enterprise architecture from a medium threat level and building towards more sophisticated threats

How will this course benefit you?

• Executing a set of techniques that are critical to the protection of your entire enterprise against some of today’s most advanced threats
• Reviewing methods of system deployments in as secure a state as possible while supporting your daily business requirements
• Applying necessary techniques required for malware identification throughout the enterprise even in the case of the malware not being detectable by any of your security controls
• Staging Advanced Attacks to appreciate methods of correctly eliminating or mitigating risk to an acceptable level

Firewall administrators, system architects, system administrators, windows admin or those responsible for or interested in:

• Identifying security weaknesses in computer systems or networks
• Exposing weaknesses for system’s owners to fix breaches before being targets of compromise
• Applying hacking and pen testing constructively to defend against various possible attacks
• Analysing best practices in developing secure system and network configurations
• Establishing a secure baseline in deploying machines in a protected state
• Appreciating popular attack methods applied by hackers in order to fortify their systems

From practically any organization that handles important data would find this course beneficial, examples are:

• Government agencies
• Universities
• Hospitality
• Retail
• Banking and Financial institutions
• Brokerage and Trading firms
• Insurance
• Scientific institutions & research agencies
• Telecommunication
• Computer design firms
• Consulting firms
• Science and Engineering firms
• Those involved with online related businesses & transactions
• Card related businesses

NOTE: This is definitely not a beginner’s course; participants will be expected to possess the knowledge of attempting attacks against a variety of platforms and architectures under the supervision of an expert. Ideally, the student will be CEH, ECSA or hold equivalent industry experience

CAST on-site provides personalized advanced security courses to meet the needs of an individual or company that are planning to ensure maximum flexibility in terms of logistics, dates and cost issues. Our certified expert trainers are experienced instructors and highly knowledgeable in their respective fields. CAST on-site prides itself on strict quality control principles at all times to ensure that clients receive the highest standard of training and service. On-Site training is designed to add great value to your work force by increasing staff efficiency and skills ensuring improved productivity and output that far exceeds the value of the initial training costs.

Key features of CAST On-site:

• Each of the courses selected from the CAST Advanced Training Suite will be specifically designed to meet the needs of each individual, based according to their current skills and pace of learning to meet your organization’s unique objectives and goals
• CAST On-site expert trainers will be flown to your premise of choice at a date most suitable to you
• CAST On-site allows students to receive training in more manageable sessions arranged over a few days allowing for greater absorption of knowledge with an opportunity to practice and verify the new skills after each session prior to commencing the next one.
• With CAST On-site Advanced Security courses students will be able to take advantage of directly conversing with the instructor in matters unique to the student and your organization.
• You can be rest assured that all challenges and objectives pertaining to your organization’s goals can be discussed in an environment that ensures complete confidentiality.
• Each individual client receives the required high level of training that is benchmarked to international best practices and standards
• Each student receives CAST Advanced Security Training Courseware that allows them to follow and revise the material that has been taught to them
• Upon completion of the course, each student will receive a CAST On-Site Advanced Security Training certificate of attendance

To download CAST 614 printable brochure Please Click Here

We at CAST would like to hear from you

Inquire online about advanced security training programs if you have questions, comments or feedback for us, please send us a message using the form below or email us at contact@nearsecure.com For more information and news updates, connect with us via social media or our mailing list. We look forward to hearing from you!

CAST General Enquiry Form

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

About the Exam

Exam Name: CSCU (112-12) Exam
Credit Towards Certification: Secure Computer User Specialist (CSCU)

Exam Details:
Number of Questions: 50
Passing Score: 70%
Test Duration: 2 Hours
Test Format: Multiple Choice
Test Delivery: EC-Council Exam Portal

Course Outline

• Introduction to Security
• Securing Operating Systems
• Malware and Antivirus
• Internet Security
• Security on Social Networking Sites
• Securing Email Communications
• Securing Mobile Devices
• Securing the Cloud
• Securing Network Connections
• Data Backup and Disaster Recovery

Who Is It For?

This course is specifically designed for todays’ computer users who use the internet extensively to work, study and play.

Course Duration: 16 Hours

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

Course Outline

• Understanding Application Security, Threats, and Attacks
• Security Requirements Gathering
• Secure Application Design and Architecture
• Secure Coding Practices for Input Validation
• Secure Coding Practices for Authentication and Authorization
• Secure Coding Practices for Cryptography
• Secure Coding Practices for Session Management
• Secure Coding Practices for Error Handling
• Static and Dynamic Application Security Testing (SAST & DAST)
• Secure Deployment and Maintenance

Who Is It For?

• .NET Developers with a minimum of 2 years of experience and individuals who want to become application security engineers/analysts/testers
• Individuals involved in the role of developing, testing, managing, or protecting wide area of applications

About the Exam

CASE allows application developers and testers to demonstrate their mastery of the knowledge and skills required to handle common application security vulnerabilities.

Number of Questions: 50

Test Duration: 2 Hours

Test Format: Multiple Choice Questions

Passing Score: 70%

Availability: EC-Council Exam Portal

Eligibility Criteria

To be eligible to apply to sit for the CASE Exam, the candidate must either:

• Attend the official EC-Council CASE training through an accredited EC-Council Partner (Accredited Training Centre/ iWeek/ iLearn) (All candidates are required to pay the USD100 application fee unless your training fee already includes this) or
• Be an ECSP (.NET/ Java) member in good standing (you need not pay a duplicate application fee, as this fee has already been paid) or
• Have a minimum of 2 years working experience in InfoSec/ Software domain (you will need to pay USD 100 as a non-refundable application fee) or
• Have any other industry equivalent certifications such as GSSP .NET/Java (you will need to pay USD 100 as a non-refundable application fee)

For more information visit cert.eccouncil.org

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

Exam Information

The ECSS exam will be conducted on the last day of training. Students need to pass the online EC-Council Exam to receive the ECSS certification.

Exam Details:
Number of Questions: 50
Passing Score: 70%
Test Duration: 2 Hours
Test Format: Multiple Choice
Test Delivery: EC-Council Exam Portal

Certification

This course prepares an individual to sit for ECSS exam This certification is an excellent complement to educational offerings in the domain of security and networking.
Educational institutions can provide greater value to students by providing them not only with one of the most updated courses available today, but also a certification that empowers students in the corporate world.

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

About the Exam

Number of Questions: 150
Passing Score: 70%
Test Duration: 4 hours
Test Format: MCQ
Test Delivery: ECC Exam Portal

Course Outline

Module 01: Introduction to Disaster Recovery and Business Continuity
Module 02: Business Continuity Management (BCM)
Module 03: Risk Assessment
Module 04: Business Impact Analysis (BIA)
Module 05: Business Continuity Planning (BCP)
Module 06: Data Backup Strategies
Module 07: Data Recovery Strategies
Module 08: Virtualization-Based Disaster Recovery
Module 09: System Recovery
Module 10: Centralized and Decentralized System Recovery
Module 11: Disaster Recovery Planning Process
Module 12: BCP Testing, Maintenance, and Training

Who Is It For?

• IT Professionals in the BC/DR or System Administration domain
• Business Continuity and Disaster Recovery Consultants
• Individuals wanting to establish themselves in the field of IT Business
  Continuity and Disaster Recovery
• IT Risk Managers and Consultants
• CISOs and IT Directors

What Is New In This Version?

• This version has a completely updated and redesigned curriculum which approaches the BC/DR domain covering the latest industry gaps, concepts, best practices, trends and technologies.
• EDRPv3 combines BC and DR into a single fluent approach which allows enterprises to gain a holistic view of their requirements.
• It provides focus to BC/DR in an IT environment, as compared to the previous version of EDRP which dealt with generic disaster recovery.
• A completely new set of labs are developed to enable attendees to gain critical experience and skills in BC/DR.
• The program is designed to provide much needed step-by-step guidance to attendees and then tests their knowledge through case studies.
• EDRPv3 addresses gaps in other BC/DR programs by providing helpful templates that are applied to BC/DR efforts in an enterprise.
• The courseware comes complete with reports and white papers sourced from some of the top practitioners of the BC/DR industry.
• Compliant to the United States National Initiative for Cyber Education
• Program framework and instructional approach is carefully architectured to follow a four-stage BCDR methodology, as practiced by the industry.

Training Options

iLearn (Self-Study)
This solution is an asynchronous, self-study environment which delivers EC-Council’s sought after IT Security training courses in a streaming video format.

iWeek (Live Online)
This solution is a live, online, instructor-led training course which means you can attend a course with a live instructor from anywhere with an internet connection.

Master Class
This solution offers you the opportunity to learn from world-class instructors and the opportunity to collaborate with top Infosecurity professionals.

Training Partner (In Person)
This solution offers “in-person” training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

Brochure

Exam Details

The CSA exam is designed to test and validate a candidate’s comprehensive understanding of the jobs tasks required as a SOC analyst. Thereby validating their comprehensive understanding of a complete SOC workflow.

Exam Eligibility Requirement

The CSA program requires a candidate to have one year of work experience in the Network Admin/Security domain and should be able to provide proof of the same as validated through the application process unless the candidate attends official training.

Brochure