Category

EC-Council in News

EC-Council Attains the Prestigious ANSI/ISO/IEC 17024 Accreditation for the Certified Network Defender Program

Summary: EC-Council’s Certified Network Defender (CND) certification program is the latest to receive the prestigious American National Standards Institute (ANSI) Personnel Certification Accreditation. This is the fourth EC-Council certification to attain the gold standard of personnel credentialing. This affirms that the Certified Network Defender (CND) certification process is conducted in a consistent, comparable, and reliable manner, meeting all the disciplinary requirements set by ANSI. Albuquerque, NM, April 20, 2018: EC-Council announces that it has been once again accredited by the American National Standards Institute (ANSI), this time to meet the ANSI/ISO/IEC 17024 Personnel Certification Accreditation standard for its Certified Network Defender (CND) certification program. In order to award the accreditation, ANSI conducted a verification process to ensure that EC-Council is impartial and objective as a certification body. It also recognizes that EC-Council’s certification process is conducted in a consistent, comparable, and reliable manner. This process required rigorous quality reviews of EC-Council and the Certified Network Defender (CND) certification program. The American National Standards Institute (ANSI) is a private, non-profit organization whose mission is to enhance U.S. global competitiveness by promoting, facilitating, and safeguarding the integrity of the voluntary standardization and conformity assessment system. ANSI is the official U.S. representative to the International Organization for Standardization (ISO) and, via the U.S. National Committee, the International Electrotechnical Commission (IEC). ANSI is also a member of the International Accreditation Forum (IAF). “Achieving ANSI for our CND program reinforces EC-Council’s commitment to quality and our determination to create world class network defenders to combat growing cyber threats against institutions” says Jay Bavisi, CEO of the EC-Council Group. The skills taught in the program such as switching and routing, storage area networking, and switches and firewall installation give network administrators an advantage out in the field. Hacks like malware attacks, DoS attacks, and sniffer attacks steal data using websites, email, and malicious files and dynamically adapt to exploit zero-day and other network vulnerabilities. Once they have penetrated a network, hackers spend an average of 146 days within a network before being detected [1] — a fact that emphasizes the importance of proper network defense.  In fact, CIO by IDG places Network and Information Security at No.5 on their list of job skills in demand.[2] “Cyber Security is commonly the first thing in the minds of CIOs but is, in many cases, an afterthought for the IT department” says Jay Bavisi. The Certified Network Defender (CND) certification program focuses on operations and processes rather than technology to create network administrators who are trained to protect, detect, and respond to threats on the network. Through this program, professionals learn network defense fundamentals, the application of network security controls, protocols, perimeter appliances, secure IDS, VPN and firewall configuration, as well as the intricacies of network traffic signatures and vulnerability scanning to help design greater network security policies and successful incident response plans. By attaining the prestigious ANSI certification, the CND certification now holds an added value to all prospective and existing CND credential members, adding trust, value, and credibility to their certification. The CND program joins EC-Council’s Certified Ethical Hacker (CEH), Certified Chief Information Security Officer (CCISO), and the Computer Hacking Forensics Investigator (CHFI) program as ANSI accredited. About EC-Council EC-Council has been the world’s leading information-security certification body since the launch of their flagship program, Certified Ethical Hacker (CEH), which created the ethical hacking industry in 2002. Since the launch of CEH, EC-Council has added industry-leading programs to their portfolio to cover all aspects of information security including EC-Council Certified Security Analyst (ECSA), Computer Hacking Forensics Investigator (CHFI), Certified Chief Information Security Officer (CCISO), among others. EC-Council Foundation, the non-profit branch of EC-Council, created Global CyberLympics, the world’s first global hacking competition. EC-Council Foundation also hosts a suite of conferences across the US and around the world including Hacker Halted, Global CISO Forum, TakeDownCon, and CISO Summit. For more information about EC-Council, please visit staging-new.eccouncil.org. Source: https://www.microsoft.com/en-us/cloud-platform/advanced-threat-analytics https://staging-blogeccouncilorg.kinsta.cloud/5-reasons-the-certified-network-defender-cnd-certification-is-not-an-ordinary-program/

Read article
EC-Council’s CHFI Certification Receives the Coveted ANSI Accreditation

Summary: CHFI is the latest to join the group of ANSI accredited certifications from EC-Council In major efforts to educate, certify, and validate digital forensics experts across the globe, EC-Council’s celebrated certification, Computer Hacking Forensics Investigator (CHFI), has now become more desirable, recently receiving the prestigious ANSI accreditation. EC-Council now adds CHFI to its existing list of ANSI accredited certifications, which include their flagship certification, Certified Ethical Hacker (CEH), and their executive (C-level) certification, Certified Chief Information Security Officer (CCISO). ANSI is a private non-profit organization that administers and coordinates the U.S. voluntary standardization and conformity assessment system. It is the official U.S. representative to the International Organization for Standardization (ISO) and, via the U.S. National Committee, the International Electrotechnical Commission (IEC). It is also a member of the International Accreditation Forum (IAF). This accreditation enhances EC-Council’s ANSI accreditations across cybersecurity domains of Core, Specialist, and Management level certification programs, while significantly strengthening the status of CHFI. EC-Council’s CHFI certification certifies individuals in specific security disciplines of computer forensics from a vendor-neutral perspective. CHFI will fortify the application knowledge of law enforcement personnel, system administrators, security officers, defense and military personnel, legal professionals, bankers, security professionals, and anyone who is concerned about the integrity of their network infrastructure. In the event of a cyber-attack or incident, it is critical that investigations be carried out in a manner that is forensically sound to preserve evidence in the event of a breach of the law. Far too many cyber-attacks are occurring across the globe where laws are clearly broken and due to improper or non-existent forensic investigations, the cyber-criminals either go unidentified, undetected, or are simply not prosecuted. Cybersecurity professionals who acquire a firm grasp on the principles of digital forensics can become invaluable members of Incident Handling and Incident response teams. The Computer Hacking Forensic Investigator course provides a strong baseline knowledge of key concepts and practices in the digital forensic domains relevant to today’s organizations. CHFI provides its attendees a firm grasp on the domains of digital forensics. For more information on CHFI, please click here. About EC-Council EC-Council has been the world’s leading information-security certification body since the launch of their flagship program, Certified Ethical Hacker (CEH), which created the ethical hacking industry in 2002. Since the launch of CEH, EC-Council has added industry-leading programs to their portfolio to cover all aspects of information security including EC-Council Certified Security Analyst (ECSA), Computer Hacking Forensics Investigator (CHFI), Certified Chief Information Security Officer (CCISO), among others. EC-Council Foundation, the non-profit branch of EC-Council, created Global CyberLympics, the world’s first global hacking competition. EC-Council Foundation also hosts a suite of conferences across the US and around the world including Hacker Halted, Global CISO Forum, TakeDownCon, and CISO Summit. For more information about EC-Council, please see staging-new.eccouncil.org.

Read article
Orange Technical College Partners with EC-Council to Advance Cybersecurity Skills in Orange County, FL

Orange Technical College’s Mid Florida and Winter Park campuses will now offer the globally renowned EC-Council Certified Ethical Hacker (CEH) program as qualified EC-Council Authorized Training Centers. The Mid Florida Campus is one of the most technically advanced training centers in the state of Florida, while the Winter Park Campus is considered to be the best option for getting the real-world education . CEH is the world’s most advanced certified ethical hacking course. It covers 20 of the most current cybersecurity topics ethical hackers need to know to beef-up the information security posture of their organization. The accredited course provides advanced hacking tools and techniques used by hackers and information security professionals. The CEH training program is a hands-on, instructor-led training which prepares students to not only earn the certification, but also ensures graduates will be able to perform and excel in their careers. This training program utilizes cutting-edge equipment, like the online, interactive iLabs, provided by EC-Council, for students to train on and practice their skills. Thomas Thoss, an instructor at the Mid Florida campus, said “ I am very excited about this new opportunity in delivering EC-Council’s Certified Ethical Hacker (CEH) training for my students in Orange County, especially the brand new Certified Ethical Hacker (CEH) Version 10 course that launched globally on 14th March, 2018”. Mr. Thoss believes this is an important field for the nation and especially in the Central Florida area. Derrick Hinton, Director of the Department of Defense Test Resource Management Center, said “The program at Orange Technical College’s Mid Florida campus provides a strong foundation for employment in the cybersecurity field.” The low level of supply of cybersecurity workers in this area is evidenced by Cyber Seek, a project supported by the National Initiative for Cybersecurity Education. According to Cyber Seek, “Cybersecurity workers protect our most important and private information, from bank accounts to sensitive military communications. However, there is a dangerous shortage of cybersecurity workers in the United States that puts our privacy and infrastructure at risk…there is an annual talent shortfall of over 15,000 workers for cybersecurity’s largest job”. According to Mr. Thoss, “Offering this hands-on training course will help close the gap in the cybersecurity field in Central Florida.” A recent graduate of the program, Zachary Pahler, thoroughly enjoyed his time in the program and said what he learned “Prepared me for a career in this industry – I would definitely recommend Orange Technical College to anyone wanting to enter the cybersecurity field!” About EC-Council: The International Council of E-Commerce Consultants (EC-Council) is a member-based organization that certifies individuals in various e-business and security skills. EC-Council is the owner and developer of the world-famous E-Council Certified Ethical Hacker (CEH), Computer Hacking Forensics Investigator (CHFI), Certified Security Analyst (ECSA), License Penetration Tester (LPT) programs, and various others offered in 174 countries around the globe. EC-Council has certified over 220,000 information security professionals globally. EC-Council certification programs are recognized worldwide and have received endorsements from various government agencies including the US Federal Government via the Montgomery GI Bill, the US Government National Security Agency (NSA), the Committee on National Security Systems (CNSS) certifying EC-Council’s Certified Ethical Hacking (CEH), Network Security Administrator (ENSA), Computer Hacking Forensics Investigator (CHFI), Disaster Recovery Professional (EDRP), Certified Security Analyst (ECSA), Licensed Penetration Tester (LPT) program for meeting the 4011, 4012, 4013A, 4014, 4015 and 4016 training standards for information security professionals and most recently EC-Council has received accreditation from the American National Standards Institute (ANSI). EC-Council Contact: Wesley Alvarez Director of Academics, U.S. [email protected] About Orange Technical College For over 80 years, OTC has continued to grow and evolve, always focused on improving the lives of students and positively impacting workforce needs in Central Florida. Throughout their five technical college campuses, you can learn the industry skills needed to start a whole new CAREER, attain your high school diploma, become an apprentice, learn English, and even expand your current skills to make you more marketable to employers. The Mid Florida Campus is one of the most technically advanced training centers in the State of Florida and is accredited by the Commission of the Council on Occupational Education (COE) and the Southern Association of Colleges and Schools Council on Accreditation and School Improvement (SACSCASI). With qualified instructors, interactive classrooms and low-cost training programs, Winter Park Campus is the best option for getting the real-world education you have always desired. Whether you are looking for a whole new career in exciting fields like computer science, digital arts or medical technology, needing to catch up on academic training or getting your GED or learning to speak English in our English for Speakers of Other Languages (ESOL) classes, we have what you need. OTC Contact: Michael Martucci Assistant Director [email protected]

Read article
ORION and EC-Council Partner to Bring Industry-leading Executive Cyber Security Training to Toronto

ORION and EC-Council bring the globally-renowned executive information security management training Certified Chief Information Security Officer (CCISO) to Toronto, Ontario. The CCISO training workshop is a premium training and certification program that bridges the gap between the executive management knowledge that CISOs need and the technical knowledge that many aspiring CISOs have. Read more…

Read article
Cyber Gaming Expert from Johns Hopkins Applied Physics Lab To Lead EC-Council Research

Global cybersecurity education and services company, EC-Council, today announced the appointment of Tim Rosenberg, a well renowned cyber gamification expert, as the Executive Director of EC-Council Research.“Over the past few years, through research, we have established a strong, educated opinion on what is really needed in the market going forward. One honest realization we came to is that this is not a project or a part-time effort. To truly succeed this will take a full-time effort and significant experience in this field.” says Steve Graham, Senior Vice President at EC-Council (North America). Tim will focus on ensuring that the organization’s strategic and operational plans for research and knowledge exchange are amplified globally. Tim was the Associate Research Professor at the George Washington University where he taught Information Warfare and Computer Security courses as well as an Adjunct for Georgetown University’s Security Studies Program. He designed, built, and delivered every aspect of cyber exercises including a comprehensive scoring engine capable of scoring offense and defense players across multiple exercises. This exercise experience included some of the first integrations of SCADA, VoIP, IPv6, and custom hardware into the event ranges. “I look forward to creating a massive impact in the cyber profession through EC-Council,” says Tim Rosenberg, “While working with Johns Hopkins Applied Physics Lab and White Wolf Security we innovated a lot, made a lot of mistakes, and did a lot of things. I hope to be able to take that learning and establish a strong strategic plan for EC-Council.” Tim also uses his love of tech education and travel to support charity work at Hackers for Charity and Beyond the Mountain. Through these two charities, he has traveled to Jinja, Uganda, and the Solukhumbu District of Nepal helping to build tech-driven educational solutions to remote and austere environments. About EC Council: EC-Council has been the world’s leading information security certification body since the launch of their flagship program, Certified Ethical Hacker (CEH), which created the ethical hacking industry in 2002. Since the launch of CEH, EC-Council has added industry-leading programs to their portfolio to cover all aspects of information security including EC-Council Certified Security Analyst (ECSA), Computer Hacking Forensics Investigator (CHFI), Certified Chief Information Security Officer (CCISO), among others. EC-Council Foundation, the non-profit branch of EC-Council, created Global CyberLympics, the world’s first global hacking competition. EC-Council Foundation also hosts a suite of conferences across the US and around the world including Hacker Halted, Global CISO Forum, TakeDownCon, and CISO Summit. To know more about EC-Council, visit staging-new.eccouncil.org

Read article
Powerful and Practical – EC-Council’s New Learning Track Launched Globally

EC Council, the world’s leading provider of information security certifications and training, announced the release of five core programs and certifications that make up an all-new learning track. These programs and their ensuing qualifications will prepare capable, quality cyber-manpower with verified skills that are in demand by the global workforce. It is a big step towards EC-Council’s commitment to bringing workforce development training and certification programs that measure job readiness. Biggest Leap Since the Original EC-Council raises the bar again for ethical hacking training and certification programs through the Certified Ethical Hacker (CEH) v10 program, which is in compliance with the NICE framework’s Protect and Defend specialty area. In order to meet the rising demands of employers across the world, the program now includes IoT hacking, vulnerability analysis, static and dynamic malware analysis, and emerging attack vectors on cloud, artificial intelligence, and machine learning. Exam Sanctity “The biggest issue for CISOs is the need to differentiate candidates that have the knowledge and candidates that actually have the skills and abilities to do the job. Abilities that represent true technical and security challenges faced at the workplace today and every day. Many Fortune 500 companies developed creative ways to find and hire those that could actually do the job and they spend millions of dollars and countless amount of time and management to achieve that. Today, we offer a solution to this problem,” said Jay Bavisi, CEO of EC-Council Group and Chairman of the Board, EC-Council University. Ethical hackers from around the world will now be able validate their skills in a new exam format launched by EC-Council. The all-new CEH (Practical) certification exam will be delivered as a secure, remotely-proctored, hands-on, live certification test that can be taken anytime, anywhere. The exam is a six-hour practical exam built by subject matter experts in the ethical hacking field, that will test the candidate against 20 real-life scenarios. The combined benefit of a practical exam proctored anywhere in the world will allow organizations to quickly train, test, and deploy their cyber-ready workforce. A Progression From the Former Continuing where the CEH program left off is the enhanced ECSA v10 program that includes a new comprehensive step-by- step penetration testing methodology that improves upon the best from ISO 27001, OSSTMM, and NIST Standards. This program is 100% compliant with the new NICE 2.0 and CREST frameworks, bringing real tangible benefits to employers. The program includes a new comprehensive social engineering penetration testing methodology and has increased its focus on methodology for perimeter devices (IDS/Firewall), database, wireless, and cloud penetration testing, using both manual and automated penetration testing approaches, along with many other major improvements. Application of Methodology After a successful completion of the ECSA v10 credential, certified members can now attempt the brand-new ECSA (Practical) certification exam— a 12 hour practical, fully proctored, live online exam, built on EC-Council’s cyber-range, simulating real-life environments. The exam will test the candidate on their application of penetration testing methodologies to perform a comprehensive security audit of an organization. The ECSA (Practical) will test your ability to perform threat and exploit research, understand exploits in the wild, write exploits, and much more. The candidate will also be required to create a professional pen testing report with essential elements and guidance for the organization in the scenario to act on. 100% Practicality into Training Sessions The all-new EC-Council learning track would not be complete without a penetration testing program. Following the launch of the LPT (Master) program at the Hacker Halted Conference 2017 came a flood of requests for an advanced penetration testing course. Since then, EC-Council began working on a course that could resolve the problems faced by cybersecurity professionals and hiring managers alike, bringing forth EC-Council’s Advanced Penetration Testing program. The Advanced Penetration Testing Course is designed to demonstrate the advanced concepts of penetration testing, bringing 100% practicality into the training sessions to provide professional skills that demonstrate how professional pen testers will determine the attack surface of targets within a required time frame to gain access to the machines and escalate privileges. Upon completion of the Advanced Penetration Testing program, candidates will challenge the LPT (Master) exam, the world’s first fully online, remotely-proctored LPT practical exam that offers a challenge like no other by simulating a complex network of a multinational organization in real time. For more information on these courses, visit staging-new.eccouncil.org/ About EC Council: EC-Council has been the world’s leading information security certification body since the launch of their flagship program, Certified Ethical Hacker (CEH), which created the ethical hacking industry in 2002. Since the launch of CEH, EC-Council has added industry-leading programs to their portfolio to cover all aspects of information security including EC-Council Certified Security Analyst (ECSA), Computer Hacking Forensics Investigator (CHFI), Certified Chief Information Security Officer (CCISO), among others. EC-Council Foundation, the non-profit branch of EC-Council, created Global CyberLympics, the world’s first global hacking competition. EC-Council Foundation also hosts a suite of conferences across the US and around the world including Hacker Halted, Global CISO Forum, TakeDownCon, and CISO Summit. To know more about EC-Council, visit staging-new.eccouncil.org/ Media Coverage: IT Web Press Release Point PR Submission Site ITRCP Centriq Open PR SSDN Technologies

Read article
Follow these Top Cybersecurity Professors on Twitter

Cybersecurity professors can have a range of expertise, from architecture, maintenance, and administration to forensic investigation of secure networked systems, a type of infrastructure (with a corresponding set of policies) increasingly necessary for safe operation of governments, businesses, nonprofits and educational institutions of all sizes. Read more…

Read article
Technology Can Be Competitive, but in Malaysia, “Cybersecurity Collaboration” is the Key

It would not be incorrect to say that 2017 caused mayhem for information security professionals. Some of the most brutal cybersecurity meltdowns affected a large number of Internet users. Although Equifax and Yahoo stole the headlines, a number of cybersecurity missteps, like Uber and Deloitte, didn’t go unnoticed.While the cybersecurity breaches left a number of organizations gasping for breath, it also taught them a few important lessons. One of them was that collaboration is the key to overcoming or avoiding cybersecurity problems. The ever-evolving, and at times volatile, business landscape requires mutually beneficial partnerships where different actors can come together and take cybersecurity challenges head on through new ideas and approaches. EC-Council’s Malaysian Cybersecurity Summit endeavors to spread this message far and wide. The one-day event, to be held on March 20, 2018 at Royale Chulan Kuala Lumpur, looks to provide a platform for influencers, thought leaders, and achievers in the information security domain to collaborate in an effort to make the internet a safer place. The event is being hosted with the support of CyberSecurity Malaysia, the country’s national cybersecurity specialist agency––which falls under the Ministry of Science, Technology, and Innovation (MOSTI). The Malaysian Cybersecurity Summit is an effort to promote the mission of CyberSecurity Malaysia to “create and sustain a safer cyberspace to promote National Sustainability, Social Well-Being, and Wealth Creation” by bringing the best in the government and corporate sectors together to formulate strategies to tackle the challenges ahead. The Honorable Datuk Wira Dr. Abu Bakar Muhammad Diah, Deputy Minister of Science, Technology, and Innovation (MOSTI), will be joining the gathering to address the audience. Leading cybersecurity technology and solution providers—such as HP | Intel, Darktrace, Wiki Labs, Pacific Cybersecurity Academy (Papua New Guinea), RigNet, Cyber Wellness Centre, and Iverson—will be joining the summit to showcase their latest products and services. Some of the stalwarts attending the summit are: Jay Bavisi, CEO of EC-Council Group and Chairman of the Board, EC-Council University Dato’ Arif Siddiqui, Former CIO, Standard Chartered Bank Malaysia Abdul Fattah Yatim, Chairman, National Standards Committee on Blockchain and Distributed Ledger Technologies Dato’ Dr. Haji Amirudin, Bin Abdul Wahab, CEO, CyberSecurity Malaysia Thillai Raj T. Ramanathan, Chief Technology Officer, MIMOS Berhad We will also be welcoming a reputed delegation from Papua New Guinea, including renowned professionals such as: Gari L Baki, CBE, CSt.J, QPM, DPS, Commissioner of Police Victor Isouve, BEM, DPS, QPM, DLP, Assistant Commissioner of Police Honorable Jelta Wong, MP, Member for Gazelle, Easter New Britain, Minister for Internal Security Honorable Sam Basil, MP, Member for Bulolo, Morobe Province, Party Leader – Pangu Pati, Minister for Communication, Information Technology & Energy Charles Punaha, Chief Executive Officer, National Information and Communication Technology Authority – NICTA Our esteemed speakers and panelists will discuss several crucial topics related to cybersecurity issues. Some of the specific areas the event will focus on include: Navigating ASEAN’s cyber-threat landscape with a resilient cybersecurity strategy Bridging the gap of digital identities and privileged access Blockchain and cryptocurrency trend in a digital economy Strengthening cyber-readiness by addressing the skill gaps in the digital economy For more information on the Malaysian Cybersecurity Summit, please visit https://ciso.eccouncil.org/portfolio/malaysian-cyber-security-summit-2018/ Media ContactMeghana VyasContact: +91 8424061022Email: [email protected]

Read article