WEBVTT 00:00.730 --> 00:05.770 So what are we doing when we are engaging in ethical hacking? 00:05.890 --> 00:07.840 Well, let's back up for a moment here. 00:07.930 --> 00:11.740 What are we doing when we're engaged in just hacking? 00:11.920 --> 00:14.080 Before we talk about ethical hacking. 00:14.290 --> 00:16.120 What the heck is hacking? 00:16.120 --> 00:20.320 And what are these categories of hackers that we hear so much about? 00:21.070 --> 00:24.790 Well, hacking in our sense of the word. 00:25.210 --> 00:30.010 I mean, one of the reasons this is tricky and one of the reasons we need to discuss this is because 00:30.010 --> 00:35.410 the word hack in the English language has taken on many different subtleties. 00:35.830 --> 00:44.260 For instance, I could be working on maybe securing my bicycle helmet to my handlebars and I could come 00:44.260 --> 00:46.150 up with a hack to do that. 00:46.540 --> 00:49.540 So that's kind of a workaround. 00:49.750 --> 00:54.550 Now, how we're going to be using the word hack is very, very specific. 00:54.730 --> 00:57.910 We're going to be using it in a cyber security sense. 00:58.210 --> 01:05.710 So when we talk about hacking from a cyber security sense, it ain't good, right? 01:05.980 --> 01:12.610 So the example I gave of oh yeah, a hack little outfitted holder for my bicycle helmet. 01:13.120 --> 01:13.870 My goodness. 01:13.870 --> 01:17.170 Could I be giving any nerdier of an example, by the way? 01:18.130 --> 01:21.580 I guess I could be talking about my Lego addiction right now, so we're lucky. 01:21.590 --> 01:25.870 But anyways, seriously, hacking here is not good. 01:26.080 --> 01:33.130 It refers to exploiting vulnerabilities and gaining unauthorized access to resources. 01:33.370 --> 01:36.250 And notice it's probably going to go farther than that. 01:36.310 --> 01:36.670 Right. 01:36.910 --> 01:45.040 Exploiting vulnerabilities, getting access to resources, and then stealing those resources or defacing 01:45.040 --> 01:55.240 those resources or deleting those resources or encrypting those resources and asking for a ransom. 01:55.660 --> 02:00.640 So, yeah, hacking in our definition is not a good thing. 02:00.850 --> 02:07.210 And now you can immediately see why we like to distinguish this between ethical hacking, because we're 02:07.210 --> 02:10.800 going to be doing hacking for the forces of good. 02:11.650 --> 02:16.300 And if you're really new to this discipline, you might think to yourself, well, wait a minute, if 02:16.300 --> 02:23.230 hacking is bad and ethical hacking is good, how can we possibly make this a good thing? 02:23.470 --> 02:29.380 How can it be good to exploit vulnerabilities and gain unauthorized access to resources? 02:29.590 --> 02:35.800 Well, hold on, because we'll be getting there and you'll know the specific types of activities that 02:35.800 --> 02:41.380 you're going to be performing as an ethical hacker in an enterprise environment. 02:42.100 --> 02:49.240 Now, don't be upset if you've heard some category of hacker, maybe in someone else's course. 02:49.600 --> 02:53.350 And, you know, you're wondering why it's not getting mentioned here. 02:53.650 --> 03:00.520 The categories of hackers that I'm going to give you are those as defined by the EEC Council and we 03:00.520 --> 03:06.700 know they're the big force behind one of the most popular exams in this discipline and that is the Certified 03:06.700 --> 03:08.140 Ethical Hacker Exam. 03:08.470 --> 03:11.200 So these are their official categories. 03:11.410 --> 03:13.150 Mileage may vary. 03:13.180 --> 03:17.710 If you're looking at someone else's list, but we can all agree on these. 03:17.710 --> 03:23.050 I hope we categorize the bad guys as black hats. 03:23.410 --> 03:24.170 That's right. 03:24.190 --> 03:32.650 So when there is someone hacking a cybersecurity environment, we immediately can say, are they a black 03:32.650 --> 03:34.600 hat or are they a white hat? 03:35.200 --> 03:42.130 Are they for the forces of evil, the black hat hackers, or are they the forces of good, the white 03:42.130 --> 03:42.970 hat hackers? 03:43.270 --> 03:50.230 And what if you have someone that is spending a little bit of time under each discipline? 03:50.410 --> 03:52.000 Well, there's a word for that. 03:52.000 --> 03:53.410 Mixed black and white. 03:53.410 --> 03:54.460 And you get grey. 03:54.640 --> 03:56.140 We have grey hats. 03:56.440 --> 03:57.340 Yeah, sure. 03:57.370 --> 04:06.280 They may moonlight for the, you know, cyber security intelligence agency by evening and by day, they're 04:06.280 --> 04:10.060 actually as part of maybe a hacktivists type activity. 04:10.240 --> 04:13.960 They're actually breaking into a system to take some company down. 04:14.230 --> 04:16.720 Notice it's a big grey area there. 04:16.900 --> 04:20.150 They are doing things that would be considered illegal. 04:20.170 --> 04:23.650 At the same time, they're helping with legal hacking at the same time. 04:24.490 --> 04:26.080 One of the scariest. 04:26.230 --> 04:28.430 It's supposed to sound this scary. 04:28.450 --> 04:31.810 One of the scariest hackers we can have is a suicide hacker. 04:32.080 --> 04:33.070 What does this mean? 04:33.370 --> 04:38.770 It means that they simply do not care about getting caught. 04:39.460 --> 04:41.620 Think about how dangerous that is. 04:41.980 --> 04:44.350 They do not care about getting caught. 04:44.710 --> 04:52.130 I immediately think of someone that is in an unauthorized secured area of a massive data center. 04:52.150 --> 04:59.770 Let's say they are, you know, right there where there's just billions of dollars worth of cloud services 04:59.770 --> 05:03.800 that are provided and they torch the place. 05:03.820 --> 05:07.930 They just take a flamethrower to all of those servers. 05:07.960 --> 05:10.030 Boy, a mine negative today. 05:10.340 --> 05:12.340 Well, anyways, you get the idea. 05:12.550 --> 05:21.130 They are just going to destroy the data and they just don't care about getting caught. 05:21.400 --> 05:22.630 Really scary. 05:22.930 --> 05:31.990 Now, on the total opposite of that is those like maybe you and I, when we first start in this discipline, 05:32.230 --> 05:40.300 we are downloading tools that we might not know a lot about, and we are attempting to use those tools. 05:40.630 --> 05:48.130 When you don't really have full awareness of what you're up to, we put you in the script kiddie category 05:48.340 --> 05:52.550 and hey, look, we all started out as script kiddies. 05:52.570 --> 05:53.680 It's not it didn't sell. 05:55.060 --> 05:59.620 Okay, let's get back into the real serious threat. 05:59.620 --> 06:01.550 And that's cyber terrorism. 06:01.570 --> 06:09.010 We have to understand that there are terrorist organizations now that are targeting cyber security attacks, 06:09.370 --> 06:12.380 ones that will have huge implications. 06:12.640 --> 06:16.150 And this is a growing area of concern for us. 06:16.330 --> 06:24.400 Thanks to the Internet of Things, as more and more devices gain intelligence, as more and more devices 06:24.400 --> 06:30.520 connect to a network, more and more devices are susceptible to cyber attacks. 06:30.850 --> 06:31.900 And think about it. 06:31.900 --> 06:38.020 When you have devices that are controlling things like transportation and major pieces of infrastructure, 06:38.230 --> 06:39.670 this is a huge deal. 06:39.880 --> 06:46.180 It's one of the reasons many of you are listening to my voice right now, maybe even your president 06:46.480 --> 06:55.060 of your country has begged you to start studying cybersecurity so you can be one of the good guys against 06:55.060 --> 06:55.900 these threats. 06:56.290 --> 07:00.670 And I'm not exaggerating state sponsored hackers. 07:00.880 --> 07:08.770 So there is a government that is saying, hey, we're hiring you to go attack them. 07:09.010 --> 07:11.620 And that's happening all of the time. 07:11.620 --> 07:14.680 Now that is simply commonplace. 07:15.520 --> 07:21.190 So I hope you appreciate now what we mean by hacking. 07:21.400 --> 07:23.230 It's not good, by the way. 07:23.830 --> 07:25.570 How can I forget hacktivists? 07:25.720 --> 07:27.670 I mentioned them a moment ago. 07:27.790 --> 07:31.120 That is indeed another category of hacker. 07:31.510 --> 07:40.420 So I want to thank you for and if I didn't fully define that a hacktivist is someone that is attacking 07:40.510 --> 07:49.330 illegally the, you know, data and the data resources of an organization and they're not authorized 07:49.630 --> 07:53.530 and they're supposedly doing it for forces of good. 07:53.950 --> 08:00.370 So maybe there's some organization that is found to be cruel to animals. 08:00.610 --> 08:07.780 And so now they're going to bring down their Web servers all over the world as a way to say, hey, 08:07.780 --> 08:11.980 they're harming animals and we want to gain notoriety for their harm of animals. 08:12.010 --> 08:12.850 You get the idea. 08:13.120 --> 08:20.590 So hacktivists would be kind of the opposite of like a suicide attacker who's trying to do as much damage 08:20.590 --> 08:24.760 as they possibly can and, you know, have no fear of getting caught. 08:25.480 --> 08:32.770 So I hope you have a new appreciation for this word hack in our sense of the term. 08:32.980 --> 08:34.240 It's not good. 08:34.540 --> 08:41.530 That's why we have to distinguish between blackhat hackers and white hat hackers. 08:41.710 --> 08:48.280 We're going to be having a lot more to say about the white hat hackers in this particular module, of 08:48.280 --> 08:48.670 course. 08:48.850 --> 08:53.320 We're are going to talk about ethical hacking and what it truly means. 08:53.530 --> 08:55.270 So you have that to look forward to as well. 08:55.480 --> 08:58.060 Thanks for joining me, though, in this important video.