Welcome to the Ethical Hacking Masterclass, cause this is a complete course, which would make you
a complete ethical hacker.
So in the first section of ethical hacking, that is the introduction to ethical hacking, we will learn
different terminologies, penetration testing methodologies and much more.
Let us start with the first lecture, which is the key terms in hacking.
In this lecture, we will learn what is an asset, what is a one that ability exploit risks and threats.
So let us get started.
What is an asset, an asset is any device, data or other component of the environment that supports
information related activities that should be protected from anyone besides the people that are allowed
to view or manipulate the data or information and information security and computer security, access
to any data that is of utmost importance.
So asset can be from of people or person or device or call or anything.
Assets should be protected from illicit access use, disclosure, alteration, destruction and theft.
The next is vulnerable.
Vulnerability is defined as a flaw or weakness inside the asset that could be used to gain unauthorized
access to it.
The successful compromise vulnerability may result in data manipulation, privilege, television exploitation,
etc..
In cybersecurity overnight, it really is a weakness which can be exploited by a cyber attack to gain
unauthorized access, to exploit a vulnerability and attacker must be able to connect to the computer
system vulnerabilities.
Examples are crosseyed scripting a skill injection buffalo of and others.
They are going to see all these, you know, next sections.
Now, what is a threat, a threat represents a possible danger to the computer system.
It represents something that no organization doesn't want to happen.
A successful exploitation of the vulnerability is a threat.
A threat may be a malicious hacker who is trying to gain unauthorized access to an asset.
Anything that can explode when they really intentionally or accidentally and obtain damage or destroy
an asset is also known as a threat.
A threat is what we are trying to protect against.
Common types of threats are natural threats, unintentional threats and intentional threats, natural
threats can be floods, hurricanes or tornadoes.
Unintentional threats can be like an employee mistakenly accessing the wrong information.
Yes, that that can be a threat.
And intentional threats are hackers, spyware, malware, adware or the actions of a disgruntled employee.
The next one it exploit and exploit is something that takes advantage of a vulnerability in an asset
to cause unintended or anticipated behavior in a targeted system, which would then allow an attacker
to gain access to data or information.
Exploitation is actually the next step in an attack.
US playbook, after finding a vulnerability exploit are the means through which of reality can be leveraged
for malicious activity.
All the experts can occur in a variety of ways, one common method is what explodes to be launched from
malicious websites.
The victim might visit such a site by accident or they might be tricked into clicking onto a link to
the malicious site.
Risk.
Risk is defined as the impact resulting from the successful compromise of an asset, for example, an
organization running the venerable Apache tonkatsu poses a threat to our organization, and the damage
and loss that is close to the asset is defined as the risk.
It can also be defined as the potential for loss, damage or destruction of an asset as a result of
trade exporting human tragedy.
Now, all of these items we have seen previously, so reduce the potential for risk by creating and
implementing a risk management plan is very essential.
Risk is the intersection of assets, threats and vulnerabilities.
Why is it important to understand difference between these storms?
See, if you do not understand the differences, will never understand the true risk to assess, as
you see when conducting a risk assessment, the formula that is used to determine the risk is A plus
B plus V is equal to all, which means asset plus threat plus vulnerability is equal to risk.
ADEC.
A cyber attack is an attack launched from one or more computers against another computer, multiple
computers on networks.
Cyber attacks can be broken down into two broad types.
First, the attacks with the goal is to disable the target computer or knock it off line on the second
attacks.
The goal is to get access to the target's computers data and then perhaps gain admin privileges on it.
They're depending upon the criminal intent, a cyber attack can be random or targeted attack cyber attack
methods seem to rotate in order to throw an organization off their defenses.
The famous cyber attacks example are vulnerable and not be.
Then crypto miners attacks made headlines in 2018 and in 2019, cyber attacks have been a mixed bag.
Phishing email cyberattacks remain the constant tone for most of the organizations.
So this was all for this lecture.
In the next lecture, we will see what is mean by a penetration test and we'll see what is vulnerability
assessment.
And we will see the difference between vulnerability assessment and penetration testing.
And finally, we will see what is mean by new reality assessment, penetration testing.