Table of Contents
Hacking
A hacker is a person who enjoys learning the details of computer system and how to stretch their capabilities – as opposed to the most computer users who prefer to learn only the minimum amount necessary. Person who is an expert of any kind. Joys the intellectual challenge of creatively overcoming or circumventing limitations.
Types of Hackers
Mostly there are three type of Hacker –
- White Hat
- Grey Hat
- Black Hat
White Hat
- Hacker who breaks security but who does so for altruistic or at least non malicious reasons.
- Clear defined code of ethics.
Grey Hat
- Ambiguous ethics.
- Borderline legality.
Black Hat
- Subvert computer security without authorization.
- Uses technology for terrorism, vandalism, identity theft, intellectual proper theft
What is ethical hacking?
An ethical hacker is a computer and network expert who attacks a security system on behalf of its owners, seeking vulnerabilities that a malicious hacker could exploit.
To test a security system, ethical hackers use the same methods as their less principled counterparts, but report problems instead of taking advantage of them.
Ethical hacking is also known as penetration testing, intrusion testing, red teaming. An ethical hacker is sometimes also called a white hat.
Need of Penetration Testing
- To identify the potential vulnerabilities and subsequently repair them.
- To measure risk. Give a better review of the current security mechanisms.
- Used to show where security fails.
- Can test intrusion detection and incident response.
- Can be used to justify the need for an upgrade, bigger budget, or to validate risk assessments.
Miscellaneous Hackers
Apart from the above well-known classes of hackers, we have the following categories of hackers based on what they hack and how they do it −
Red Hat Hackers
Red hat hackers are again a blend of both black hat and white hat hackers. They are usually on the level of hacking government agencies, top-secret information hubs, and generally anything that falls under the category of sensitive information.
Blue Hat Hackers
A blue hat hacker is someone outside computer security consulting firms who is used to bug-test a system prior to its launch. They look for loopholes that can be exploited and try to close these gaps. Microsoft also uses the term BlueHat to represent a series of security briefing events.
Elite Hackers
This is a social status among hackers, which is used to describe the most skilled. Newly discovered exploits will circulate among these hackers.
Script Kiddie
A script kiddie is a non-expert who breaks into computer systems by using pre-packaged automated tools written by others, usually with little understanding of the underlying concept, hence the term Kiddie.
Neophyte
A neophyte, “n00b”, or “newbie” or “Green Hat Hacker” is someone who is new to hacking or phreaking and has almost no knowledge or experience of the workings of technology and hacking.
Hacktivist
A hacktivist is a hacker who utilizes technology to announce a social, ideological, religious, or political message. In general, most hacktivism involves website defacement or denialof-service attacks.
Threats & Vulnerabilities in Hacking
- Threat is a potential occurrence – malicious or otherwise – that may harm an asset.
- Vulnerability is the weakness that makes the threat possible.
Types of threats in Hacking
- Attack on availability
- Attack on confidentiality
- Attack on integrity
- Attack on authenticity
Attack on Availability
- Interrupt communication channel
- Or bring down Destination
Threats
- System not available
- System not useable
Attack on Confidentiality
- Attacker listens communication
Threats
- Give away private Information
- Spying passwords
- Profiling
Attack on Integrity
- Attacker modifies information send over the channel
Threats
- System not confidential at all
Attack on Authenticity
- Attacker fakes identity and inserts counterfeit objects into the system.
Threats
- Information not confidential
- No one is sure to communicate with the right partner.
