Certified ethical hacker
The Certified Ethical Hacker (CEH) certification is a professional certification provided by the International Council of E-Commerce Consultants.
The definition of an Ethical Hacker is very similar to a Penetration Tester. The Ethical Hacker is an individual who is usually employed with the organization and who can be trusted to undertake an attempt to penetrate networks and/or computer systems using the same methods as a Hacker. Hacking is a felony in the United States and most other countries. When it is done by request and under a contract between an Ethical Hacker and an organization, it is legal. The most important point is that an Ethical Hacker has authorization to probe the target.
A Certified Ethical Hacker is a skilled professional who understands and knows how to look for the weaknesses and vulnerabilities in target systems and uses the same knowledge and tools as a malicious hacker.
The certification is currently in Version 4.
Certification coursework
The coursework consists of 22 modules of subject matter. Module times range from 30 minutes to up to five hours, or more, depending on the depth of the information provided.
The EC-Council has recently had to contend with assertions that its certification process was a "Paper Mill" and has been investigated by the Wyoming State Government and well as some investigative reporters.
Examination
Certification is achieved through study (either through a course or self-study) and passing EC-Council's exam 312-50. The exam consists of 125 multiple-choice questions, and students are given up to three hours to complete the examination. The exam costs US$250, and is administered via computer at a Pearson VUE or Prometric testing center (in the United States).