Duration

5 days

Overview

EC-Council Certified Security Specialist (ECSS) is an entry level security program covering the fundamental concepts of Network Defense, Ethical Hacking, and Digital Forensics. It enables students to identify information security threats which reflect on the security posture of the organization and implement general security controls. This program will give a holistic overview of the key components of Network Defense, Ethical Hacking, and Digital Forensics. This program provides the solid fundamental knowledge required for a career in information security.

Why is ECSS important?

It facilitates your entry into the world of Information Security.
It provides professional understanding about the concepts of Network Defense, Ethical Hacking, and Digital Forensics.
It provides best practices to improve organizational security posture.
It enhances your skills as a Security Specialist and increases your employability.

Who Should Attend

High School Students

Who wants to get an early start to their cybersecurity career and master the fundamentals of security online.
Who wants to prepare for a cybersecurity career and aid their IT education.

College University/Students

Who wants to get into a cybersecurity field and don't know where to start their education journey.

Working Professionals

Who wants to get into a cybersecurity field and don’t know where to start their education journey

Exam Information

Number of Questions: 100

Passing Score: 70%

Test Duration: 3 Hours

Test Format: Multiple Choice

Test Delivery: EC-Council Exam Portal

Module 01: Network Security Fundamentals

Fundamentals of network security
Network security protocols that govern the flow of data

Module 02: Identification, Authentication, and Authorization

Access control principles, terminologies, and models
Identity and access management (IAM)

Module 03: Network Security Controls: Administrative Controls

Regulatory frameworks, laws, and acts
Security policies, and how to conduct security and awareness training

Module 04: Network Security Controls: Physical Controls

Importance of physical security and physical security controls
Physical security policies and procedures
Best practices to strengthen workplace security
Environmental controls

Module 05: Network Security Controls: Technical Controls

Types of bastion hosts and their role in network security
IDS/IPS types and their role in network defense
Types of honeypots and virtual private networks (VPNs)
Security incident and event management (SIEM)

Module 06: Virtualization and Cloud Computing

Key concepts of virtualization and OS virtualization security
Cloud computing fundamentals and cloud deployment models
Cloud security best practices

Module 07: Wireless Network Security

Fundamentals of wireless networks and encryption mechanisms
Wireless network authentication methods
Implementing wireless network security measures

Module 08: Mobile Device Security

Mobile device connection methods and management
Mobile use approaches in enterprises
Security risks and guidelines associated with enterprise mobile usage policies
Implement various enterprise-level mobile security management solutions
Best practices on mobile platforms

Module 09: IoT Device Security

IoT devices, application areas, and communication models
How security works in IoT-enabled environments

Module 10: Cryptography and PKI

Cryptographic tools, security techniques, and algorithms
Public key infrastructure (PKI) to authenticate users and devices in the digital world

Module 11: Data Security

Data security and its importance
Security controls for data encryption
Perform data backup and retention
Implement data loss prevention concepts

Module 12: Network Traffic Monitoring

Network traffic monitoring concepts.
Traffic signatures for normal and suspicious network traffic.
Perform network monitoring to detect suspicious traffic

Module 13: Information SecurityFundamentals

Information security fundamentals
Information security laws and regulations

Module 14: Ethical Hacking Fundamentals

Cyber Kill Chain methodology
Hacking concepts, hacking cycle, and different hacker classes
Ethical hacking concepts, scope, and limitations

Module 15: Information Security Threats and Vulnerabilities

Detect various threat sources and vulnerabilities in a network or system
Different types of malwares

Module 16: Password Cracking Techniques and Countermeasures

Types of password cracking techniques

Module 17: Social Engineering Techniques and Countermeasures

Social engineering concepts and techniques
Insider threats and identity theft concepts

Module 18: Network-Level Attacks and Countermeasures

Packet sniffing concepts and types
Sniffing techniques and countermeasures
DoS and DDoS attacks under sniffing attacks

Module 19: Web Application Attacks and Countermeasures

Web Server Attacks
Web Application Attacks
Web Application Architecture and Vulnerability Stack Web Application Threats and Attacks
SQL Injection Attacks
Types of SQL Injection Attacks

Module 20: Wireless Attacks and Countermeasures

Wireless Terminology
Types of Wireless Encryption
Wireless Network-specific Attack Techniques Bluetooth Attacks
Wireless Attack Countermeasures

Module 21: Mobile Attacks and Countermeasures

Mobile Attack Anatomy
Mobile Attack Vectors and Mobile Platform Vulnerabilities

Module 22: IoT and OT Attacks and Countermeasures

IoT Devices, their need and Application Areas
IoT Threats and Attacks
Understand OT Concepts
OT Challenges and Attacks
OT Attacks Countermeasures

Module 23: Cloud Computing Threats and Countermeasures

Cloud Computing Concepts
Container Technology
Cloud Computing Threats
Cloud Computing Countermeasures

Module 24: Penetration Testing Fundamentals

Fundamentals of Penetration Testing and its Benefits
Various Types and Phases of Penetration Testing
Guidelines and Recommendations for Penetration Testing

Module 25: Computer Forensics Fundamentals

Fundamentals of computer forensics and digital evidence
Objectives of forensic readiness to reduce the cost of investigation
Roles and responsibilities of a forensic investigator.
Legal compliance in computer forensics

Module 26: Computer Forensics Investigation Process

Forensic investigation process and its importance
Forensic investigation phases

Module 27: Understanding Hard Disks and File Systems

Types of disk drives and their characteristics
Booting process of Windows, Linux, and Mac operating systems
Examine file system records during an investigation

Module 28: Data Acquisition and Duplication

Data acquisition fundamentals, methodologies, and their different types
Determine the data acquisition format

Module 29: Defeating Anti-forensics Techniques

Anti-forensics techniques and their countermeasures

Module 30: Windows Forensics

How to gather volatile and non-volatile information
Perform Windows memory and registry analysis
Analyze the cache, cookie, and history recorded in web browsers
Examine Windows files and metadata

Module 31: Linux and Mac Forensics

Volatile and non-volatile data in Linux
Analyze filesystem images using the sleuth kit
Demonstrate memory forensics
Mac forensics concepts

Module 32: Network Forensics

Event correlation concepts and types
Identify indicators of compromise (IoCs) from network logs
Investigate network traffic for suspicious activity

Module 33: Investigating Web Attacks

Web application forensics and web attacks
Understand IIS and Apache web server logs
Detect and investigate various attacks on web applications

Module 34: Dark Web

Dark web forensics investigation and how it works.
Tor browser forensics

Module 35: Investigating Email Crime

Email basics and how it can be used as evidence
Techniques and steps used in email crime investigation

Module 36: Malware Forensics

Malware, its components, and distribution methods
Malware forensics fundamentals and types of malware analysis
Perform static malware analysis and dynamic malware analysis
Conduct system and network behavior analysi

Programme scope, delivery arrangements and suitability are confirmed during enquiry.

EC-Council Certified Security Specialist (ver 10)