Constructive and ethical

Vikalp Jain

One of the most sought-after positions in the IT security field is that of an ethical hacker. An ethical hacker is a networking professional who purposefully attempts to penetrate computer networks and security systems on behalf of its owners to locate and fix possible weaknesses in it. 

These experts are responsible for scrutinising internal servers and systems to determine any areas that can prove to be potentially vulnerable to external cyber assaults and malicious hackers who could exploit the system for wrong reasons. 

They use methods similar to those used by their vicious counterparts, however, not to misuse the system but to document the vulnerabilities found and provide action points to fix them in order to improve the overall security of the network.

Who should become an ethical hacker?

While it is a career choice that is perfectly suited to those interested in complex problem solving, it requires a high level of communication skills, immaculate judgment, and the ability to work with a cool head even under tremendous pressure. 

Even though there is no standard educational criteria required for becoming an ethical hacker, a bachelor’s or master’s degree in information security technology, computer science or mathematical science is essential. Other certifications in the field of security management can prove beneficial. It is also a plus to have a strong foundation in Windows and Linux-based administration systems, TCP/IP and virtualisation protocols. 

Many black hat hackers who get caught, leave their criminal intentions behind and go on to become ethical hackers for various reasons and use their skills for positive benefits. 

A course in ethical hacking is best suited for:

• Security officers
• Auditors
• Security practitioners
• IT or Site administrators
• IT Security professionals
• IT infrastructure development professionals
• Intelligence agents with previous experience in the armed forces.

A course in ethical hacking is not focused on a particular software product or a specific technology but provides a broad foundation of various fields in computer security. Students are taught to crack passwords, send encrypted or coded information through security systems (known as steganography) and create remote access Trojans to break through networks, etc. 

Job profile

Ethical hackers are like cyber cops who prevent cyber crimes. A white hat hacker needs to think like a malicious hacker, and employ all of their devious skills to target perverse goals. 

Common job functions include:

• Conducting ‘pentests’ or purposeful penetration testing to identify weak points in a security system by using software such as Metasploit and BackBox Linux. 
• Documenting and providing recommendations on how to take action to strengthen the vulnerable areas.
• Working with developers to improve security needs.
• Developing and updating policies and procedures.
• Working on various internal security areas such as encryptions, security protocols and firewalls.

Scope of ethical hacking in India

Globally, many IT services and telecom-based firms have suffered huge data and monetory losses due to security breaches. With growing dependence on technology and digital systems, the magnitude and impact of cyber-attacks have also intensified, proving to be potential weapons of destruction for businesses. This has raised a huge demand for ethical hackers worldwide. In India, many IT companies like Infosys, IBM, and Wipro are in need of professional ethical hackers. 

While the scope of ethical hacking was limited to only the IT sector earlier, with expansion of e-commerce into various business sectors, ethical hackers are in demand in every industrial segment. 

Job prospects

Protection of confidential data in both private firms and government agencies has become an imperative.

Opportunities in the government sector include working for:

• Government agencies
• Military intelligence agencies
• Defence organisations
• Diplomatic communication systems
• Law enforcement agencies
• Central Bureau of Investigation or the CBI
• Forensic labs Private sector opportunities include:
• IT firms
• Finance-based firms
• Consulting companies
• Banks
• Airlines
• Hotels
• Retail networks
• E-commerce companies

— The writer is President and Co-Founder, Acadgild, a professional training online bootcamp

---

Advantages 

The benefits of ethical hacking include: 

• Opportunity to fight against cyber terrorism and national security threats
• Building a strong computer network that is safe from malicious attacks 
• Safeguarding sensitive information and data from black hat hackers.

The dark side Some of the possible drawbacks of ethical hacking are:

• A hacker may use the knowledge gained to fulfill his or her own vested interests.
• Allowing access to company's financial and other sensitive details could potentially lead to a security breach.
• Exposing your network or system to malicious codes, viruses, malware, etc.

Remuneration

A fresh certified ethical hacker could attract a salary anywhere between Rs 3.5 and Rs 4 lakh per year. Experienced professionals in this field such as security consultants, information security analysts, and ethical hacking experts can command salaries in the range of Rs 9 to Rs 20 lakh.