[{"data":1,"prerenderedAt":563},["ShallowReactive",2],{"blog-en-what-is-ethical-hacking":3,"related-en-what-is-ethical-hacking":348},{"id":4,"title":5,"author":6,"body":7,"category":6,"description":13,"extension":333,"image":334,"isToc":335,"langAlt":6,"meta":336,"metaDescription":6,"navigation":337,"path":338,"published":337,"publishedAt":339,"readingTimeMinutes":340,"readingTimeText":341,"relatedArticles":342,"seo":344,"stem":345,"teaser":346,"updatedAtCustom":6,"__hash__":347},"blog_en\u002Fen\u002Fblog\u002Fwhat-is-ethical-hacking.md","What is ethical hacking?",null,{"type":8,"value":9,"toc":325},"minimark",[10,14,22,25,47,51,56,67,71,78,85,95,101,110,116,125,132,135,141,144,150,153,159,162,168,171,177,180,186,189,193,208,212,215,297,301,319],[11,12,13],"p",{},"The two words, seemingly contradictory, when put together mean bypassing the security to uncover data breaches, system threats, and weak spots. Ethical hacking, or also known as penetration tests, is an intrusion into systems and networks with the purpose of fixing the vulnerable points and improving security.",[11,15,16,17,21],{},"To block the attacker, one must think like a hacker. Ethical hackers can use the same methods as the malicious hackers would, ",[18,19,20],"strong",{},"the difference is the permission"," of the investigated company to prevent the wicked exploitation.",[11,23,24],{},"A few examples of what the ethical hacker is looking for are:",[26,27,28,32,35,38,41,44],"ul",{},[29,30,31],"li",{},"Injection attacks",[29,33,34],{},"Data poisoning",[29,36,37],{},"Exposure of sensitive data",[29,39,40],{},"Changes in security settings",[29,42,43],{},"Authentication protocols breach",[29,45,46],{},"Components used in the system or network that may be used as access points",[48,49,50],"note",{},"\nAn important part of ethical hacking is broad documentation of the methods, steps, and outcomes and reports of all the weaknesses that were discovered during the process.\n",[52,53,55],"h2",{"id":54},"benefits-of-ethical-hacking","Benefits of ethical hacking",[26,57,58,61,64],{},[29,59,60],{},"Discovery of vulnerabilities to fix the weak points",[29,62,63],{},"Assurance of the data security to increase customers trust",[29,65,66],{},"Secure network implementation that can prevent breaches",[52,68,70],{"id":69},"types-of-hackers","Types of hackers",[11,72,73,74,77],{},"The most popular typology of hackers divides them into three groups: white, gray, and black, depending on the ",[18,75,76],{},"permission",".",[79,80,82],"h4",{"id":81},"white",[18,83,84],{},"White",[11,86,87,88,94],{},"Ethical hackers are called the ",[18,89,90],{},[91,92,93],"em",{},"White Hats"," and the hacking they performed is with the acknowledgment of the hacked organization.",[79,96,98],{"id":97},"black",[18,99,100],{},"Black",[11,102,103,104,109],{},"On the other side, the ",[18,105,106],{},[91,107,108],{},"Black Hats"," access the systems and networks illegally and violently and whose purpose is to compromise and destroy information. Simply put, the White hats work to prevent the Black hats from taking the benefit.",[79,111,113],{"id":112},"gray",[18,114,115],{},"Gray",[11,117,118,119,124],{},"However, in the middle stand the ",[18,120,121],{},[91,122,123],{},"Gray Hats",", who also illegally enter the systems and networks, yet with no malicious intentions. They usually perform out of fun and inform the organization about the findings.",[11,126,127],{},[128,129],"img",{"alt":130,"src":131},"","\u002Fupload\u002Fethical-hacker.webp",[11,133,134],{},"Another division of hackers is based on their motivation.",[79,136,138],{"id":137},"hacktivists",[18,139,140],{},"Hacktivists",[11,142,143],{},"Political or social stand drives hacktivists motivation to infiltrate and hack systems as a form of protest. Usually, their activities lead to the website's main page or traffic errors.",[79,145,147],{"id":146},"cyber-warrior",[18,148,149],{},"Cyber Warrior",[11,151,152],{},"In this case, hackers disrupt another system of another country as a part of cyberwarfare, for example as a defense or sabotage, typically for strategic or military purposes. They can address privacy or liberty concerns as a part of national cybersecurity.",[79,154,156],{"id":155},"black-box-penetration-tester",[18,157,158],{},"Black Box Penetration Tester",[11,160,161],{},"Organizations can hire hackers to penetrate their systems without any previous knowledge or giving them clues. The goal is to simulate malicious breach when the hacker identifies and report back any vulnerability of their systems.",[79,163,165],{"id":164},"white-box-penetration-tester",[18,166,167],{},"White Box Penetration Tester",[11,169,170],{},"Opposite to the previous type of testing penetration, the white box penetrating (also known as insider breach) is executed with the complete knowledge of the systems, provided by the organization.",[79,172,174],{"id":173},"licensed-penetration-tester",[18,175,176],{},"Licensed Penetration Tester",[11,178,179],{},"Once the tester receives the adequate certification, they can work as the tester professionals for a hire, breaching systems for the organization as the employee or as a contractor, both black and white box hacking.",[79,181,183],{"id":182},"elite-hackers",[18,184,185],{},"Elite Hackers",[11,187,188],{},"In the community of hackers, the most experienced ones are referred to as Elite Hackers, however, this term applies to white as well as for black hat hackers. Normally, they are the first to know about new exploits.",[52,190,192],{"id":191},"key-points-of-ethical-hacking","Key points of ethical hacking",[11,194,195,196,199,200,203,204,207],{},"Not only the purpose but also protocols draw the difference between malicious and ethical hackers. The second group follows ",[18,197,198],{},"legal"," points, meaning they obtain approval before they initiate the assessment, which can also include legal paperwork, e.g., non-disclosure agreement, depending on the ",[18,201,202],{},"sensitivity of the data",". To remain within the legal framework, the ethical hackers test only the ",[18,205,206],{},"approved scope."," The final but important part, as already mentioned in the previous paragraphs, is the extensive report on the discovered outcomes and vulnerabilities.",[52,209,211],{"id":210},"how-does-it-work","How does it work",[11,213,214],{},"Although ethical hacking follows a code, standard processes, and best practices, hackers develop their own approach. To demonstrate how the testing proceeds (but it is not to be followed as directed), here are a few steps that are usually taken:",[216,217,218,241,249,257,265,273,281,289],"ol",{},[29,219,220,223,226,227],{},[18,221,222],{},"Scouting",[224,225],"br",{},"The first and important step is to gather all the relevant information about the system of the organization, the security structure, its components, etc.",[26,228,229,235],{},[29,230,231,234],{},[18,232,233],{},"Active scouting –"," risky approach toward the system exploration via active interaction. The information collected is usually accurate, yet the hacker risks being caught and blocked out by the administrators.",[29,236,237,240],{},[18,238,239],{},"Passive scouting –"," the hacker gathers intel of the system indirectly. This approach is much safer yet may not provide sufficient information.",[29,242,243,246,248],{},[18,244,245],{},"Footprinting",[224,247],{},"This system intrusion approach allows the hacker to determine the strategy, which systems to target, and what would be the appropriate way to attack them. This method can be categorized under scouting, actively or passively. During active footprinting, the hacker usually collects sensitive information such as email and IP addresses, phone numbers and names, and more employee information.",[29,250,251,254,256],{},[18,252,253],{},"Fingerprinting",[224,255],{},"\nActive fingerprinting requires to deliver specially developed packets to the targeted system, record the response for the information. Before any intrusion, determining the attacked operating system provides a significant advantage and eases the job. It also involves a deep analysis of the packets.",[29,258,259,262,264],{},[18,260,261],{},"Scanning",[224,263],{},"\nFor the purpose of identifying vulnerabilities and targeting them, this step involves breaching using various tools. The most common tools are Nexus, Nexpose, NMAP.",[29,266,267,270,272],{},[18,268,269],{},"Gaining access",[224,271],{},"\nAfter the scanning, the hacker exploits the weaknesses to gain access, without bringing any attention to the breach.",[29,274,275,278,280],{},[18,276,277],{},"Retaining access",[224,279],{},"\nOnce the systems are accessed, it is crucial for the hacker to deploy backdoors (allow the hacker to access the system in the future) and payload (activities after the system had been accessed) in the systems.",[29,282,283,286,288],{},[18,284,285],{},"Clearing\u002Fcovering tracks",[224,287],{},"\nAfter the system has been disrupted, the hacker deletes traces of unauthorized access and activities, as the breach can be identified. This step is undertaken especially by white hat hackers to mimic the approach of black hat hackers.",[29,290,291,294,296],{},[18,292,293],{},"Reporting",[224,295],{},"\nThe last, yet the key step for the company, is the in-depth report on the variabilities, weaknesses, threats, what steps were taken, what tools the hacker used, progress, problems, success rate, and potential harms.",[52,298,300],{"id":299},"limits","Limits",[11,302,303,304,307,308,311,312,315,316,77],{},"Although it may sound as if ethical hackers can hack without limitations to reveal the real issue, they still need to operate within agreed boundaries. One of the most restrictive frameworks is the ",[18,305,306],{},"scope"," of the attack. To achieve the defined goals, the organization and the attacker agree on the extent of the investigation. Another limit that can prevent the authenticity and real attack simulation is the ",[18,309,310],{},"methods",", e.g., avoiding some tests that can cause the servers to crash. ",[18,313,314],{},"Resources"," are usually also a big constrain. Compared to the malicious attackers, ethical hackers are also limited ",[18,317,318],{},"by deadlines and budgets",[320,321,324],"action",{"link":322,"button":323},"\u002Fen\u002Fget-in-touch\u002F","Contact Us","\n Our methodology has successfully revealed and corrected the data issue and supported the accuracy of the evaluation for multiple clients. Contact us for more information. We can ensure the accuracy of your A\u002FB testing too. \n",{"title":130,"searchDepth":326,"depth":326,"links":327},2,[328,329,330,331,332],{"id":54,"depth":326,"text":55},{"id":69,"depth":326,"text":70},{"id":191,"depth":326,"text":192},{"id":210,"depth":326,"text":211},{"id":299,"depth":326,"text":300},"md","\u002Fupload\u002Fethical-hacking-cover.webp",false,{},true,"\u002Fen\u002Fblog\u002Fwhat-is-ethical-hacking","2021-01-13T02:44:18.000+00:00",6.08,"7 min read",[343],"content\u002Fen\u002Fblog\u002Fwhy-learning-from-mentors-is-the-best-way-toward-a-successful-career-in-data-science-in-the-2020s.md",{"title":5,"description":13},"en\u002Fblog\u002Fwhat-is-ethical-hacking","Increasing number of attacks and breaches can be avoided with more secured systems. One option to find where the problems lays is with ethical hacking.","gCnQLYeeYDBSOHYFgH4E9F8MkpS-BEYn0CRlO-MydIU",[349],{"id":350,"title":351,"author":6,"body":352,"category":6,"description":356,"extension":333,"image":551,"isToc":335,"langAlt":6,"meta":552,"metaDescription":6,"navigation":337,"path":553,"published":337,"publishedAt":554,"readingTimeMinutes":555,"readingTimeText":556,"relatedArticles":557,"seo":559,"stem":560,"teaser":561,"updatedAtCustom":6,"__hash__":562},"blog_en\u002Fen\u002Fblog\u002Fwhy-learning-from-mentors-is-the-best-way-toward-a-successful-career-in-data-science-in-the-2020s.md","Why to start learning from data science mentors in the 2020s?",{"type":8,"value":353,"toc":530},[354,357,361,364,367,370,374,377,380,383,387,390,394,397,402,405,434,438,441,445,448,451,454,458,461,467,470,474,477,481,484,488,491,495,498,502,505,509,512,516,519,523,526],[11,355,356],{},"If you are familiar with jobs in data science, you may have seen many articles on how these positions are growing in popularity among employers. The number of expert educational options has grown extensively over recent years and the labor market has expanded as well. However, the promotional articles can be misleading, creating misconceptions, and can be discouraging when reality appears to be very different.",[52,358,360],{"id":359},"it-is-not-the-2000s-anymore","It is not the 2000s anymore",[11,362,363],{},"When Data Science was introduced to the world, the labor market was not ready for this new highly specialized field. The term data science was presented as an alternative to computer science in 1974. However, data scientist as a job title was not used until 2008.",[11,365,366],{},"In the beginning, companies hired inexperienced people, mostly right after universities, which did not offer relevant education yet. In the years of 2016-2019, data scientist was considered the best job and the third-best ranked for 2020.",[11,368,369],{},"With the increasing number of investments into shifting toward data-driven solutions, the need for experts in the field rises as well. Even though the number of open positions is growing, there aren’t enough skilled professionals, it is hard to land a good job and develop yourself. The gap between supply and demand within the respective field is quite deep, yet those who try to find it difficult.",[52,371,373],{"id":372},"it-is-getting-harder-to-get-noticed","It is getting harder to get noticed",[11,375,376],{},"With the progress of the field and technology, companies also raise their expectations.",[11,378,379],{},"It can be compared to trying to fish in the very small pool with other 100 fishermen and still not every fish will be picked out. Many people know what data science is, have basic skills, want to find a job in this area, see hundreds of job postings on lower levels and despite that still don’t get employed.",[11,381,382],{},"From many discussions with potential candidates, hiring companies, and our market observations, that the problem is a lack of particular skills, not just general understanding, which are hard to acquire independently, and it takes too long to get on the entry-level. Unless you have a mentor that directs you the right way.",[52,384,386],{"id":385},"applied-theory","Applied theory",[11,388,389],{},"Advice and information from an expert can really make a change and help to level up on the career path. And not just that. Many studies have shown that learning something new efficiently is when it is accompanied by practice, seeing the real examples. It makes the information more “tangible” when only reading a book can be too abstract, especially in such a complex field that is data science.",[52,391,393],{"id":392},"what-are-the-main-concerns","What are the main concerns?",[11,395,396],{},"Usually, when we talk to data science newbies, they face different challenges on their way to becoming data science specialists, but they agree on a few things when it comes to professional mentorship.",[398,399,401],"h3",{"id":400},"problem-1-who-do-you-need-mentor-or-a-tutor","Problem #1: Who do you need? Mentor or a tutor?",[11,403,404],{},"Many definitions describe a professional, who can help you develop yourself in various fields. They might seem all the same, but there is a difference in the meaning. Just to briefly demonstrate the distinction of a few:",[26,406,407,414,421,427],{},[29,408,409,410,413],{},"A ",[18,411,412],{},"mentor"," provides support, advice, and guidance in navigating work situations, shares knowledge, resources, and expertise, gives feedback, and constructive criticism, helps to look at problems from a different perspective, and finds an appropriate solution. In general, a mentor is an example to emulate and helps to develop relevant skills for the present project and future career path.",[29,415,416,417,420],{},"A more structured and formal way of development is provided by a ",[18,418,419],{},"coach"," in a shorter time. A coach helps to defined goals and particular tasks to be followed, however, they do not necessarily have the first-hand experience in the field they coach. Their main goal normally is to increase your performance.",[29,422,423,424,77],{},"More established senior in the field that provides connections to important people and resources, advocates for you and opens new doors regarding significant career advancement is known as a ",[18,425,426],{},"sponsor",[29,428,429,430,433],{},"The term ",[18,431,432],{},"tutor"," is used more commonly in academic circles. They are proficient in a specific subject and educate that specific technical expertise, help to fix immediate or short-term issues.",[398,435,437],{"id":436},"problem-2-where-do-you-find-the-expert","Problem #2: Where do you find the expert?",[11,439,440],{},"Another obstacle to overcome is to find a reliable expert you can trust, who will be approachable and willing to guide you. Commonly, people seek advice in their circles, on the job, within a community, but when a person is just starting, the network is very small. Survey on Mentorship, help in 2019, revealed, that the demand for mentors is high, yet the supply is quite low. This means, not only it is hard to find a person with particular expertise willing to mentor you, they might not be available when you need them. And professional mentoring is very expensive",[398,442,444],{"id":443},"problem-3-will-the-acquired-knowledge-be-useful-for-my-new-jobproject","Problem #3: Will the acquired knowledge be useful for my new job\u002Fproject?",[11,446,447],{},"If you ever tried to learn something new, you most probably found too many articles to read, too many courses to take, classes, podcasts, videos, books, etc. You see lots of similarities within all the content, sometimes find a new perspective. And not to mention how many different paths you can choose, e.g. what programing language you need? What tool do you need to use? But what is relevant and needed and what is not that important?",[11,449,450],{},"We have found out, that many people who wanted to learn the basics of data science spend too much time on actually finding the right material, 43% of them gives it up and those, you perceived in studying realize after, that what they learned is not what they need to land a good job. An example, you learn SQL and visualization in Tableau, and the employers need Python, R, and MS PowerBI. A natural response might be to learn the other combination. But how long can you really do that?",[11,452,453],{},"However, if you could turn it around, start with the project, and then learn all the requirements, it would be not only faster but more importantly effective.",[52,455,457],{"id":456},"incubating-future-data-masters","Incubating future Data Masters",[11,459,460],{},"We noticed a gap in the labor market and applied our know-how, experience, and skills to develop others. It not only lets companies progress toward more data-driven solutions and also lets not so skilled people to find new interesting projects to work on.",[11,462,463,466],{},[91,464,465],{},"Data Master Incubator"," helps ambitious people to dive in and advance in their career in data science, and deliver new projects successfully. The uniqueness of our approach lays in the reverse strategy. We seek the potential to develop, not years of experience. We connect interesting projects and people, who want to learn. Companies trust us to contribute to their internal team by sharing our extensive experience of custom-built solutions and technological skills and thus support their growth.",[11,468,469],{},"During the incubating period, you work on the given project, which usually is challenging and more advance than what you would normally do. However, our experts guide you to deliver better results. This way, you learn, the project progresses faster, and you are more successful in your job in front of your team and employers. On the other side, the company is sure, the project will be executed the best way possible, thanks to the supervision of our mentors, who are also working on similar projects therefore not out of touch or just speaking theoretically. However, the newly gained knowledge stays in your team afterward. Typically, the cooperation doesn’t end with one project and we continue to grow together.",[52,471,473],{"id":472},"benefits-of-having-a-guidance","Benefits of having a guidance",[11,475,476],{},"Experienced data professionals have navigated their own journey with success.",[398,478,480],{"id":479},"shared-knowledge-and-experience","Shared knowledge and experience",[11,482,483],{},"Mentor advice and support can guide you, help you to develop the necessary skills, soft and hard skills. One of the most valued areas within mentoring is when you are giving a new very challenging project that required substantial knowledge and advanced skills. Creating strategies for executing the project efficiently can be difficult when you need to first understand the problem, figure out the right approach, and execute it.",[398,485,487],{"id":486},"constructive-and-continuous-feedback","Constructive and continuous feedback",[11,489,490],{},"A good mentor tells you if you do something well or not. A great mentor will explain why and steer you back on the right track if you deviate. They do not do your work and definitely do not micromanage. Freedom within a framework while gaining independence and confidence. Only praise won’t get you far, but constructive criticism helps you to sharpen your skills.",[398,492,494],{"id":493},"real-rules","Real rules",[11,496,497],{},"What is not written in any book or brochure, are the unofficial rule, how it really works. An experienced professional has walked the lengths for years, can tell you who is the person to talk to in different situations, especially when working for big clients. That is why honesty is important when trying to learn and the well-known, yet unrecorded policies will get you ahead.",[398,499,501],{"id":500},"diversity","Diversity",[11,503,504],{},"One kind of guidance can be limiting. The most common approach is to have one main mentor and also sometimes discuss the matters with someone from a different expert field to add a perspective. For example, Data Master Incubator provides quite a few mentors with a diverse focus, which provides an effective way of how to achieve such a variety.",[398,506,508],{"id":507},"different-views-opinions-and-skills-to-broaden-horizons","Different views, opinions, and skills to broaden horizons",[11,510,511],{},"The best mentors fill the gap where you struggle. They indeed make your strengths stronger but more importantly, the weaknesses. The mentors, who have the exact skill sets hardly can develop you further. The quickly evolving area that data science requires constant learning, while mentorship is crucial to learn faster.",[398,513,515],{"id":514},"encouraging-new-ideas-and-challenging-discussion","Encouraging new ideas and challenging discussion",[11,517,518],{},"Everyone has experienced a situation when somebody’s comment gave them a great idea, and it did not have to be anything too specific. And imagine having a constant flow of inspiration discussions. Mentorship is also about bringing inspiration, encouraging new fresh ideas, and helping you to turn them into reality.",[52,520,522],{"id":521},"conclusion","Conclusion",[11,524,525],{},"In conclusion, mentorship is a very effective way of learning and developing new skills. Practice gives more than just a book and a few expert pieces of advice can be worth more than a professional course. Especially in the age of almost unlimited options of finding information, it is hard to recognize what is relevant and important, where to invest the energy, whom to talk to and understand better. And of course, getting feedback on your performance that is truly helpful.",[320,527,529],{"link":528,"button":323},"\u002Fen\u002Fcompany\u002Fcareers\u002Fjoin","\n Sign up and learn more about how you can be a part of Cross Masters. \n",{"title":130,"searchDepth":326,"depth":326,"links":531},[532,533,534,535,541,542,550],{"id":359,"depth":326,"text":360},{"id":372,"depth":326,"text":373},{"id":385,"depth":326,"text":386},{"id":392,"depth":326,"text":393,"children":536},[537,539,540],{"id":400,"depth":538,"text":401},3,{"id":436,"depth":538,"text":437},{"id":443,"depth":538,"text":444},{"id":456,"depth":326,"text":457},{"id":472,"depth":326,"text":473,"children":543},[544,545,546,547,548,549],{"id":479,"depth":538,"text":480},{"id":486,"depth":538,"text":487},{"id":493,"depth":538,"text":494},{"id":500,"depth":538,"text":501},{"id":507,"depth":538,"text":508},{"id":514,"depth":538,"text":515},{"id":521,"depth":326,"text":522},"\u002Fupload\u002Fdata-scientist-article-cover.webp",{},"\u002Fen\u002Fblog\u002Fwhy-learning-from-mentors-is-the-best-way-toward-a-successful-career-in-data-science-in-the-2020s","2020-04-26T12:00:00.000+00:00",9.03,"10 min read",[558],"content\u002Fen\u002Fblog\u002Fpractical-use-of-cognitive-computing.md",{"title":351,"description":356},"en\u002Fblog\u002Fwhy-learning-from-mentors-is-the-best-way-toward-a-successful-career-in-data-science-in-the-2020s","The need for experts in the data fields rises quickly. However, getting hired is also getting harder. Unless you have a mentor that directs you the right way.","XcNDHyLSG_lHCWJxYxJW8LJPj1OV_9iBs_tnnbj7-oo",1789131822842]