Attempts to duplicate the intent and actions of black

hat hackers without causing harm

Conducts penetration tests to determine what an

attacker can find out about an information system during the reconnaissance and

scanning phases

An individual who uses his or her capabilities for

harmful purposes against computer systems

Operates with the permission and knowledge of the

organization they are trying to defend

Consulting organization

White hat ethical hacker

Former black hat hacker

Black hat hacker

A weakness or lack of a safeguard that can be

exploited, causing

An event or activity that has the potential to cause

harm to the information systems or networks

An action against an information system or network

that attempts to violate the system security policy

The potential for harm or loss to an information

system or network

Reconnaissance

Gaining access

Disengaging

Maintaining access

All of the above

Informed of the support that the organization will

provide

Informed of potential threat sources

Informed of the assets to be protected