EC-Council explained

EC-Council
Trade Name:EC-Council (2001-present)
Type:Limited liability company
Founder:Jay Bavisi
Location:101 Sun Ave NE
Albuquerque
New Mexico, 87109, U.S.

EC-Council is a cybersecurity certification, education, training, and services company based in Albuquerque, New Mexico.

History

Jay Bavisi is the Founder of EC-Council Holding Pte Ltd,[1] [2] the parent company of all of EC-Council Group of Companies. The first organization of the group, International Council of Electronic Commerce Consultants (EC-Council) was founded in 2001 in response to the September 11 attacks to certify professionals who could protect against attacks on electronic commerce.

EQT Private Equity invested in EC-Council in September 2021[3] EC-Council is the creator of popular certification programs such as CEH,[4] [5] CHFI, ECSA/LPT and the Certified Ethical Hacker (CEH) program for white hat hackers in 2003. EC-Council became a certifier of training courses and exams instead of founding entirely new schools, mobilizing entrepreneurs in the information security training business. CEH courses were offered in more than 60 countries by 2007, and the program expanded rapidly.[6]

As of 2023, the CEH certification is part of the possible certifications to some cyber-security functions within the United States Department of Defense, as part of its Directive 8140.[7] [8]

In 2010, the EC-Council part of the organisations selected by the Pentagon to oversee training of Department of Defense employees who work in computer security-related jobs.[9]

Controversies, shortcomings and plagiarism

In May 2006, the website of the EC-Council was defaced,[10] and again in 2014, restored, then defaced, again, due to password reuse.[11] The attacker managed to exfiltrate sensitive data like passport pictures from the applicants, including notably Edward Snowden's.[12]

On at least two instances, the EC-Council's website has also been prone to Cross-site scripting vulnerabilities. In June of 2011, two vulnerabilities where discovered on, both on the "portal" subdomain.[13] [14] An additional vulnerability was found in May 2013.[15]

During 2011, an EC-Council employee has been using comments spam to advertise the Certified Ethical Hacker certification. This was called a "fictional theory" by Jay Bavisi, President of EC-Council, despite evidences proving otherwise.[16]

The EC-Council has also been holding sexist discourse on several occasions:

In March 2016, the website of the EC-Council was serving the Angler exploit kit. It took several days for the issue to be resolved.[18] [19]

In 2021, the EC-Council took its entire blog down due to apparent systematic copyright violations and plagiarism conducted by its marketing team.[20] [21] [22]

Certifications

EC-Council offers professional certifications for the IT security field, such as Certified Network Defender (CND), Certified Chief Information Security Officer (CCISO), and Computer Hacking Forensics Investigator (CHFI).[23] It also offers certifications in fields related to IT security, including disaster recovery, software security, digital forensics, and general IT security knowledge.

Services and products

EC-Council University (ECCU)

EC-Council University (ECCU) was licensed by the Wyoming Board of Education in 2006, despite major concerns from the state Education Department, including the lack of clarity whether the "school would offer substantive academic activity".[24] It offers bachelor’s and master’s degrees in cybersecurity and graduate certificate programs since 2015.[25] [26]

EC-Council CodeRed

EC-Council CodeRed was launched in 2019 as a cybersecurity learning platform with a library of 4,000 video lessons.[27] It provides "microdegrees" on niche technical subjects.[28]

EC-Council Global Services

EC-Council Global Services (EGS) is the consulting services division of the EC-Council Group. It received CREST membership for its cyber incident response, penetration testing, and vulnerability assessment services in 2020.[29] [30]

EC-Council Aware

EC-Council Aware is a cybersecurity training app that was launched in 2020 for iOS and Android.[31]

EC-Council CyberQ

EC-Council launched its CyberQ platform in 2020. It is a cloud-based cyber range platform that automates the process of using cloud technology to deploy cyber targets.[32]

EC-Council events

EC-Council hosts various IT security conferences including Hacker Halted, Global CyberLympics, TakeDownCon, and Global CISO Forum.[33] [34] [35]

Notes and References

  1. Web site: Jay Bavisi, Founder and CEO of EC-Council. Business Wire. 7 September 2022.
  2. Web site: EC-Council President and CEO Jay Bavisi. Business Insider. 31 August 2020.
  3. Web site: Bloomberg. EQT Private Equity invests in EC-Council. 27 September 2021.
  4. Web site: EC- Council empowers Students through a Seminar on Cyber Security. 12 September 2013.
  5. Web site: EC-Council organizes a seminar on cyber security. India Infoline. 2 September 2013. 27 July 2021.
  6. Web site: Slayton. Rebecca. 2017-02-14. Limn: The Paradoxical Authority of the Certified Ethical Hacker. 27 July 2021. Limn.
  7. Web site: Persectives on Building a Cyber Force Structure. 27 July 2021.
  8. Web site: DoD Approved 8570 Baseline Certifications – DoD Cyber Exchange . 2023-05-18 . public.cyber.mil.
  9. Web site: Pentagon trains workers to hack Defense computers. CNN. 27 July 2021. CNN.
  10. Web site: EC-Council.org Defaced in 2006 . 2023-05-17 . zone-h.org.
  11. Web site: 2015-09-24 . "The Plague" returns to deface EC Council website CSO Online . 2023-05-17 . https://web.archive.org/web/20150924213420/http://www.csoonline.com/article/2137027/malware-cybercrime/-the-plague--returns-to-deface-ec-council-website.html . 2015-09-24 .
  12. Web site: McCormick . Rich . 2014-02-24 . Ethical hacking organization hacked, website defaced with Edward Snowden's passport . 2023-05-17 . The Verge . en-US.
  13. Web site: Nulled Byte . Double nibble URI decoding XSS Vulnerability on EC Council website . 2023-05-17 . The Hacker News . en.
  14. Web site: EC-Council Web Site Vulnerable to Several XSS . 2023-09-13 . attrition.org.
  15. Web site: Charlatan: EC-Council Found Vulnerable to 2nd XSS . 2023-05-17 . attrition.org.
  16. Web site: 2022-07-19 . Who on earth would be trying to promote EC-Council University via comment spam on my website? . 2023-05-17 . Graham Cluley . en-GB.
  17. Web site: Dallaway . Eleanor . 2021-04-11 . The Story of the EC-Council Gender Survey Scandal: Survey Creator Says "It Was Written by Women so it Can't be Sexist" . 2023-05-17 . Infosecurity Magazine.
  18. Web site: 2016-03-24 . Website of security certification provider spreading ransomware . 2023-05-17 . Fox-IT International blog . en-US.
  19. Web site: Goodin . Dan . 2016-03-24 . Certified Ethical Hacker website caught spreading crypto ransomware . 2023-05-17 . Ars Technica . en-us.
  20. Web site: 2021-06-28 . Security training org EC-Council pulls blog over copyright violations, promises editorial improvements . 2023-05-17 . The Daily Swig Cybersecurity news and views . en.
  21. Web site: 2021-06-23 . Ethics in Cybersecurity Marketing – Principles of Value Contribution . 2023-05-17 . Alyssa Miller . en-US.
  22. Web site: Errata: Charlatan - EC-Council (ECC) . 2023-05-17 . attrition.org.
  23. Web site: The Case for Cybersecurity Certifications. 27 July 2021. www.govtech.com. 13 January 2018.
  24. Web site: January 10, 2006 . Gruver . Mead . State licenses online school . Casper Star-Tribune . February 7, 2023 . https://web.archive.org/web/20230207205242/https://trib.com/news/state-and-regional/state-licenses-online-school/article_13f10c1d-9212-55a3-b10d-501b2aad84d3.html . February 7, 2023 . live . "Despite an ongoing push among state education officials to rein in unaccredited colleges and universities, the Wyoming Board of Education on Monday granted a state license to EC-Council University, an unaccredited school that will provide online computer technology degrees from an office in Laramie." .
  25. Web site: About Us Cybersecurity University. 27 July 2021. EC-Council University.
  26. Web site: Directory Of Accredited Institutions . 2023-05-17 . www.deac.org.
  27. Web site: SemiColonWeb. CodeRed Stream Premium Cybersecurity Courses Learn Anytime Anywhere. 27 July 2021. CodeRed.
  28. Web site: SemiColonWeb. CodeRed Microdegrees Learn In-Demand Advanced Cybersecurity Skills. 27 July 2021. CodeRed.
  29. Web site: CREST Member Companies. 27 July 2021. service-selection-platform.crest-approved.org.
  30. Web site: EC-Council Global Services Receives CREST Membership. 27 July 2021. 24-7 Press Release Newswire.
  31. Web site: CISOMAG. 14 October 2020. Looking for an End-user Training Program? EC-Council's Aware App is Just for You. 27 July 2021. CISO MAG Cyber Security Magazine.
  32. Web site: CyberQ – Advanced Cyber Range Solution Provider EC-Council. 27 July 2021. cyberq.eccouncil.org.
  33. Web site: Finalists for EC-Council Foundation's 2019 Global Cyberlympics Announced. 27 July 2021. PRWeb.
  34. News: Goldmeier. Jeremy. White-Hat Hackers: Meet the geeks who make computing safer by exposing its flaws. 27 July 2021. Riverfront Times.
  35. Web site: Global CISO Forum. 16 October 2013. PRWeb.

This article is licensed under the GNU Free Documentation License. It uses material from the Wikipedia article "EC-Council".

Except where otherwise indicated, Everything.Explained.Today is © Copyright 2009-2024, A B Cryer, All Rights Reserved. Cookie policy.