hey guys welcome to the session by intellipaat ethical hacking and cyber security have been
key in making sure that our data online is secure right to make sure users are authenticated to make
sure that your data and your privacy concerns are all kept safe when your data is out there
online but the question right now to ask is is there a difference between ethical hacking
and cyber security if yes what is the difference while keeping that in mind we here at intellipaat
have come up with the video here to discuss just that well guys before we begin with this session
make sure to subscribe to the intellipaat youtube channel and hit that bell icon so that you'll
never miss any updates from us and also guys if you're looking for certification in ethical
hacking and ceh certification well intellipaat provides a complete course just for this made in
collaboration with the ec council so make sure to check out the intellipaat website for more details
and now without further ado let's take a quick look at the agenda we'll start off by taking a
quick understanding of what cyber security is and after understanding that we can take another quick
introduction to find out and understand what ethical hacking means to us as well afterward
we will consider numerous points and have an in-depth comparison between ethical hacking
and cyber security as well well guys so without further ado let's begin with the session so coming
to the first point of the agenda let's take a quick look at what ethical hacking is you know
it has the term hacking in it which might lead you to think that it is something illegal something
which is not supposed to be done unauthorized all of this right but let me change your opinion
on this because ethical hacking involves using white hat hackers to actually you know check the
system's integrity find all the flaws that exist in a product in a company in a network whatever it
is to make sure that there are no other breaches as well right see white hat hackers are people
who are hired by the company ethical hackers are hired by the company itself or they're part of the
company itself where they themselves will sit and hack the company that they're working for so why
would they do this right i mean they would do this to actually find out and see if there is anything
that's lacking in the company right see so if you yourself can sit hack and find these
potential anomalies and fix them up then there's a good chance that there is no other actual hacker
who would do it because if you're doing it you're doing it just to test your security methodologies
but if someone else is doing it means that he or she has the capability to completely wipe out you
know a lot of important data get access privacy breaches a lot more things right so to avoid all
of that uh you know we use ethical hacking and one of the other things that you really need to know
about ethical hacking is that it's one of the most rapidly growing id career in today's world because
at the end of the day every company out there needs security see we ourselves on social media
we look out for so many things in the cases of privacy in the case of security and what not and
now if you consider the data that's coming in from thousands and thousands of companies across speed
military data be it you know just a product data regular data whatever it is you have to safeguard
all of this and to do that we need to keep testing things to see if the current methodologies work or
not and to do that ethical hikers actually do it really well now talking about the legality
of ethical hacking ethical hacking is completely legal what's not legal is black hat hacking black
hat hacking is when you use methodologies to hack into a system a machine a product or a company
to make uh you know use of it and with an ulterior motive so black hat hacking uses a
lot of technology a lot of methodologies that are not really good hence the name black hat hacking
white hat hacking is when we actually hire hackers and these guys are the ones who use the right
methodologies the right tools the right techniques to uh you know work their way structurally into
the system to breach the system basically and to show where uh you know that the security
methodologies are lacking and comparatively if you compare both white hat and black hat hackers
it creates another generation of hackers they call grey hat hackers where they use both black
hat techniques and uh you know they could they could use a lot of methodologies from white hat
hacking as well but at the end of the day what you should know about ethical hacking is that it's
completely legal it's completely necessary to hack our own companies to see where there are chances
of other people attacking and to fix them coming to cyber security well cyber security i'm sure you
guys would already know what it is because at the end of the day cyber security is one of these huge
fields that we have put into place where we're using it to create a lot of policies methodologies
techniques tools all these being done to make sure we safeguard the data from unauthorized
access now you might be wondering well how is this different from ethical hacking because there too we
are trying to safeguard the data cyber security is also talking about safeguarding the data
well as you'll see in the in-depth comparison you will understand why there is a difference between
cyber security and ethical hacking as well one thing you should know about cyber security is that
it is the most important thing that we require right see ethical hacking can be considered as
a part of cyber security itself but cyber security is the big cloud as i told you even small devices
like our mobile phones smart watches whatever it is we have some sort of security that's put into
place right because we know uh you know if things can go wrong people will misuse it right it's not
that everyone will misuse it but there are certain negative elements that we have to think about as
well to make sure all of that doesn't happen we have cyber security so cyber security expert you
know creates security policies for a company so he or she actually puts into place a couple of rules
and regulations saying this is how things should be done if we should avoid getting hacked and then
there's something called as a risk register that they take care of so risk register is basically
literally a diary which consists of all the data points which can be breached or which are
almost breachable so you know these are like the weak points in the building of or an apartment
or something and people actually take a note of that to make sure they fix it down the line that's
a risk register so a cyber security expert will actually oversee the creation and the maintenance
of the risk register as well and then of course you know today's technology is tomorrow's obsolete
and especially in the world of cyber security to make sure you're one step ahead of all the hackers
you really need to have the capability to you know learn new things rapidly pace yourself and
make use of new technologies to the best of their abilities as well right so in that particular case
a cyber security expert has the capability to you know learn new technology and use it thoroughly as
well and as i just mentioned ethical hacking goes hand in hand with cyber security uh you know more
than the difference but this doesn't mean the difference doesn't exist because there's a huge
difference between ethical hiking and cyber security in the approach and a lot of other
points as we'll be discussing the first point in this comparison between ethical hacking and cyber
security let us check out the mode of working see what happens with ethical hacking is that ethical
hacking concerns with the company people itself breaching their own security methodologies that
are created by cyber security experts right so cyber security experts they create certain
firewalls they create barriers and all of that then later the same company will hire ethical
hackers to make sure to find ways on how they can you know breach these barriers and break down the
firewalls so uh it's a it's a game between these two guys to be very honest with you because
as i told you a cyber security professional has the capability to recognize and resolve any sort
of issues that are present but then there might be some things that are not visible to the naked eye
for a cyber security expert rights there may be back door approaches that one can take into the
company this is where an ethical hacker comes into the picture and then when we're talking about the
end goal of ethical hacking and cyber security ethical hacking is completely concerned about
exploiting the company itself see exploiting in a good way and not a bad way understand that because
here we're trying to find out all the weak points and in fact we're just demonstrating total failure
and security and if you're wondering hey isn't that a bad thing no here it's a very good thing
because we a very good ethical hacker has the capability of hacking the organization and you
know showing uh the failure the victory aspect of ethical hacking is to show failure in the company
because once you know that there is a failure you can have cyber security experts fix that so what
does cyber security experts do well this entire field in general is completely concerned about
you know the creation of policies first of all after the policies have been created you have
to make sure that there is no unauthorized use of these policies or any sort of violation in these
policies that will lead to the unauthorized access of other people as well so in that particular case
cyber security people uh create the policies ethical hackers make sure to find ways to destroy
and work their way into the company with you know bypassing all of these security measures
then they report it to the cyber security team and the cyber security team fixes it this goes
on in an iteration coming to the third point in the comparison it is production environment
see what actually happens is that you know with ethical hacking we trying to evaluate the system
based on all the policies that already exist right these policies have been created by cyber security
experts that the ethical hackers use and evaluate and to see how they can get into the system what
cyber security is completely uh doing in the case of production environment in a company is that
these guys will take care of the auditing of all of the security technologies that
get implemented right see once you have certain technology implemented you need to audit it you
need to keep it in check and make sure that as a cyber security expert you're not leaving any
room for any sort of unauthorized hacking in that particular case this is exactly how it works in a
production environment too a cyber security team involves auditing the security technologies while
ethical hacking is completely concerned with the security policies that are already existent
in the company and that's a very important difference that you have to know about because
cyber security experts can create new policies while ethical hacking experts cannot they have
to work with the existing ones that are there and break them so with this we can move on to
point number four where we'll be talking about reporting in both of these fields let me tell
you that reporting is very very important because ethical hacking actually involves the creation of
very thorough documentation to show what loopholes are present into the in this so ethical hacking
completely involves creating very very thorough documentation because using those documentation
is how you will explain to the company members the people who are not into security uh the people who
are probably a non-technical audience saying hey this is where things have went wrong this is the
thing that we picked up which could lead to a vulnerability so get it fixed so to do all of
that you need to have very good documentation skills and of course ethical hackers have
this skill as well but will you require so much of documentation for cyber security well let me tell
you cyber security is all about maintainability right so having the documentation of how things
are going day to day is more important rather than having things uh you know which are not in
the scope of cyber security there as well so to keep your documentation in check and to keep your
daily working in check you will have documents yes but these documents are more concerned about
maintainability rather than the daily operation as well so in terms of reporting ethical hacking has
a bit of an advantage or an edge here because of the thorough documentation that it offers and then
when we have to talk about client usage well ethical hacking as i just told you it involves
showing the weakness of a product right so when you have a client who comes to you saying hack
my product you're going to take all the measures all the tools all the technique you're going to
hack into the client and you're going to show hey this is where the weaknesses are this is how i
breached into the system this is how people can potentially breach into the system so make sure
you protect these a cyber security expert takes a very different approach because here all we're
trying to show is the latest methodologies the latest techniques that we have and how best we
can implement them to safeguard all the technology that we have to make sure that you know we don't
give a chance to hackers to hack that's the pretty uh simple difference that lies in between how
clients approach ethical hacking experts and cyber security experts and what they get at the end of
it as well coming to point number six we have to talk about problem-solving see problem-solving
is a very important thing because with ethical hacking we take an approach of an attacking stance
because here ethical hacking experts will show you how an attack can be launched how it can
be succeeded you know against a company or an individual or whatever it is and how data can
be stored stolen uh without their permission but with cyber security what we're trying to talk
about as we are trying to show if there is any violation in the policies that exist that might
you know lead to that as well but then if there are no violations in the policies if all of the
security measures are right if all of the policies are right and if they're perfect it means there is
no requirement for an ethical hacker because if your cyber security methodologies and tools and
techniques are bulletproof then you would not require the collectors right but that's not the
case we are hiring more ethical hackers these days than cyber security experts and there's a reason
for that no matter how good your cyber security methodology gets as there's a code that says for
every lock there is a key and for every uh you know lock which is probably a cyber security
firewall a hacker will know how to work around the key so in that particular case ethical hacking
is very very important in solving the problems point number seven that we have to talk about is
data access see what happens is that with ethical hackers right they need to hunt for new methods
they need to hunt for novel things to hack into an already existing security system so an ethical
hacker if he's a person who is uh you know sourced out of the company itself he or she might not have
the access to complete working of the company so he or she is just given the task to see how uh you
know you can get into the system and breach the network but an already existing cyber security
expert in the company will have complete access to the system so they will know it thoroughly in and
out so this is where the expertise of an ethical hacker will come to the picture
it doesn't mean that you know cyber security professional is not an expert because you know
the cyber security methodologies of today are almost bulletproof i want to say that
it's almost bulletproof and at the end of the day you know there's a lot of things that can
be beaten and cyber security systems are uh one of these things as well so ethical hackers need
to have the capability to work completely out of their comfort zone while cyber security people
they will have all the access to the data tools methodologies techniques whatever you name it
and they'll have to work with that coming to point number eight i know you guys are curious about the
job roles that exist in between ethical hacking and cyber security right so ethical hacking
has a lot of roles as well but the major major roles that the world is hiring for right now is
penetration testers and security managers these guys as the names just a penetration tester is
a person who has the capability to uh you know penetrate into a company connected into a network
in an unauthorized way and work with it as well and then when we're talking about cyber security
professionals we have cso we have spc engineers we have security analysis and many many other jobs
as well so if you're thinking about here is there only three or four roles in each of these domains
the answer is no because at the end of the day if you have a product that's probably connected to
the internet you will require some sort of cyber security right so now think about the millions
and millions of computers across the globe that's connected to the internet you need the toughest
cyber security methodologies put into place and you need the most skilled ethical hackers to find
loopholes and fix them right so in that particular case there are many many other job roles
uh you know than just the ones that are mentioned here too so coming to the next point where we talk
about the average salary of these developers ethical hackers actually get a very good pay
somewhere around 122 000 dollars per annum in the usa and around 12 lakhs per annum in india
and cyber security professionals get an average salary somewhere around 135 000 per annum in the
usa and 13 lakhs per annum in india these are the average salaries of both of these domains and you
do have to understand that there will always be a requirement for cyber security experts and ethical
hackers no matter what see the entire world can go into a recession but people will be still hiring
for these guys because they want to keep all their data secure and not lose it just because there's a
recession going on right so when you think about it it's a very bulletproof job that pays a very
good salary there there's always someone hiring for it so if you have enough skills if you are
certified in ethical hacking uh you know a lot of potential employers will be interested to hire you
as well coming to the last point on this comparison which one is easier to learn well
easier to learn is subjective because whenever we talk about ethical hacking you need to be creative
and you need to have a lot of out of box thinking to be able to crack into system right because
see you have to find out ways in which an actual hacker would hack into a system and then you would
have to trace the same steps as well so you need that kind of a thinking you need to have a third
person approach here to make sure you find ways and of course you have to be very very good with
the tools that exist as well to you know break let's say a wi-fi password or to break into a
very uh secure network anything for that matter and then we're talking about cyber security cyber
security actually involves uh detailed learning methodologies you have to learn a lot of tools
you have to learn a lot of techniques uh you know and and the other thing is that right whenever we
talking about cyber security there is no one solution for every problem so each of these
organizations will have their own methodologies their own policies uh their own structures right
they have their entire cyber security architecture which could be unique to their organization so as
in when you progress in your career if you are a part of a very big company you will understand
that their architecture is very different to probably someone else's so in that particular
case whenever we thinking about learnability understand that you can get started with both
ethical hacking and cyber security in a very easy way but as you grow into your career you might
move into tools that are unique to their organizations in the case of cyber security
and with ethical hacking you need to have the capability to learn new tools because at the end
of the day uh you know cyber security companies can provide very good tools very good firewalls
which will prevent ethical hackers from hacking them but then to uh you know allow for all of that
of course ethical hackers will find their way to to get into the systems or actual hackers as well
so in that particular case if i have to pick one i would suggest ethical hacking would be a
little easier and a little more fun uh to begin with as well but then that's my opinion head to
the comment section and of course do let us know yours as well so you might have a question saying
okay i know what ethical hacking is i know what service security is i understand the comparison
that exists but which is better now again this is another very very finicky question to answer
because there is no such thing as one being better than the other right so ethical hacking is a part
of cyber security and ethical hacking will ask you to think completely like a hiker because if you
have the capability to think like an actual hiker it means you can beat him or her at their own game
so you need to play the game you need to you need to be either as good as the hacker uh you know an
actual hiker or be better than he or she to make sure that you know you beat them at their game
that's a very important thing that you should know and then when we're talking about cyber security
right cyber security uh is all about preparing for what comes next right so you'll be planning
for the next attack to make sure you can stop it in a way but you're not you're not wasting
time thinking about what happened in the past how to fix it and all of that because this will
eventually happen you would have fixed a lot of vulnerabilities in the past but your focus as a
cyber security enthusiast or an expert is to make sure that you keep your eyes wide open to to check
what's happening with your product in the near future because uh vulnerabilities are always there
hackers are always waiting on the edge to have an authorized access to your machine so in that
particular case you really need to work on the future rather than dwindling on the past
in the case of cyber security as well so this is the difference that lies in between ethical
hacking and cyber security do head to the comment section and let us know which uh you know you
would prefer or which is uh you know which you're most interested in basically is it ethical hacking
is it cyber security and why so let's head to the comment section i'll be more than happy to
interact with you guys there well we hope this comparison video was very helpful for you all
if you have any more points you want to add any comments any sort of feedback or any
content request make sure to head down to the comment section and do let us know that we'll
be more than happy to help you out on that note i wish you well and i'll see you on the next one