imported>重庆轨交18：使用HotCat已添加Category:2001年美国建立

2026-03-12T11:58:15Z

使用HotCat已添加Category:2001年美国建立

新页面

{{NotChineseTitle|time=2024-08-09T08:44:36+00:00}}
{{Infobox company
| name = EC-Council
| logo = Ec_Council_Logo.png
| alt = 
| type = [[有限責任公司]]
| foundation = {{Start date and years ago|2001}}
| founder = Jay Bavisi
| defunct = 
| location = 美國[[新墨西哥州]][[阿布奎基 (新墨西哥州)|阿布奎基]]
| num_locations =
| homepage = {{URL|https://eccouncil.org/}}
}}

'''EC-Council'''是美國公司，從事[[網路安全]]認證、教育、及訓練工作，地點在美國[[新墨西哥州]][[阿布奎基 (新墨西哥州)|阿布奎基]]。

==歷史==
Jay Bavisi是EC-Council Holding Pte Ltd的創辦人<ref>{{cite web|title=EC-Council to Increase Development of Ethical Hackers to Address Mounting Shortage of Cybersecurity Professionals|website=Business Wire|url=https://www.businesswire.com/news/home/20220907005072/en/EC-Council-to-Increase-Development-of-Ethical-Hackers-to-Address-Mounting-Shortage-of-Cybersecurity-Professionals|date=2022-09-07|access-date=2024-08-10|archive-date=2024-07-17|archive-url=https://web.archive.org/web/20240717225805/https://www.businesswire.com/news/home/20220907005072/en/EC-Council-to-Increase-Development-of-Ethical-Hackers-to-Address-Mounting-Shortage-of-Cybersecurity-Professionals|dead-url=no}}</ref>，此公司是所有EC-Council公司集團的母公司。集團的第一個公司International Council of Electronic Commerce Consultants（EC-Council）是在2001年成立。

EQT私人股權投資公司在2021年9月投資EC-Council<ref>{{cite web|website=EQT Private Equity|url=https://eqtgroup.com/news/2021/eqt-private-equity-invests-in-ec-council-a-global-leader-in-cybersecurity-training-and-certification/|title=EQT Private Equity invests in EC-Council, a global leader in cybersecurity training and certification|date=2024-08-10|access-date=2021-09-27|archive-date=2024-09-17|archive-url=https://web.archive.org/web/20240917114659/https://eqtgroup.com/news/2021/eqt-private-equity-invests-in-ec-council-a-global-leader-in-cybersecurity-training-and-certification/|dead-url=no}}</ref>。EC-Council創建了一些資訊安全的認證，例如{{le|認證道德駭客|Certified ethical hacker}}（Certified ethical hacker，簡稱CEH）<ref>{{Cite web|url=https://www.eccouncil.org/cyber-security-seminar-empowering-students/|title=EC- Council empowers Students through a Seminar on Cyber Security|date=12 September 2013|access-date=2024-08-09|archive-date=2023-02-05|archive-url=https://web.archive.org/web/20230205162342/https://www.eccouncil.org/cyber-security-seminar-empowering-students/|dead-url=no}}</ref>、資安鑑識調查專家（Computer Hacking Forensic Investigator，簡稱CHFI）、ECSA/LPT（EC-Council Certified Security Analyst/Licensed Penetration Tester），以及2003年針對[[白帽黑客]]的CEH計劃。EC-Council是提供訓練課程及考試的認證中心，動員企業投入[[資訊安全]]的訓練課程。2007年已在超過70個國家提供CEH課程<ref>{{cite web|last=Slayton|first=Rebecca|date=2017-02-14|title=Limn: The Paradoxical Authority of the Certified Ethical Hacker|url=https://limn.it/articles/the-paradoxical-authority-of-the-certified-ethical-hacker/|access-date=27 July 2021|website=Limn|archive-date=2024-09-11|archive-url=https://web.archive.org/web/20240911064459/https://limn.it/articles/the-paradoxical-authority-of-the-certified-ethical-hacker/|dead-url=no}}</ref>。

在2023年時，CEH認證已成為美國國防部網路安全功能的可能認證項目之一，列在Directive 8140裡<ref>{{cite web|title=Persectives on Building a Cyber Force Structure|url=https://ccdcoe.org/uploads/2018/10/Starr-Perspectives-on-Building-a-Cyber-Force-Structure.pdf|access-date=27 July 2021|archive-date=2024-09-18|archive-url=https://web.archive.org/web/20240918213241/https://ccdcoe.org/uploads/2018/10/Starr-Perspectives-on-Building-a-Cyber-Force-Structure.pdf|dead-url=no}}</ref><ref>{{Cite web |title=DoD Approved 8570 Baseline Certifications – DoD Cyber Exchange |url=https://public.cyber.mil/wid/cwmp/dod-approved-8570-baseline-certifications/ |access-date=2023-05-18 |website=public.cyber.mil |archive-date=2023-03-13 |archive-url=https://web.archive.org/web/20230313031559/https://public.cyber.mil/wid/cwmp/dod-approved-8570-baseline-certifications/ |dead-url=no }}</ref>。

==認證==
EC-Council提供[[電腦安全]]領域的[[專業認證]]，例如網路防禦專家（Certified Network Defender, 簡稱CND）、資安長認證（Certified Chief Information Security Officer, 簡稱CCISO）及資安鑑識調查專家（Computer Hacking Forensic Investigator，簡稱CHFI）等<ref>{{cite web|title=The Case for Cybersecurity Certifications|url=https://www.govtech.com/blogs/lohrmann-on-cybersecurity/the-case-for-security-certifications.html|access-date=27 July 2021|website=www.govtech.com|date=13 January 2018|archive-date=2024-11-26|archive-url=https://web.archive.org/web/20241126022054/https://www.govtech.com/blogs/lohrmann-on-cybersecurity/the-case-for-security-certifications.html|dead-url=no}}</ref>。EC-Council也有其他相關領域的認證，例如[[災難恢復]]、軟體安全、[[數位鑑識]]等。

== 爭議 ==
在2006年5月，EC-Council的網頁遭到{{le|網頁竄改|Website defacement|竄改}}<ref>{{Cite web |title=EC-Council.org Defaced in 2006 |url=http://zone-h.org/mirror/id/4100630?hz=1 |access-date=2023-05-17 |website=zone-h.org |archive-date=2025-01-23 |archive-url=https://web.archive.org/web/20250123153945/http://zone-h.org/mirror/id/4100630?hz=1 |dead-url=no }}</ref>，2014年又被竄改，之後復原，然後再次被竄改，後來才復原，原因是因為密碼重覆使用<ref>{{Cite web |date=2015-09-24 |title="The Plague" returns to deface EC Council website {{!}} CSO Online |url=http://www.csoonline.com/article/2137027/malware-cybercrime/-the-plague--returns-to-deface-ec-council-website.html |access-date=2023-05-17 |archive-url=https://web.archive.org/web/20150924213420/http://www.csoonline.com/article/2137027/malware-cybercrime/-the-plague--returns-to-deface-ec-council-website.html |archive-date=2015-09-24 }}</ref>。攻擊者成功竊取了一些敏感資料，像是認證道德駭客申請者的護照照片，其中也包括[[愛德華·斯諾登]]的照片<ref>{{Cite web |last=McCormick |first=Rich |date=2014-02-24 |title=Ethical hacking organization hacked, website defaced with Edward Snowden's passport |url=https://www.theverge.com/2014/2/24/5441386/ethical-hacking-organization-website-defaced-with-snowden-passport |access-date=2023-05-17 |website=The Verge |language=en-US |archive-date=2025-01-19 |archive-url=https://web.archive.org/web/20250119210343/https://www.theverge.com/2014/2/24/5441386/ethical-hacking-organization-website-defaced-with-snowden-passport |dead-url=no }}</ref>。

EC-Council網站至少二次有出現[[跨網站指令碼]]的漏洞。在2011年6月有發現二個漏洞，都在portal的子網域<ref>{{Cite web |last=Nulled Byte |title=Double nibble URI decoding XSS Vulnerability on EC Council website |url=https://thehackernews.com/2011/06/double-nibble-uri-decoding-xss.html |access-date=2023-05-17 |website=The Hacker News |language=en |archive-date=2024-08-10 |archive-url=https://web.archive.org/web/20240810210618/https://thehackernews.com/2011/06/double-nibble-uri-decoding-xss.html |dead-url=no }}</ref><ref>{{Cite web |title=EC-Council Web Site Vulnerable to Several XSS |url=https://attrition.org/errata/charlatan/ec-council/eccouncil-xss.html |access-date=2023-09-13 |website=attrition.org |archive-date=2025-01-23 |archive-url=https://web.archive.org/web/20250123160246/https://attrition.org/errata/charlatan/ec-council/eccouncil-xss.html |dead-url=no }}</ref>。在2013年5月也發現另一個漏洞<ref>{{Cite web |title=Charlatan: EC-Council Found Vulnerable to 2nd XSS |url=https://attrition.org/errata/charlatan/ec-council/eccouncil-xss-2.html |access-date=2023-05-17 |website=attrition.org |archive-date=2025-01-23 |archive-url=https://web.archive.org/web/20250123154302/https://attrition.org/errata/charlatan/ec-council/eccouncil-xss-2.html |dead-url=no }}</ref>。

==參考資料==
{{Reflist}}

[[Category:计算机认证]]
[[Category:專業職稱與認證]]
[[Category:2001年美国建立]]

EC-Council - 版本历史

imported>重庆轨交18：​使用HotCat已添加Category:2001年美国建立

imported>重庆轨交18：使用HotCat已添加Category:2001年美国建立