Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 34 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow CEH - Certified Ethical Hackerarrow CEH Recertification (valid for 2 years)
EH-Net
May 25, 2013, 07:36:47 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: 1 2 [3]   Go Down
  Print  
Author Topic: CEH Recertification (valid for 2 years)  (Read 76491 times)
0 Members and 1 Guest are viewing this topic.
Oyle
Sr. Member
****
Offline Offline

Posts: 264


"Man. Nature. Technology".


View Profile WWW
« Reply #30 on: July 25, 2007, 11:33:52 AM »

Even if I WANTED to recertify, there is no place near me to do the exam. The place where I originally passed the exam, does not offer the exam. The school where I did my class has NEVER even offered the exam.

If I want to recertify, I'm looking at LEAST a 2 hour drive. And I don't pass exams on the first time.

Then again how different is the new exam from the one that I did back in Dec. 04??? Maybe they could just do an exam with the new questions covering the "new" material we need to know, and they could also (maybe) drop the price of the exam a little?  Roll Eyes Yeah, Right.

Logged

MCP, MCP+I, MCSA, MCSE(NT4/W2K), CCNA, CCA, NWCCC, VH-PIRTS, CEH
--------------------
"hackers are like jedi, crackers are like the sith: do not fall prey to the dark side".

From 1337 h4x0r h4ndb00k: "the ten laws of geek", law x
                  -Tapeworm
boney
Jr. Member
**
Offline Offline

Posts: 61



View Profile
« Reply #31 on: July 25, 2007, 03:45:16 PM »

Even if I WANTED to recertify, there is no place near me to do the exam. The place where I originally passed the exam, does not offer the exam. The school where I did my class has NEVER even offered the exam.

If I want to recertify, I'm looking at LEAST a 2 hour drive. And I don't pass exams on the first time.

Then again how different is the new exam from the one that I did back in Dec. 04??? Maybe they could just do an exam with the new questions covering the "new" material we need to know, and they could also (maybe) drop the price of the exam a little?  Roll Eyes Yeah, Right.





but for CEH certification it covers more the approach and techniques the crackers use. It has nothing to do with the latest cracks (except for the tools).

CEH aint need recertification.
Logged

C|EH

All my life I wanted a computer...
Now I want my life back !
phreak0ut
Newbie
*
Offline Offline

Posts: 8


View Profile
« Reply #32 on: September 09, 2007, 09:06:53 AM »

Hi to all the senior hackers here. It is really interesting to see the discussion of the validity of the certificate. I am about to join the course and then take up an exam atleast 6 months later. I'm mainly taking up this course because my grad scores ain't too good, but I know that I'm good at networks. I've been reading stuff about security and tried out few things. That's the reason of taking up this course. I found out that the people who take up their test from Jan 2008 will have a validity of 3 years against 2 years which is currently been given to people who pass the exam. I don't understand this "maintenance fees" of $50 which they are collecting. What are they actually maintaining?  Huh

It's also tough to decide if this 'recertifying' should be there. There is both +ve and -ve aspects to it. I agree that we should be kept abreast with the latest technologies and stuff, but once you are into security, there is nothing called 'The latest and perfectly stable'. Everything is outdated in a matter of week. 0-days, vulns, etc are all in a matter of day's work. Since we are expected to know what kind of malware, vulns, virus, trojans we are dealing with, we are actually updating ourselves. Why pay and update from EC-Council when we can get these updates from vendors and other security related sites?

I'm still a bit dazed after going through all the posts. I think I'll be asking a lot more questions to the ATC the next time I visit before I can take up this course.
Logged
Negrita
Sr. Member
****
Offline Offline

Posts: 299



View Profile
« Reply #33 on: September 09, 2007, 03:56:23 PM »

Everything is outdated in a matter of week. 0-days, vulns, etc are all in a matter of day's work. Since we are expected to know what kind of malware, vulns, virus, trojans we are dealing with, we are actually updating ourselves.

hi phreak0ut and welcome.

I disagree with this statement. Firstly the malware taught in the CEH is all the old but very well known malware such as SubSeven, NetBus and Back Orifice trojans, and viruses and worms such as Code Red, Nimda, Sasser and Slammer. The point is to teach the principles behind the malware, how they work and what they do. After all trojans will allways open backdoors and worms will always self-replicate, regardless of how they do it.

Just this week I dealt with 2 Linux boxes that were exploited with malware that's been known since 2002.
« Last Edit: September 09, 2007, 04:10:37 PM by Negrita » Logged

CEH, CCSA NG/AI, NNCSS, MCP, MCSA 2003

There are 10 kinds of people, those that understand binary, and those that don't.
Negrita
Sr. Member
****
Offline Offline

Posts: 299



View Profile
« Reply #34 on: September 09, 2007, 04:05:39 PM »

BTW, you might find this post interesting. I got it from here. (You have to be a member to register and read that forum).

Quote from: Sanjay
Dear Members,

I think it is imperative that I say something to represent the official
stand of EC-Council on this matter as it has generated a lot of debate
and interest.

Firstly, this site IS NOT censored.

Secondly, the ONLY reason I called DARBY is because he and I have
been in communication before over a couple of issues. Since he had
a concern, I saw no harm in updating him.


Thirdly, I find it shocking that there are allegations that no one from
EC-Council is responding. I find it unacceptable. We have over
12,000 members in 60 countries. We have posted a message on this
site that the committee is meeting and discussing this thoroughly.
The CPE points start in JAN 2008. It is not until 2011 before we
“decertify violators!

So lets think logically. Assuming some of you decide not to achieve
the CPE and instead remain as CEH V 4. In 2011, we are looking at
CEH V 11! Do you think you will even stand a chance in the career
market without the CPE to render you updated ?

I am paying particular interest to a post a few days ago that made
some very important comments:

I hope to address it here.


a) The fee of $50.

All major certification corporations charge an administrative fee.

ISC 2 and ISACA too have an annual fee. The proposed fee from
EC-Council is much lower than others.

Having said that , the Certification committee is sensitive to the
needs of our members.

One of the propositions that we have on the table is to remove the
fee altogether.

However, if this is the case, then members will not get any physical
certificates.

Members can then opt to have electronic certificates or physical
certificates at a fee.


b) The issue of Grandfathering :

The whole concept of grandfathering negates the concept of
continuing education.

I would like to reiterate that the while concept of CPE is not
something that EC-Council has dreamt about or made up. This is an
INDUSTRY move towards quality.

Lets debate this issue a little.

How do we verify if a CEH V 2 is up to date with his knowledge?

Every profession requires retraining and education. Accountants,
Attorney’s and even doctors.

Why should our profession be less? Are we saying that Security
Professionals are less relevant?

Would we not increase our value if we prove to the industry that we
are up to date with knowledge in our profession?

This is why SANS, ISC2 , ISACA have all adhered to this standard –
ANSI 17024

CompTIA will follow next as I have met with their leadership last
week , here in the US.

We are trying to set standards so that our members can be proud to
belong to an organization that is committed to quality.

This is a shift in International Certification policy.

I thank the Irish JP for pointing out that apparently EC-Council had
previously stated that certification is for life (based on versions).

As I said above, we do not want to introduce this naturally, but this is
the industry standard. When we said the above, it was because that
was correct at that time. Today, the ANSI rules are applicable and if
we fail to adhere, many of our members will have a lot to loose.

Dod8570 mandates ANSI certification. Soon employers will follow
suit. Do we want CEH to be an ordinary certification or the crème of
the lot? Do we want employers to recognize us as the best in what we
do or as yet another certification?

Having said that, we are trying to get feedback from our valued
members on new policies.

That is why we posted this on this portal – UNCENSORED.

We want to know what is the feedback so that we can improve our
service to our valued members.

I am personally going to speak to the senior management of ANSI
and will keep you all posted.

If grandfathering is acceptable to ANSI, then it will be to us too.

Until then, lets hold our comments.


c) No Information?


Please note that we had posted the intention for ECC to adhere to
ANSI17024 . Many of you do not accept mails from
editor@eccouncil.org and as such, it may have been in your spam
box.

Here is the excerpt of what was sent.


EC-Council Continuing Education Program Begins in 2008
Beginning 1 January 2008, EC-Council certified professionals will
need to maintain their security certifications. With the introduction of
the EC-Council Continuing Education (ECE) Program, EC-Council
certified professionals will be required to continuously gain
knowledge and re-educate themselves so that they are constantly
aware of the latest issues surrounding the security industry.
EC-Council certification titles which will be part of the ECE program
include:
0.     Certified Ethical Hacker
0.     Computer Hacking Forensic Investigator
0.     Certified Network Defense Architect
0.     EC-Council Certified Security Analyst
0.     Network Security Administrator
0.     EC-Council Certified Secure Programmer
EC-Council certified professionals must meet the ECE program
requirements or face revocation of their certification title. Individuals
whose certification title has been revoked due to non-compliance will
need to retake the certification exam to receive the said certification
title again. An appeal process is in place for members who intend to
oppose a revocation.

Members can earn ECE points through various means such as by
taking the latest version of a certification’s exam, attending EC-
Council events and webinars, and writing information security
articles. A more detailed list of ECE points earning activities is
available on the EC-Council website.

For more information on the ECE program, please visit the ECE
webpage.

I hope this sheds some light to all of you.

Any change is always difficult to accept. However, we are entrusted
to protect the certification and the image of the CEH holders
worldwide.

This is the same process that ISC2 , SANS and even ISACA went
through.

I hope some of you will take it positively and see what the true
intentions are.

$50.00 can't even cover the set up and admin costs of the new portal
to hold , maintain and track the points of the thousands of the
members. I am personally "for" the removal of the fee if that makes
the members happier.

Nothing is more important that our certified members.


Thank You,

Regards,

Jay Bavisi
President,
EC-Council
jay@eccouncil.org
« Last Edit: September 09, 2007, 04:07:56 PM by Negrita » Logged

CEH, CCSA NG/AI, NNCSS, MCP, MCSA 2003

There are 10 kinds of people, those that understand binary, and those that don't.
LSOChris
Guest
« Reply #35 on: September 09, 2007, 07:08:56 PM »

i'm too lazy to log into the portal and post it but my question back to him would be...

how is the CEH v2 that paid his 50 bucks and watched some web casts an up to date security professional?

Logged
jimbob
Guest
« Reply #36 on: September 10, 2007, 04:11:55 AM »

I think it's important for both EC Council and the cert holders to understand why certifications are important. I personally see a certification as a stamp that the holder has completed their basic training and in obtaining the certification has set their aims on becoming a professional. This is not to say that CEH holders are not professionals, but solely having CEH doesn't a professional make.

The very least I would expect from a graduate if that they have studied the course material, akin to any other student studying for an exam. I wouldn't let a physics graduate operate my nuclear reactor* based solely on their academic qualification. If EC Council want to make this a professional accreditation rather than a vocational qualification then I believe the standards need to be much higher. CEH should be the minimum qualification for acceptance as an associate member, and more credit should be given to those who have passed advanced exams or achieved credit from published material.

Jimbob

*Note to the IAEA, I don't have any operational or fuelled nuclear reactors. I don't need a visit from Hans Blix, thank you.
Logged
phreak0ut
Newbie
*
Offline Offline

Posts: 8


View Profile
« Reply #37 on: September 10, 2007, 11:15:21 AM »

hi phreak0ut and welcome.

I disagree with this statement. Firstly the malware taught in the CEH is all the old but very well known malware such as SubSeven, NetBus and Back Orifice trojans, and viruses and worms such as Code Red, Nimda, Sasser and Slammer. The point is to teach the principles behind the malware, how they work and what they do. After all trojans will allways open backdoors and worms will always self-replicate, regardless of how they do it.

Just this week I dealt with 2 Linux boxes that were exploited with malware that's been known since 2002.

Hi Negrita, thanks for the welcome Smiley
Don't you think that though CEH is updating constantly and the cert meant for people who know about malware, the malwares which you had mentioned above(being the famous ones) should be known by every security guy? The basic principles of a trojan, virus and a worm should be known right?  Roll Eyes I'm surprised that you could still find linux boxes exploited. Were they updated? I think this is gonna be an interesting discussion Cheesy
Logged
Negrita
Sr. Member
****
Offline Offline

Posts: 299



View Profile
« Reply #38 on: September 10, 2007, 03:42:26 PM »

Well not everyone knows all aspects of security which is one reason they teach you the basics. The "how they do it" part i mentioned above will always change and that's the reason for updating and keeping abreast of the latest technologies. Another reason is that there are new technologies out now that weren't around when the first versions of the exam came out such as USB drives or blue tooth.

I agree that it's important to keep up to date, and I appreciate EC-Councils efforts to force the certified community to keep abreast of what's happening. I don't think the maintenance fee is going to make a difference to the standard of the course material or the level of the exam. If EC-Council wants or needs more money they should raise the charges of the present cert exams instead of taking it out of the pockets of members that are already certified.

Also I think it most unfair on the part of EC-Council to promise life time certification, and then to turn around and say that the cert will only be valid for 3 years with no grandfathering of those who spent time and money to get the certs. On that thread I linked to above there were people that posted saying that the life time certification was a major factor in them choosing to get the CEH as oppsed to other certs that require recertification, and now EC-Council has let them down.

Finally I'd rather not discuss the finer details of how my customers boxes got cracked. Just FYI theses were 2 separate boxes from 2 separate customers in totally different parts of the world, exploited by the same cracker (or cracker group). The software running was the latest up to date.
Logged

CEH, CCSA NG/AI, NNCSS, MCP, MCSA 2003

There are 10 kinds of people, those that understand binary, and those that don't.
phreak0ut
Newbie
*
Offline Offline

Posts: 8


View Profile
« Reply #39 on: September 11, 2007, 06:38:49 AM »

Finally I'd rather not discuss the finer details of how my customers boxes got cracked. Just FYI theses were 2 separate boxes from 2 separate customers in totally different parts of the world, exploited by the same cracker (or cracker group). The software running was the latest up to date.

I'm kinda getting the things which you really want to tell. Can't we all oppose the $50 fee?? I think if everyone did that, they might pull it out.

Well, I'm surprised this cracking is doing stuff which ain't supposed to be done. I hope you catch them. All the best.
Logged
EmanoN
Newbie
*
Offline Offline

Posts: 41


View Profile
« Reply #40 on: September 13, 2007, 01:34:42 PM »

This is just more evidence of the fraud the Ec-council has committed on the IT world. Their certification process is expensive and has little value as far as proving someone’s ability to hack.  You can pass their examine with a “brain dump” and most people that pass still cant hack their way out of a paper bag. There are those that think this certification is doing more harm than good to the IT community.  If you feel a company should trust the average newly certified CEH to test and certify a critical network is safe and rely on that, that’s dangerous to say the least.  Hey, but that’s ok because Hackers love that and in the meantime the EC-council gets rich duping the unsuspecting.   
« Last Edit: September 13, 2007, 02:15:30 PM by EmanoN » Logged
jackveneno
Newbie
*
Offline Offline

Posts: 6



View Profile
« Reply #41 on: February 20, 2009, 02:26:15 PM »

It has been a while since this post been updated and wanted to see if most of you were able to get your cert renewed and if the process was changed for the best or is it still the same?
After the initial post when they finally provided us with the ECE delta page I was able to get most of my points in and renewed till 2011, hopefully they haven’t made drastic changes that I am out of the loop on since I try to go into the forums and can’t find any new information on this.

Thank you
Logged
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #42 on: February 21, 2009, 08:30:13 AM »

It has been a while since this post been updated and wanted to see if most of you were able to get your cert renewed and if the process was changed for the best or is it still the same?
After the initial post when they finally provided us with the ECE delta page I was able to get most of my points in and renewed till 2011, hopefully they haven’t made drastic changes that I am out of the loop on since I try to go into the forums and can’t find any new information on this.

Thank you


It's mostly the same right now.

There will be some changes to the guidelines coming soon (hopefully within a month). I'll be making a post here once they are finalized, so keep a look out for it.

BillV
Logged
Krizzc
Newbie
*
Offline Offline

Posts: 12


View Profile
« Reply #43 on: March 04, 2009, 06:09:39 PM »

When I did my C|EH last month we found info suggesting it was valid for 3 years and made no more mention of maintenance fees Huh

Who checks the certs on a CV anyway? Is your certificate dated Huh
Logged

CCNP, CCSP, MCSE:Security, C|EH
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #44 on: March 04, 2009, 06:52:10 PM »

3 years is correct, and there are no maintenance fees.

The version number would date your EC-Council certification. Some employers will check into the validity of your certification if you have it listed on a CV/resume.

BillV
Logged
Pages: 1 2 [3]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.076 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.