Course Overview课程概述

Hello, and welcome to the Introduction to Ethical Hacking Principles course.
你好，欢迎来到《道德黑客原理导论》课程。

This short course provides a comprehensive introduction to ethical hacking fundamentals, legal considerations, and responsible disclosure processes. You'll explore the distinctions between different types of hackers, examine global cybersecurity laws that govern penetration testing, and learn proper vulnerability reporting procedures. Gain a thorough understanding of the ethical code of conduct, legal boundaries, and best practices for security assessments in various contexts.
本短期课程全面介绍了道德黑客的基础知识、法律考量以及负责任的披露流程。你将探讨不同类型黑客之间的区别，研究全球范围内管理渗透测试的网络安全法律，并学习正确的漏洞报告程序。深入理解道德行为准则、法律边界以及在不同环境中进行安全评估的最佳实践。

By the end of this course, you'll understand the foundational principles of ethical hacking and be equipped with the knowledge to approach cybersecurity testing within legal and ethical frameworks. This course serves as the first step in the IBM Ethical Hacking with Open Source Tools Professional Certificate, establishing the critical groundwork for ethical cybersecurity practices.
完成本课程后，你将掌握道德黑客的基础原则，并具备在法律和道德框架内进行网络安全测试的知识。本课程是 IBM《使用开源工具进行道德黑客》专业证书的第一步，为道德网络安全实践奠定了关键基础。

Throughout the course, you'll engage with interactive elements such as podcasts, role-play activities, and dialogues that provide practical context and reinforce key concepts. These elements are designed to make learning engaging, hands-on, and aligned with real-world ethical hacking practices.
在整个课程中，您将接触播客、角色扮演活动和对话等互动元素，这些元素提供实际背景并强化关键概念。这些元素的设计旨在使学习更具吸引力、实践性，并与现实世界的道德黑客实践保持一致。

Key skills you will gain include:
您将获得的关键技能包括：

• Ethical hacking fundamentals
  道德黑客基础
• Legal and regulatory frameworks
  法律和监管框架
• Compliance and risk awareness
  合规与风险意识
• Responsible disclosure  负责任的披露
• Security reporting  安全报告

Prerequisites  先修条件

This course is designed for beginners in the field of ethical hacking and cybersecurity. Although there are no formal prerequisites, the following background is recommended:
本课程专为网络安全和道德黑客领域的初学者设计。虽然没有正式的先修要求，但建议具备以下背景：

• General understanding of cybersecurity fundamentals (for example, network basics and common cyberthreats)
  对网络安全基础知识的一般了解（例如，网络基础和常见网络威胁）
• Basic familiarity with computer networks and operating systems
  对计算机网络和操作系统的基本熟悉
• Interest in cybersecurity, ethical hacking, or information security roles
  对网络安全、道德黑客或信息安全职位的兴趣

Course objectives  课程目标

After completing this course, you will be able to:
完成本课程后，您将能够：

• Analyze the fundamental concepts and roles of ethical hacking in cybersecurity, including the distinctions between black hat, white hat, and gray hat hackers
  分析网络安全中道德黑客的基本概念和作用，包括黑色黑客、白色黑客和灰色黑客之间的区别
• Evaluate major global cybersecurity laws and legal boundaries to determine compliance considerations for ethical hacking and penetration testing
  评估主要的全球网络安全法律和合法边界，以确定道德黑客和渗透测试的合规性考虑因素
• Identify common legal pitfalls and compliance requirements relevant to penetration testers in various jurisdictions
  识别不同司法管辖区中渗透测试人员常见的法律陷阱和合规要求
• Apply responsible disclosure processes and effectively document and report security findings in accordance with ethical and legal standards
  应用负责任的披露流程，并根据道德和法律标准有效记录和报告安全发现

Course outline  课程大纲

This course consists of two modules, which should take you approximately 4–5 hours to complete. To get the most out of it, ensure you engage with all videos, readings, activities, and quizzes.
本课程由两个模块组成，完成大约需要 4-5 小时。为了获得最佳学习效果，请确保参与所有视频、阅读材料、活动和测验。

Module 1: Ethical Hacking Principles
模块 1：道德黑客原则

In this module, you will gain a solid foundation in ethical hacking concepts, role of ethical hacking in cybersecurity, and the importance of adhering to legal and ethical standards. You will explore the motivations and methodologies of hackers and understand the distinctions between different hacker classifications. You'll examine real-world case studies and understand the code of conduct that guides responsible security professionals. Interactive materials are included here to provide additional context and practical insight.
在本模块中，您将掌握道德黑客概念的基础知识，了解道德黑客在网络安全中的作用，以及遵守法律和道德标准的重要性。您将探讨黑客的动机和方法，并理解不同黑客分类之间的区别。您将研究现实世界的案例研究，并了解指导负责任的网络安全专业人士的行为准则。本模块包含互动材料，以提供额外的背景知识和实践见解。

The module is divided into the following lessons:
本模块分为以下课程：

• Lesson 0: Welcome  课程 0：欢迎
• Lesson 1: Ethical Hacking Fundamentals
  第一课：道德黑客基础

Topics covered in the module:
本模块涵盖的主题：

• Ethical hacking fundamentals
  道德黑客基础
• Hacker classifications  黑客分类
• Code of conduct for ethical hackers
  行为准则：道德黑客
• Real-world ethical hacking cases
  现实中的道德黑客案例

Module 2: Cybersecurity Ethics, Laws, and Responsible Disclosure
模块 2：网络安全伦理、法律与责任披露

This module introduces the legal and ethical frameworks that shape cybersecurity practices worldwide. You will explore global cybersecurity laws such as GDPR, CCPA, and CFAA, and the legal implications for ethical hackers. You'll learn to navigate the complex legal landscape of penetration testing and understand the potential pitfalls that can arise when conducting security assessments.
本模块介绍了塑造全球网络安全实践的法律和伦理框架。您将探讨全球网络安全法律，如 GDPR、CCPA 和 CFAA，以及这些法律对道德黑客的法律影响。您将学习如何在渗透测试的复杂法律环境中导航，并了解在执行安全评估时可能出现的潜在陷阱。

This module focuses on responsible disclosure procedures, bug bounty programs, and effective security report writing. You'll practice drafting vulnerability reports and learn how to communicate security findings professionally.  

The module is divided into the following lessons: 

• Lesson 1: Cybersecurity Laws and Legal Boundaries  
• Lesson 2: Disclosure Processes and Reporting  
• Lesson 3: Course Wrap-up  第三课：课程总结

Topics covered in the module:
模块涵盖的主题：

• Code of conduct and legal compliance for penetration testing
  渗透测试的行为准则和法律合规性
• Major global cybersecurity laws and ethical hacking boundaries
  主要的全球网络安全法律和道德黑客的界限
• Responsible disclosure, bug bounty programs, and security report writing
  负责任的披露、漏洞悬赏计划和安全报告撰写
• Case studies and practical vulnerability disclosure exercises
  案例研究和实际漏洞披露练习

The module includes a course wrap-up summary and a glossary. The module concludes with a comprehensive graded quiz to assess your understanding of ethical hacking principles.
本模块包括课程总结和术语表。本模块以综合评分测验结束，用于评估您对道德黑客原则的理解。

The interactive elements and practice opportunities throughout the course ensure your learning experience is both engaging and practical. This foundational knowledge will serve as the basis for the more technical courses that follow in the IBM Ethical Hacking with Open Source Tools Professional Certificate.
课程中的互动元素和实践机会确保您的学习体验既有趣又实用。这些基础知识将成为 IBM 开源工具道德黑客专业证书后续更技术性课程的基础。

Welcome to your journey into the world of ethical hacking!
欢迎您进入道德黑客的世界！