The recent and explosive growth of Internet and technology has many good things, such as e-commerce, collaborative computing online markets and new channels for the exchange and dissemination of information brought. But every party has its counterpart, with the technological progress and piracy. With this dark side and the many related vulnerabilities, enterprises, governments and individuals are afraid of hackers break into their servers or networks to steal valuable data, collect and intercept passwords, credit card information and finance. And can be many times this reality. Recently there was a spate of security breaches at large organizations such as Western Union, a security vulnerability on its website that we reported was loose credit and debit card information for 15,700 customers. Another recent case, the hacker is a 16-year-old who admitted hacking into military computer networks and NASA. Its activities have caused a halt three weeks of NASA systems and affect the security of a military computer network that protects against the conventional, biological, chemical and nuclear attacks. It is only a small portion of actual hacks. Most observers agree that the industry only a handful of security holes are never disclosed. For years, most crackers hacked a computer network for the same reason: “Because it’s there.” But this is not the only reason or even dominant. More hackers are doing now, because it is “Where the money.” During the last decade, the hackers from script kiddies, the websites are hacked and professionals from foreign governments and organized crime sponsored spread changed. Pirates of today want more infamy. They use new technologies to crack the systems or hack into computer systems and hold data for ransom. Hackers now committing real crimes, sometimes for financial benefits. To protect against modern pirates, most companies and authorities, the vulnerabilities and network security system to discover, you have two options: they can hire a team of experts to analyze the penetration of the probe and discover their systems and their vulnerabilities, or they can wait for a malicious hacker to find and exploit them. Unfortunately, many times, it is the latter. An analysis of the security or penetration testing, from a security consultant would be carried out, report, or a Security Posture Assessment, detailing all discovered vulnerabilities and minimize the necessary measures to address the risk and the victim of a successful hack attack. The security consultant and penetration of experts can be a hacker “white” means a person, ethical hacking, to find vulnerabilities in a network or a reform of the “hacker noir”, which was once used active role in the dark side and used identified vulnerabilities to exploit. The issue of whether it is ethical to use former hackers to is to assess the network security is a topic that is often hotly debated – and for many reasons. Ethical Hacking and security consultants are usually very strong programming and computer networking skills, and is in the computer and networking business for several years. Their knowledge and know-how will be a thorough knowledge of hardware and software, project management skills and methods necessary to verify the actual vulnerability, as well as in the statement added after the test was made. In addition, ethical hacking seminars, courses and certifications for IT professionals to offer their horizons and skills to expand in these areas. But many times these courses and seminars, which give an insight very limited piracy, piracy of date or just the basic techniques of hacking. Its main objective is to train experts, but not create a new generation of hackers. The goal is to vulnerabilities, not exploiting them to fill. One disadvantage that white consultants and security hackers more piracy have real world experience and knowledge at a glance. There are many things that can not be taught in a seminar or from a book. The most obvious advantage of the former pirate, piracy is the real world experience. Since each network system differs depending on which network will be immune and configuration of the Hack, an approach and only one person with many real-world hacking experience can efficiently move with one technique to another as required by situation. Another positive aspect of the reform hire hackers as security consultants, is that staying on the latest exploits of vulnerabilities and con-action part of their work. A good hacker has a level of knowledge of the security that goes far beyond that of most other professionals. Keeping up with the exploits and cons of measures in full-time employed, and although the IT professional has an acceptable level of knowledge of security, you should focus most of their attention on the daily tasks of keeping the network running. To fill these gaps “many hackers and security consultants white based on vulnerability and automated trading software and penetration, can provide the necessary security reports, but their functions are limited. The large differences may be considered if By comparing the results of the automatic analysis and evaluation of hackers or professional penetration testing. But before a company decides to hire a hacker reform, we evaluate the negative aspects. Granted, there are several ways hackers can be found. A type them hats are often “gray” – that Salary yourself to find the error, with the improvement of security for all. They are the best hackers, because their passion for excellence drives DIY and they do not break laws. Black Hat Hacker – breaking criminals – the law and entitled to feel this to . do you have the kind of hackers looking to increase their visibility in the hacker community, while others want to prove at any price that the security of its objectives is jeopardized. black hats devastation not only by their own actions, but also the attention to the weaknesses and cyber criminals can exploit. The last and most serious type of piracy is cyber-criminals to commit the worst crimes. They get paid to use the existing tools and techniques to confidential personal information that the government or the industry to steal especially financial data. Cyber criminals usually for foreign governments, organized crime or whatever. Most likely, negative in the process of decision making is a matter of trust. pirates take what you can and how can one trust them? The central premise of security is to decide who you trust, and the lockout everyone. If the setting of a hacker as a security consultant, because of network security, paradoxically, is the confidence of criminals. Not only is the trust factor plays an important role in the decision-making, but the impact of the decision on customers and shareholders have. How will customers react if they knew a former criminal, had been engaged to ensure the safety of the test system or a database that contains all your personal and financial information? someone with questionable morals and Judging is not someone who would have control over a corporate network with sensitive data. In most cases of piracy, and that makes piracy not appreciate or respect standard business processes and structures. A disgruntled hacker with knowledge networks within a company could be a nightmare scenario. The Pirates are like adventurers, motivated by intellectual curiosity. “The more certain you get your systems, the more. The hacker mind-set is like Exploring Space, unless they explore the Net. If these important curiosity to find out how things work, the people, what causes for hackers, go, then you have to do not necessarily want that man as a hacker or a security consultant. However, just because a hacker’s desire and ability to explore a network has not necessarily make them ready to build a secure network and correct the weaknesses identified. Breaking things do not always know how to solve them. They are two different skills. Once security threats were identified, they must be concerned with potential business process by the vulnerability, with a list of evaluations and disadvantages of measures. Besides the technical knowledge, the attacker must have experience in business and management, forward its findings to the company. Another factor to consider when hey take a decision committed to as a security consultant to, this is not a secure system to ever complete, especially considering the human factor. spend vast sums of money pursuing an absolute certainty, not by hiring security consultants to help and may depend on them will be. Some companies in certain sectors have to protect against the penetration of tech-hungry foreign governments – especially China, France, Israel, Japan, Germany and Russia – which has changed its spy machines in the Cold War “spy” units, but not apply to all companies. A realistic set of goals to what is expected to be set first by a security consultant. But whatever the decision, and if the company hires a professional security consultant or a reformed hacker, the real threat is always there. no hacking, which is a system always try to use the path of least resistance will operate. The path of least resistance is often through the front door. The leave at the door “identified” as the area that may have the least influence in the business: people. The people are the weakest, but the first term, when it comes to security. With good skills in social engineering and not very well-qualified employees, workers and disgruntled ex-employees, an attacker can obtain enough information to get access to insert malicious code that keys and network sniffers include more opportunities to gather information. The hacker has “exchanged” his keyboard to social engineering. And it is part of the security when a security consultant educated people and a hacker reform will not be able to help.