We use the certification tag for questions about programs designed to vouch for an individual's competence in security-related work. Use the "compliance" tag for programs like PCI-DSS that assess the security of a server.

learn more… | top users | synonyms

-2
votes
2answers
50 views

Which is first job or certificates

Here goes a question I have in my mind after I finish my study and start looking for a job. I have visited many recruiting websites and also clicked on many career tabs on companies websites. There ...
6
votes
6answers
3k views

eCPPT vs. OSCP Certification

I am a soon to be college student. I am looking to become certified in pentesting for both personal interest as well as to be able to have something that would look good to future employers. Both ...
1
vote
4answers
296 views

What is the difference between active reconnaissance and scanning/enumeration

I have just started studying for CEH exam v8 and I am trying to get the core of so called hacking phases. I could not totally understand the practical difference between the first two phases. In ...
2
votes
1answer
83 views

help developer choose correct path to go down for security certifications [duplicate]

Sorry if this is a duplicate however I felt it was a little more unique than the answers I found. Basically I am a software developer and I have moved recently into an architecture role. Throughout my ...
6
votes
2answers
242 views

Is industry experience the only way to a CREST certification?

I hope this question is direct enough for the stackexchange format, my apologies if it is not, please feel free to downvote to close. I'm interested in pursuing a CREST certification, however it ...
1
vote
0answers
29 views

Certification Advice for an Academic [closed]

I have a PhD and some research the past several years in information security. The past four or so years I have also been working in a primarily administrative IT role at a University that involved ...
1
vote
1answer
28 views

Security certification of software products: what about libraries or third-party services?

How the security certification works if the software uses third party libraries or services? E.g., if someone would like to certify a software product following Common Criteria standard (let's say, ...
0
votes
1answer
128 views

How to make a decent Certificate Signing Request (CSR)?

I'd like to know how to make a decent Certificate Signing Request (CSR) to secure my website and e-mail with a wildcard SSL certificate. With recent exploits as POODLE on SSLv3 and such, I'd like to ...
0
votes
2answers
222 views

CEH training courses requirements

What are the requirements for studying CEH? Is there any requirements for the programming background? And can anyone apply for it or does he has to have a recommendation for both studying and taking ...
-1
votes
3answers
664 views

what are the best security certifications for beginners with no experience in IT [closed]

I want to make a career change from administration to IT but I have absolutely no experience and no certifications in IT. I am interested in information security and networking. So what certifications ...
0
votes
2answers
140 views

Advice - When just starting your career, what are the best certifications to eyeball? [closed]

Im just starting out in school to study Network and Info Security. I know this is the field I want to invest my time and study into. Well over 200k security jobs went unfulfilled last year. My ...
0
votes
2answers
444 views

Course Material for GPEN Certification?

I am planning for GPEN certification, although i have been extensively involved in penetration projects, still looking at the topics it seems a bit difficult.. what could be good study guide for ...
23
votes
10answers
13k views

Good (preferably free) resource for CISSP practice questions

I'm looking to sit for my exam in a few weeks, and I want to have a good set of practice tests to bounce against and make sure that I'm up to par with the types of questions that will be asked.
1
vote
1answer
304 views

What is the relationship between Suite B and FIPS 140-2?

What is the relationship between the Suite B algorithms and FIPS 140-2 certification? Does OpenSSL meet both criteria? From what I've read, it seems that OpenSSL's crypto library implements many ...
12
votes
7answers
9k views

How useful is CISSP to a recent graduate?

I am a recent graduate and would like to move into the IT Security field. My degree was just straight CS with no particular security focus. I have recently acquired a copy of a CISSP study guide and ...
-2
votes
1answer
69 views

Certifications comparisons

I have been asked to compare "officially" some pentest certifications, namely: GIAC CEH OPST OSCP ...and if you have some more, they're welcome! Now, I have my points of view and I don't want ...
1
vote
2answers
61 views

Ways to certify a SaaS for security [closed]

Is it common for small companies to get security certificates/compliance from audit agencies for their SaaS to present to customers for their assurance? If so what are the suggested certifications?
0
votes
1answer
78 views

Worthy security related certifications for a software engineer [closed]

I am a software engineer with an interest in expanding my knowledge in the security field. In addition to security.stackexchange and OWASP, I am currently reading the book "The web application ...
25
votes
5answers
3k views

Professional certifications for IT Security

Which credentials of the sub-list of IT certifications (as per the Information Systems Security Association) would be considered MUST HAVE for a IT Security specialist. Information Security CEH ...
1
vote
3answers
172 views

Reading to Decide on a career switch [duplicate]

I have a strategy consulting and sales background, but what I read about IT and IT Security sounds fascinating as an outsider. I'm considering a career switch, but would need to know quite a bit more. ...
6
votes
1answer
259 views

What compliance problem does “Common Criteria Certification” solve?

It has been said Common Criteria solves a "Compliance problem, and not a security problem". Can someone explain where CC certification is required or benefits an industry? Is it simply a marketing ...
2
votes
3answers
314 views

Certifications that involve practical knowledge

After a lot of googling and searches on forums, it was apparent that certificates like CEH and CISSP incorporated a lot of theory in them and were useful as an added for job. Are there any ...
10
votes
2answers
828 views

Security quiz for developers

Does anyone know of a short security quiz that could be administered online, to test the security knowledge of a developer? I'm looking for something simple to administer and simple to grade, ideally ...
-2
votes
2answers
656 views

Evaluating candidates for Hacker/Pen Test Positions [closed]

If I need to employ Penetration Testers, what are the procedures to follow and how to examine candidates to know their skills and qualifications. Also, I need to know what are the ...
5
votes
1answer
2k views

New Certification: C|CISO. Where it stands?

I recently found a new professional certification: C|CISO, currently in the grandfathering stage. It seems to be targeting security professionals that want to prove they are suitable for C level ...
3
votes
0answers
96 views

Suggested books to study for CISSP? [duplicate]

Possible Duplicate: Good (preferably free) resource for CISSP practice questions I intend to study to take the CISSP exam within the next few months. Could anyone who's taken the CISSP ...
1
vote
2answers
129 views

Does Convergence solve the problem of hacked CAs?

My question is about the Firefox AddOn Convergence. So my question is if it is possible for convergence to observe that a phishing-site which is verified by fake Certificate because a hacker of a CA ...
19
votes
7answers
13k views

Comparing online security courses: eLearnSecurity vs. Offensive-Security

I'm a web programmer, using the Linux environment for 2 years.(I have experience with Web app hacks +Web app security techniques) I want to start studying security in-depth, but I have limited time ...
5
votes
4answers
4k views

What are the basic certification course for beginners?

I am an application developer in MNC with 2 year experience. What are the basic certification or course should I do what can help myself to shift in security field?
4
votes
4answers
3k views

Definitive certification list [closed]

What are a list of useful certificates for someone who wants to work on the information security field? I have heard of CISSP but from what I have understood it is way too advanced for someone new to ...
2
votes
1answer
222 views

Career path: Is going for PMP along with having a rich experience in the InfoSec field a good career move?

I think the title pretty says it all. Do you think that if one has experience in implementations of security and network solutions, and then gets to become a PMP, will that be an added value to his ...
-3
votes
2answers
814 views

Cheap, Foot-in-the-door certifications? [closed]

Could you recommend cheap certifications to get your foot in the door of the industry.
3
votes
2answers
897 views

Coverage of OSCP training

Is there any part related to penetration that OSCP/OSCE fail to cover in their training programs? How much will I be exposed to penetration techniques after completing OSCP/OSCE?
2
votes
3answers
3k views

GSEC or GCIH, for a Security Analyst?

I've been with this confusion of getting a certification for a long time!! With the aim of becoming a Security Analyst/Tester, and for a good kick start, which one of these two is good? GSEC or GHIC?? ...
2
votes
2answers
258 views

Security model for datacenters

I have several datacentres and now I want to plan security for it, so it's resilient to external attacks. I need to make a security model which will cover my web servers, auth servers, log servers, ...
3
votes
3answers
7k views

OSCP certification for junior pen tester position any good?

Currently finishing my degree in computer security and have a few years experience in IT support and want to get into a junior pen testing job or similar. Would the OSCP certification do me any ...
4
votes
6answers
1k views

Information Security Career tracks - Academically vs. IT certifications

I will try to be as straightforward as possible here. I am currently working as a security integrator at an integration company. I work with products of vendors like Check Point, Cisco, Juniper, HP, ...
1
vote
3answers
1k views

What is the value of vendor specific security certs vs. general ones?

Let me preface my question by saying that I understand that experience is generally more valuable than certifications when it comes to the IT profession. Having said that, are vendor specific ...
3
votes
2answers
827 views

Securely expose WebService from Enterprise Network to Internet Client

(coming from stackoverflow) Are there any standards (or certified solutions) to expose a (Web-)Service to the internet from a very security-sensitive network (e.g. Banking/Finance)? I am not ...
2
votes
4answers
2k views

Web Security Certifications

I'm looking for a certification for Web Application Security and Web Pen Testing. Via Google I found the following two: Certified Web Application Tester GIAC Web Application Penetration Tester How ...
4
votes
4answers
491 views

Can you pass C|EH without any hands-on experience in hacking tools

I've been in the IT security industry for well almost a year now since I graduated last year and I'm currently thinking about taking up C|EH examination. I've glanced through several prep and review ...
3
votes
3answers
549 views

would preparing for CCNA add “significantly” to my knowledge as a penetration tester?

I'm a post graduate student and self taught programmer. I concentrated on Computer Networks & Operating Systems more during my undergraduate studies. I can explain usually used protocols by ...
4
votes
2answers
3k views

Security Architect as a career path. How do i do it?

As it says, I want to become a Security Architect and I'm not sure of the career path to follow! I've already asked a few questions about certifications and got great help from this community. ...
1
vote
2answers
439 views

Books, videos, and other resources for CEHv7 [closed]

What are recommenced books, videos and other resources for CEHv7. It seems as though not much is published on the new version of the cert just yet. Currently, I have read All In One CEH by Matt ...
6
votes
3answers
1k views

Is a Master's in infosec required to break into the security field?

So I'm going to be graduating college in January 2013, with a double major in Compsci and Cell Biology (don't ask...). I'm really looking to break into the information security field as a consultant. ...
3
votes
2answers
1k views

What are the most challenging IT security certifications to obtain? [closed]

Which IT security certifications are considered the most difficult to obtain?
6
votes
2answers
576 views

International pentester certification

I've looked at the questions regarding certifications on this site and they are essentially asking what to go for. I hope that my question is distinct enough that is is not considered a dupe. I ...
7
votes
1answer
3k views

SANS training - worth it?

I am a programmer, doing mostly web development now, dealing also with securing the web applications in my line of work. I have reasonable knowledge of security matters, though not always staying ...
5
votes
4answers
5k views

CEH or GIAC - Which one should I pursue?

After a lot of Google and forum searches, I found out CISSP is one of the few valuable certs. Unfortunately, I only have 2 years of experience and don't have any specific experience in security ...
5
votes
2answers
858 views

Should I go for Master of Science by GIAC SANS and what to do with my expiring GSEC cert?

I am now concentrating on my startup which is basically a one-man show. At the same time, i just received an email from SANS Technology Institute’s (STI) about their exciting new accelerated option ...