We use the certification tag for questions about programs designed to vouch for an individual's competence in security-related work. Use the "compliance" tag for programs like PCI-DSS that assess the security of a server.
-5
votes
0answers
39 views
what certification must be done for getting into IT security dept [closed]
I have done MBA - IT ,and want to make career in IT security dept,but i am not able to understand what type of certification must be done at entry level and also what are the certifications to get ...
10
votes
2answers
414 views
Security quiz for developers
Does anyone know of a short security quiz that could be administered online, to test the security knowledge of a developer? I'm looking for something simple to administer and simple to grade, ideally ...
-2
votes
2answers
210 views
Evaluating candidates for Hacker/Pen Test Positions [closed]
If I need to employ Penetration Testers, what are the procedures to follow and how to examine candidates to know their skills and qualifications.
Also, I need to know what are the ...
3
votes
4answers
511 views
eCPPT vs. OSCP Certification
I am a soon to be college student. I am looking to become certified in pentesting for both personal interest as well as to be able to have something that would look good to future employers. Both ...
5
votes
1answer
738 views
New Certification: C|CISO. Where it stands?
I recently found a new professional certification: C|CISO, currently in the grandfathering stage. It seems to be targeting security professionals that want to prove they are suitable for C level ...
3
votes
0answers
81 views
Suggested books to study for CISSP? [duplicate]
Possible Duplicate:
Good (preferably free) resource for CISSP practice questions
I intend to study to take the CISSP exam within the next few months. Could anyone who's taken the CISSP ...
1
vote
2answers
109 views
Does Convergence solve the problem of hacked CAs?
My question is about the Firefox AddOn Convergence.
So my question is if it is possible for convergence to observe that a phishing-site which is verified by fake Certificate because a hacker of a CA ...
11
votes
7answers
6k views
Comparing online security courses: eLearnSecurity vs. Offensive-Security
I'm a web programmer, using the Linux environment for 2 years.(I have experience with Web app hacks +Web app security techniques)
I want to start studying security in-depth, but I have limited time ...
3
votes
4answers
1k views
What are the basic certification course for beginners?
I am an application developer in MNC with 2 year experience. What are the basic certification or course should I do what can help myself to shift in security field?
120
votes
7answers
7k views
How do certification authorities store their private root keys?
Knowledge of a CA private key would allow MitM attackers to transparently supplant any certificates signed by that private key. It would also allow cyber criminals to start forging their own trusted ...
3
votes
4answers
474 views
Definitive certification list [closed]
What are a list of useful certificates for someone who wants to work on the information security field?
I have heard of CISSP but from what I have understood it is way too advanced for someone new to ...
0
votes
0answers
71 views
If need to choose any IT certification exams or not? [closed]
I heard, if some one likes to take part in the IT area's job, he/she needs to pass some IT certification exams. Do I have go to do this? If yes, need I take Avaya certification exams?
2
votes
1answer
143 views
Career path: Is going for PMP along with having a rich experience in the InfoSec field a good career move?
I think the title pretty says it all.
Do you think that if one has experience in implementations of security and network solutions, and then gets to become a PMP, will that be an added value to his ...
-3
votes
2answers
387 views
Cheap, Foot-in-the-door certifications? [closed]
Could you recommend cheap certifications to get your foot in the door of the industry.
1
vote
2answers
395 views
Coverage of OSCP training
Is there any part related to penetration that OSCP/OSCE fail to cover in their training programs?
How much will I be exposed to penetration techniques after completing OSCP/OSCE?
2
votes
3answers
753 views
GSEC or GCIH, for a Security Analyst?
I've been with this confusion of getting a certification for a long time!! With the aim of becoming a Security Analyst/Tester, and for a good kick start, which one of these two is good?
GSEC or GHIC??
...
2
votes
2answers
179 views
Security model for datacenters
I have several datacentres and now I want to plan security for it, so it's resilient to external attacks.
I need to make a security model which will cover my web servers, auth servers, log servers, ...
2
votes
3answers
2k views
OSCP certification for junior pen tester position any good?
Currently finishing my degree in computer security and have a few years experience in IT support and want to get into a junior pen testing job or similar.
Would the OSCP certification do me any ...
17
votes
6answers
3k views
Good (preferably free) resource for CISSP practice questions
I'm looking to sit for my exam in a few weeks, and I want to have a good set of practice tests to bounce against and make sure that I'm up to par with the types of questions that will be asked.
4
votes
6answers
590 views
Information Security Career tracks - Academically vs. IT certifications
I will try to be as straightforward as possible here.
I am currently working as a security integrator at an integration company.
I work with products of vendors like Check Point, Cisco, Juniper, HP, ...
0
votes
0answers
156 views
Is it Possible to take the OSWP Course in Three Weeks? [closed]
I have a solid block of three weeks where I am not working and can spend most of the day learning the content. However after the three weeks I will not have much time at all so if I cannot learn and ...
1
vote
3answers
266 views
What is the value of vendor specific security certs vs. general ones?
Let me preface my question by saying that I understand that experience is generally more valuable than certifications when it comes to the IT profession.
Having said that, are vendor specific ...
11
votes
6answers
3k views
How useful is CISSP to a recent graduate?
I am a recent graduate and would like to move into the IT Security field. My degree was just straight CS with no particular security focus.
I have recently acquired a copy of a CISSP study guide and ...
3
votes
2answers
291 views
Securely expose WebService from Enterprise Network to Internet Client
(coming from stackoverflow)
Are there any standards (or certified solutions) to expose a (Web-)Service to the internet from a very security-sensitive network (e.g. Banking/Finance)?
I am not ...
2
votes
4answers
537 views
Web Security Certifications
I'm looking for a certification for Web Application Security and Web Pen Testing. Via Google I found the following two:
Certified Web Application Tester
GIAC Web Application Penetration Tester
How ...
3
votes
4answers
334 views
Can you pass C|EH without any hands-on experience in hacking tools
I've been in the IT security industry for well almost a year now since I graduated last year and I'm currently thinking about taking up C|EH examination. I've glanced through several prep and review ...
19
votes
5answers
2k views
Professional certifications for IT Security
Which credentials of the sub-list of IT certifications (as per the Information Systems Security Association) would be considered MUST HAVE for a IT Security specialist.
Information Security
CEH ...
3
votes
3answers
345 views
would preparing for CCNA add “significantly” to my knowledge as a penetration tester?
I'm a post graduate student and self taught programmer. I concentrated on Computer Networks & Operating Systems more during my undergraduate studies. I can explain usually used protocols by ...
4
votes
2answers
1k views
Security Architect as a career path. How do i do it?
As it says, I want to become a Security Architect and I'm not sure of the career path to follow! I've already asked a few questions about certifications and got great help from this community. ...
1
vote
2answers
368 views
Books, videos, and other resources for CEHv7
What are recommenced books, videos and other resources for CEHv7. It seems as though not much is published on the new version of the cert just yet. Currently, I have read All In One CEH by Matt ...
5
votes
1answer
164 views
What compliance problem does “Common Criteria Certification” solve?
It has been said Common Criteria solves a "Compliance problem, and not a security problem". Can someone explain where CC certification is required or benefits an industry?
Is it simply a marketing ...
4
votes
3answers
519 views
Is a Master's in infosec required to break into the security field?
So I'm going to be graduating college in January 2013, with a double major in Compsci and Cell Biology (don't ask...). I'm really looking to break into the information security field as a consultant. ...
2
votes
2answers
529 views
What are the most challenging IT security certifications to obtain? [closed]
Which IT security certifications are considered the most difficult to obtain?
6
votes
2answers
338 views
International pentester certification
I've looked at the questions regarding certifications on this site and they are essentially asking what to go for.
I hope that my question is distinct enough that is is not considered a dupe.
I ...
6
votes
1answer
1k views
SANS training - worth it?
I am a programmer, doing mostly web development now, dealing also with securing the web applications in my line of work. I have reasonable knowledge of security matters, though not always staying ...
4
votes
4answers
2k views
CEH or GIAC - Which one should I pursue?
After a lot of Google and forum searches, I found out CISSP is one of the few valuable certs. Unfortunately, I only have 2 years of experience and don't have any specific experience in security ...
5
votes
2answers
444 views
Should I go for Master of Science by GIAC SANS and what to do with my expiring GSEC cert?
I am now concentrating on my startup which is basically a one-man show.
At the same time, i just received an email from SANS Technology Institute’s (STI) about their exciting new accelerated option ...
1
vote
3answers
343 views
Which is better: MCTIP vs. CCNA
These past months I have attained a bunch of security related certs:
-CISSP
-GCIH
-CPT
-CEH
When applying for IA/Security positions, will employers prefer to see these certs paired with MCTIP ...
1
vote
2answers
745 views
Pokki Sandbox architecture. Is it secure?
Today I have looked at the desktop application framework - Pokki. The first questions were: how it works and is it secured. What I have found about security architecture: Pokki Security Overview. So ...
4
votes
2answers
351 views
Digital Forensics and Pentesting: what now?
So, i want to enter the security field, and i'm leaning towards security auditing, digital forensics, and reverse engineering.
i'm in school right now, i'm studying x86 ASM, exploring Linux, and soon ...
1
vote
0answers
292 views
Best way to get “into the security industry”? [duplicate]
Possible Duplicate:
What are the career paths in the computer security field?
I've been called a "jack of all trades" guy, who has been working in health care and finance for about seven ...
2
votes
1answer
885 views
Are GIAC exams open book (Unlike CISSP)?
I am currently CompTIA A+, Network+, and Security+ certified. As part of maintaining compliance with the DoDD 8570, I will also be sitting for the ISC^2 CISSP exam in the near future.
I have noticed ...
4
votes
2answers
127 views
Is it correct to consider audits as exclusively “detective” in nature?
I'm studying for the CISSP exam and one of the video lecture points didn't quite make sense to me. The instructor was discussing access control administration areas and began categorizing certain ...
