We use the certification tag for questions about programs designed to vouch for an individual's competence in security-related work. Use the "compliance" tag for programs like PCI-DSS that assess the security of a server.

learn more… | top users | synonyms

1
vote
1answer
31 views

What is the relationship between Suite B and FIPS 140-2?

What is the relationship between the Suite B algorithms and FIPS 140-2 certification? Does OpenSSL meet both criteria? From what I've read, it seems that OpenSSL's crypto library implements many ...
12
votes
7answers
7k views

How useful is CISSP to a recent graduate?

I am a recent graduate and would like to move into the IT Security field. My degree was just straight CS with no particular security focus. I have recently acquired a copy of a CISSP study guide and ...
-2
votes
1answer
36 views

Certifications comparisons

I have been asked to compare "officially" some pentest certifications, namely: GIAC CEH OPST OSCP ...and if you have some more, they're welcome! Now, I have my points of view and I don't want ...
22
votes
10answers
9k views

Good (preferably free) resource for CISSP practice questions

I'm looking to sit for my exam in a few weeks, and I want to have a good set of practice tests to bounce against and make sure that I'm up to par with the types of questions that will be asked.
1
vote
2answers
56 views

Ways to certify a SaaS for security [closed]

Is it common for small companies to get security certificates/compliance from audit agencies for their SaaS to present to customers for their assurance? If so what are the suggested certifications?
0
votes
1answer
56 views

Worthy security related certifications for a software engineer [closed]

I am a software engineer with an interest in expanding my knowledge in the security field. In addition to security.stackexchange and OWASP, I am currently reading the book "The web application ...
23
votes
5answers
2k views

Professional certifications for IT Security

Which credentials of the sub-list of IT certifications (as per the Information Systems Security Association) would be considered MUST HAVE for a IT Security specialist. Information Security CEH ...
4
votes
5answers
2k views

eCPPT vs. OSCP Certification

I am a soon to be college student. I am looking to become certified in pentesting for both personal interest as well as to be able to have something that would look good to future employers. Both ...
0
votes
0answers
48 views

Certifications for IT Security Beginner [duplicate]

I am working in this field for 6-7 months. I know basic cracking , Reverse Eng. and Medium level Wireless cracking . I am in 2nd year of my Graduation and I want to learn more by getting certified by ...
1
vote
3answers
151 views

Reading to Decide on a career switch [duplicate]

I have a strategy consulting and sales background, but what I read about IT and IT Security sounds fascinating as an outsider. I'm considering a career switch, but would need to know quite a bit more. ...
5
votes
1answer
223 views

What compliance problem does “Common Criteria Certification” solve?

It has been said Common Criteria solves a "Compliance problem, and not a security problem". Can someone explain where CC certification is required or benefits an industry? Is it simply a marketing ...
2
votes
3answers
237 views

Certifications that involve practical knowledge

After a lot of googling and searches on forums, it was apparent that certificates like CEH and CISSP incorporated a lot of theory in them and were useful as an added for job. Are there any ...
10
votes
2answers
623 views

Security quiz for developers

Does anyone know of a short security quiz that could be administered online, to test the security knowledge of a developer? I'm looking for something simple to administer and simple to grade, ideally ...
-2
votes
2answers
467 views

Evaluating candidates for Hacker/Pen Test Positions [closed]

If I need to employ Penetration Testers, what are the procedures to follow and how to examine candidates to know their skills and qualifications. Also, I need to know what are the ...
5
votes
1answer
2k views

New Certification: C|CISO. Where it stands?

I recently found a new professional certification: C|CISO, currently in the grandfathering stage. It seems to be targeting security professionals that want to prove they are suitable for C level ...
3
votes
0answers
90 views

Suggested books to study for CISSP? [duplicate]

Possible Duplicate: Good (preferably free) resource for CISSP practice questions I intend to study to take the CISSP exam within the next few months. Could anyone who's taken the CISSP ...
1
vote
2answers
120 views

Does Convergence solve the problem of hacked CAs?

My question is about the Firefox AddOn Convergence. So my question is if it is possible for convergence to observe that a phishing-site which is verified by fake Certificate because a hacker of a CA ...
17
votes
7answers
10k views

Comparing online security courses: eLearnSecurity vs. Offensive-Security

I'm a web programmer, using the Linux environment for 2 years.(I have experience with Web app hacks +Web app security techniques) I want to start studying security in-depth, but I have limited time ...
4
votes
4answers
3k views

What are the basic certification course for beginners?

I am an application developer in MNC with 2 year experience. What are the basic certification or course should I do what can help myself to shift in security field?
4
votes
4answers
2k views

Definitive certification list [closed]

What are a list of useful certificates for someone who wants to work on the information security field? I have heard of CISSP but from what I have understood it is way too advanced for someone new to ...
2
votes
1answer
191 views

Career path: Is going for PMP along with having a rich experience in the InfoSec field a good career move?

I think the title pretty says it all. Do you think that if one has experience in implementations of security and network solutions, and then gets to become a PMP, will that be an added value to his ...
-3
votes
2answers
661 views

Cheap, Foot-in-the-door certifications? [closed]

Could you recommend cheap certifications to get your foot in the door of the industry.
2
votes
2answers
709 views

Coverage of OSCP training

Is there any part related to penetration that OSCP/OSCE fail to cover in their training programs? How much will I be exposed to penetration techniques after completing OSCP/OSCE?
2
votes
3answers
2k views

GSEC or GCIH, for a Security Analyst?

I've been with this confusion of getting a certification for a long time!! With the aim of becoming a Security Analyst/Tester, and for a good kick start, which one of these two is good? GSEC or GHIC?? ...
2
votes
2answers
238 views

Security model for datacenters

I have several datacentres and now I want to plan security for it, so it's resilient to external attacks. I need to make a security model which will cover my web servers, auth servers, log servers, ...
3
votes
3answers
5k views

OSCP certification for junior pen tester position any good?

Currently finishing my degree in computer security and have a few years experience in IT support and want to get into a junior pen testing job or similar. Would the OSCP certification do me any ...
4
votes
6answers
1k views

Information Security Career tracks - Academically vs. IT certifications

I will try to be as straightforward as possible here. I am currently working as a security integrator at an integration company. I work with products of vendors like Check Point, Cisco, Juniper, HP, ...
1
vote
3answers
737 views

What is the value of vendor specific security certs vs. general ones?

Let me preface my question by saying that I understand that experience is generally more valuable than certifications when it comes to the IT profession. Having said that, are vendor specific ...
3
votes
2answers
641 views

Securely expose WebService from Enterprise Network to Internet Client

(coming from stackoverflow) Are there any standards (or certified solutions) to expose a (Web-)Service to the internet from a very security-sensitive network (e.g. Banking/Finance)? I am not ...
2
votes
4answers
1k views

Web Security Certifications

I'm looking for a certification for Web Application Security and Web Pen Testing. Via Google I found the following two: Certified Web Application Tester GIAC Web Application Penetration Tester How ...
4
votes
4answers
419 views

Can you pass C|EH without any hands-on experience in hacking tools

I've been in the IT security industry for well almost a year now since I graduated last year and I'm currently thinking about taking up C|EH examination. I've glanced through several prep and review ...
3
votes
3answers
479 views

would preparing for CCNA add “significantly” to my knowledge as a penetration tester?

I'm a post graduate student and self taught programmer. I concentrated on Computer Networks & Operating Systems more during my undergraduate studies. I can explain usually used protocols by ...
4
votes
2answers
2k views

Security Architect as a career path. How do i do it?

As it says, I want to become a Security Architect and I'm not sure of the career path to follow! I've already asked a few questions about certifications and got great help from this community. ...
1
vote
2answers
419 views

Books, videos, and other resources for CEHv7

What are recommenced books, videos and other resources for CEHv7. It seems as though not much is published on the new version of the cert just yet. Currently, I have read All In One CEH by Matt ...
5
votes
3answers
935 views

Is a Master's in infosec required to break into the security field?

So I'm going to be graduating college in January 2013, with a double major in Compsci and Cell Biology (don't ask...). I'm really looking to break into the information security field as a consultant. ...
2
votes
2answers
844 views

What are the most challenging IT security certifications to obtain? [closed]

Which IT security certifications are considered the most difficult to obtain?
6
votes
2answers
481 views

International pentester certification

I've looked at the questions regarding certifications on this site and they are essentially asking what to go for. I hope that my question is distinct enough that is is not considered a dupe. I ...
7
votes
1answer
2k views

SANS training - worth it?

I am a programmer, doing mostly web development now, dealing also with securing the web applications in my line of work. I have reasonable knowledge of security matters, though not always staying ...
5
votes
4answers
3k views

CEH or GIAC - Which one should I pursue?

After a lot of Google and forum searches, I found out CISSP is one of the few valuable certs. Unfortunately, I only have 2 years of experience and don't have any specific experience in security ...
5
votes
2answers
656 views

Should I go for Master of Science by GIAC SANS and what to do with my expiring GSEC cert?

I am now concentrating on my startup which is basically a one-man show. At the same time, i just received an email from SANS Technology Institute’s (STI) about their exciting new accelerated option ...
3
votes
3answers
447 views

Which is better: MCTIP vs. CCNA

These past months I have attained a bunch of security related certs: -CISSP -GCIH -CPT -CEH When applying for IA/Security positions, will employers prefer to see these certs paired with MCTIP ...
2
votes
2answers
981 views

Pokki Sandbox architecture. Is it secure?

Today I have looked at the desktop application framework - Pokki. The first questions were: how it works and is it secured. What I have found about security architecture: Pokki Security Overview. So ...
5
votes
2answers
491 views

Digital Forensics and Pentesting: what now?

So, i want to enter the security field, and i'm leaning towards security auditing, digital forensics, and reverse engineering. i'm in school right now, i'm studying x86 ASM, exploring Linux, and soon ...
1
vote
0answers
306 views

Best way to get “into the security industry”? [duplicate]

Possible Duplicate: What are the career paths in the computer security field? I've been called a "jack of all trades" guy, who has been working in health care and finance for about seven ...
2
votes
1answer
1k views

Are GIAC exams open book (Unlike CISSP)?

I am currently CompTIA A+, Network+, and Security+ certified. As part of maintaining compliance with the DoDD 8570, I will also be sitting for the ISC^2 CISSP exam in the near future. I have noticed ...
4
votes
2answers
140 views

Is it correct to consider audits as exclusively “detective” in nature?

I'm studying for the CISSP exam and one of the video lecture points didn't quite make sense to me. The instructor was discussing access control administration areas and began categorizing certain ...