Formal education and training in preparation for the practice of a profession.
1
vote
3answers
122 views
OSCP certification for junior pen tester position any good?
Currently finishing my degree in computer security and have a few years experience in IT support and want to get into a junior pen testing job or similar.
Would the OSCP certification do me any ...
2
votes
3answers
171 views
What sort of mathematical background is necessary to learn ethical hacking?
Do I need to be a "mathematical whiz" to be a hacker?
-1
votes
2answers
101 views
Reading Wireshark Result and Security Learning Recommendation
I am (not so) currently learning about security and right now I am learning about using Wireshark. I bumped into this video:
...
1
vote
1answer
95 views
How to use attack trees and attack graphs
I am trying to understand how attack trees\graphs can be used in the security process. I read a lot of papers presenting the topic and how this reppresentation can be useful, but I really don't ...
0
votes
3answers
131 views
Demo of web site that is vulnerable to command injection
I'm looking for a demonstration web site that shows an example of a web site that is vulnerable to command injection: where I can inject something and get the web site to run a shell command. (This ...
3
votes
5answers
161 views
Best resources to learn web security attacks?
Can anyone suggest good resources to learn about vulnerabilities in and attacks on web sites, in a hands-on way, for someone with limited programming experience?
4
votes
4answers
121 views
What should students learn about security in an introductory programming course?
Some folks have advocated that security should be integrated into computer science coursework, throughout the curriculum. Suppose we are going to add one lecture on security, to a first course on ...
1
vote
0answers
57 views
CEH,LPT vs GSEC,GPEN [closed]
Possible Duplicate:
Professional certifications for IT Security
I am now working in IT,and I want to make a head start in the field of security.So I just want to know which kind of ...
1
vote
0answers
75 views
NetSec/InfoSec position salary expectation and negotiation [closed]
I'm about to receive an offer for a position of "Security developer / Pen-tester" that I have been interviewing for. The firm is moderately sized and as some very big clients, so in terms of cost vs. ...
0
votes
0answers
97 views
Where can I find good security training or conferences? [closed]
Edit:
Removed references to conferences since that question was already asked in Best Security Conferences?
What are some good training classes or certifications regarding server security? ...
3
votes
3answers
186 views
What are the basic certification course for beginners?
I am an application developer in MNC with 2 year experience. What are the basic certification or course should I do what can help myself to shift in security field?
2
votes
2answers
183 views
Security Architect as a career path. How do i do it?
As it says, I want to become a Security Architect and I'm not sure of the career path to follow! I've already asked a few questions about certifications and got great help from this community. ...
0
votes
2answers
88 views
Looking for information about the job from security consultants
I'm graduating with my bachelor's in computer science in December, and I'm looking to get an internship in a security consultant firm for the summer, or apply as an analyst/associate in October. I've ...
4
votes
8answers
652 views
Programming language for network security
I am working as a tester now. I am planning to move to the domain of security such as a CEH or CISSP. But many say that to be a great hacker you need to know at least one programming language well. I ...
6
votes
6answers
683 views
How to learn penetration testing at home?
I am interested in learning ethical hacking or penetration testing to head towards a career in that direction.
I have a strong knowledge of linux and unix, basic computer theory and practice and ...
8
votes
2answers
152 views
Should a pentest report include the tester's opinion?
In this particular case, the webserver turned out to be a shared 3rd party system and was not tested.
Examples:
We do express grave concern at the overall security posture of that webserver and ...
3
votes
2answers
236 views
Security Engineers - What Do They Do?
I'm starting my MS in Computer Science (I hold a BS currently) soon and I'm considering specializing in cyber security. I'll be taking courses such as cryptography, biometrics, network security, ...
2
votes
2answers
224 views
What career path do I need to follow to become a CISO?
I'm a security researcher and I want to know what career path you think I need to follow to become a Chief Information Security Officer.
What skills are necessary in this position ?
What field of ...
2
votes
1answer
84 views
CIS vs CS for Information Systems Security?
I would like to know which degree out of these two would better prepare me for Information Systems Security. I want to eventually work with the CIA as a Information Systems security specialist however ...
5
votes
5answers
214 views
Introduction/refresher course on Windows security
Can someone point me to a blog or recommend a book with an introduction (or refresher course) to Windows security.
I am not a newbie programmer, actually have more than 10 years of experience, with a ...
3
votes
3answers
317 views
Can too much web searching be a danger to a security professional?
As a junior security professional, I spend a lot of time goggling for things such as 'wpa dictionaries', 'vulnerabilities...' , 'how to crack ...','and so on.
I sometimes feel like I am calling for ...
3
votes
5answers
147 views
What's the Security equivalent to SICP?
For those of you who don't know any developers and/or didn't go to MIT, The Structure and Interpretation of Computer Programs is the Canonical reference on it's title subject. It is often used as the ...
2
votes
3answers
218 views
Is a Master's in infosec required to break into the security field?
So I'm going to be graduating college in January 2013, with a double major in Compsci and Cell Biology (don't ask...). I'm really looking to break into the information security field as a consultant. ...
2
votes
3answers
187 views
would preparing for CCNA add “significantly” to my knowledge as a penetration tester?
I'm a post graduate student and self taught programmer. I concentrated on Computer Networks & Operating Systems more during my undergraduate studies. I can explain usually used protocols by ...
15
votes
5answers
477 views
How to improve as a security expert
I'm a professional software developer with a high interest in web application security. I'd say that I probably have a better understanding of the security of web applications than the average ...
4
votes
2answers
170 views
Beginner level security for a CS student
I am a final year CS student, and would like to study info sec. Till today, I've been reading infosec mailing lists, some Phrack papers etc., but all in a very casual way.
I am interested in learning ...
4
votes
2answers
159 views
How do you organize a code review / static analysis report?
Recently I get involved in a security code review.
I found many format string, buffer overflow and dangerous libc function call.
Right now I need to write down a report with all the stuff founded ...
2
votes
1answer
64 views
Reading about security by design?
Security folks often encourage people to build security in from the start, and architect systems that are secure by design. What are some readings you would recommend for someone who wants to learn ...
2
votes
2answers
150 views
Literature about IT security from a hardware standpoint
Can you point me to any book, blog, paper, anything about IT security on the lowest possible level (hardware)?
I'm primary interested in the motherboard, CPU & GPU, however, if you know any good ...
7
votes
5answers
251 views
In what ways do some banks inadequately advise their customers on online security?
I'm looking for specific examples of things such as:
Misleading, but common advice
Advice which has backfired
Advice which is just, quite simply, incorrect
which have been circulated time and time ...
0
votes
0answers
86 views
I am thinking of taking a 5 day CHFI course - are they worthwhile [closed]
Possible Duplicate:
Distance Education Programs in Digital Forensics
I am interested in the area of computer forensics and would like to get to a basic level of competence quickly. A ...
-1
votes
1answer
137 views
Learning Network Security [closed]
Possible Duplicate:
Resources to learn about security
I'm a software developer. I'm interested in learning Network Security, what is the recommended books, video courses, etc that I can ...
3
votes
2answers
211 views
Beginners materials for web security [closed]
Possible Duplicate:
Resources to learn about security
What materials can I study to learn web development security. I'm a web developer, I use ASP.NET, Java, PHP, and JavaScript. I want to ...
5
votes
5answers
376 views
Where can I find a mentor/teacher in computer security?
I really enjoy computers - especially security. That's why I went to a school profiled as technical/IT. However, they teach crap. They don't know anything after the release of windows xp/2003. When ...
2
votes
1answer
119 views
NSA CAE/IAE courses
Is there any list of specific courses that the NSA suggests to be taken at the schools that they have designated CAE/IAE? I have a general knowledge of what courses I should take, but I still want to ...
4
votes
1answer
362 views
SANS training - worth it?
I am a programmer, doing mostly web development now, dealing also with securing the web applications in my line of work. I have reasonable knowledge of security matters, though not always staying ...
2
votes
2answers
190 views
How to “get in sync” with what is happening in the security scene right now? [closed]
Possible Duplicate:
What security resources should a white-hat developer follow these days?
A colleague of mine already has some understanding of security fundamentals but still needs "get ...
3
votes
2answers
251 views
Digital Forensics and Pentesting: what now?
So, i want to enter the security field, and i'm leaning towards security auditing, digital forensics, and reverse engineering.
i'm in school right now, i'm studying x86 ASM, exploring Linux, and soon ...
3
votes
4answers
599 views
CEH or GIAC - Which one should I pursue?
After a lot of Google and forum searches, I found out CISSP is one of the few valuable certs. Unfortunately, I only have 2 years of experience and don't have any specific experience in security ...
15
votes
4answers
487 views
How would you reason with and work with the security paranoiac on your team?
The question of how to balance pragmatism with an absolutist view of security has been discussed here already. But I need the answer to a concrete variant of that question.
You're the security expert ...
41
votes
8answers
2k views
What “hacking” competitions/challenges exist?
I have always enjoyed trying to gain access to things I'm not really supposed to play around with. I found Hack This Site a long time ago and I learned a lot from it. The issue I have with HTS is that ...
4
votes
4answers
397 views
Firewall demo - iptables
I have to make a demonstration about firewalls in my class as a student(university).
It should be implemented using iptables on Linux. I am reading all the theories around them but I can't figure out ...
1
vote
3answers
200 views
Ranking of web security conferences
I have prepared a paper to publish in a web security conference. How can I know the ranking of available conferences to know which conference is better? For example, should I look at their sponsors?
6
votes
4answers
365 views
Is Schneier's “Applied Cryptography” current?
I've been recommended Bruce Schneier's 1994 book Applied Cryptography as an introduction to the use and the inner workings of cryptography. Is this book still current and a good introduction?
8
votes
8answers
539 views
List of good security podcast one should listen to
I'm a hard core dyslectic who wants to reed up on all things security whiteout the reading part. So i wan to know what good high quality security podcasts are there? Im interested in almost everything ...
1
vote
0answers
282 views
What are the most important problems in Information Security today? [closed]
Possible Duplicate:
What are the biggest unsolved problems in IT Security?
On Linked in someone was asking what topic they should do for a PHD in Information Security [1] which got me ...
3
votes
5answers
117 views
Security Conferences in United Kingdom
I have already read the post of best security conferences, but am not able to find any academical security conference, even through Microsoft Academic Search.
I admit this question is quite ...
3
votes
4answers
236 views
Can you pass C|EH without any hands-on experience in hacking tools
I've been in the IT security industry for well almost a year now since I graduated last year and I'm currently thinking about taking up C|EH examination. I've glanced through several prep and review ...
2
votes
1answer
145 views
Learning “Security” [closed]
Possible Duplicate:
Resources to learn about security
Hello everyone!
I'm a recent grad that got a job writing software. The company I work for deals mainly in the IT area. We write web ...
23
votes
3answers
421 views
The valid role of obscurity
That security through obscurity is A Bad Thing is received wisdom and dogma in information security. Telling people why something is to be avoided can be considerably more difficult when there is no ...
