Formal education and training in preparation for the practice of a profession.

learn more… | top users | synonyms (4)

23
votes
5answers
2k views

WarGames: Platforms to practice and improving your hacking skill set [closed]

Do you know of any good free platform in which we can practice different attack vectors and vulnerabilities such as XSS, SQL injection, low level hacking, reverse engineering etc. ? For example, I ...
4
votes
2answers
126 views

Connected cars: Skills needed for a security specialist [closed]

Connected cars are being mass produced by many car manufactures such as Audi, GM, Honda and Hyundai (Founding members of the Open Automotive Alliance). Recently I have read a scaring article about ...
17
votes
5answers
2k views

At what point in their employment should security policies be explained to an employee?

There are the basic things that need to be explained to every employee about a security policy. For example: How sensitive information must be handled. How to properly maintain your ID, and ...
0
votes
2answers
78 views

What certifications do I need to become a Malware Analyst? [closed]

I've previously posted here on how to get started as a malware analyst, and wanted to say thanks on getting me started. How much do certifications help me on my resume and which one(s) should I get? ...
0
votes
1answer
70 views

Lost in a field of Degrees and certifications [closed]

I have another semester or so before I graduate with my As in Information security. This is going to be a two part question. Other than the degree I will also have a few different certifications. ...
-4
votes
3answers
151 views

How do I find vulnerabilities in software? [closed]

I read an answer here which talked about becoming a PenTester. The answer said that you have to learn to break software. I posted a comment on the answer asking where do I start learning to break ...
4
votes
1answer
436 views

Responsibilities as a Junior Information Security Analyst? [closed]

Tomorrow will be my first day as a new Junior Information Security Analyst, and I'm nervous and excited at the same time. I want to apologize if this is the wrong place to ask such questions, but I ...
-2
votes
1answer
85 views

Crypto for penetration test [closed]

I'm a newbie but I want to become a penetration tester. I'm taking a course on cryptography but I'm wondering... how useful is crypto for penetration testing compared to other skills like operating ...
1
vote
1answer
94 views

Sans security courses: How are self study courses certified? [closed]

If i were to take the course http://www.sans.org/course/advanced-web-app-penetration-testing-ethical-hacking# as a self study course over 4 months, how is it eventually graded? Is it an exam at the ...
-1
votes
2answers
91 views

Advice on the degree path [closed]

I am currently in the first year of Computer Security at the university. But I have some doubts about the course. So I want to ask the professionals some questions :D Is it better to lose a year ...
0
votes
1answer
144 views

penetration testing first step [closed]

I've started a course about Penetration testing and CEH on cybrary. The course begins with an introduction that quickly describes each step of pentesting. The first step is essentially to gather ...
0
votes
2answers
211 views

Hacking Course Value (Soft) [closed]

The college that I'm currently attending (masters) offers a ethical hacking course, which I am currently enrolled in. I have been seriously considering dropping the course for several reasons. 1) ...
0
votes
1answer
107 views

Cyber Security Training v. Cyber Security Education for Middle to High Schoolers [closed]

In my community, we have one state university that offers cyber security training once a year to high school students that show interest. Last year a student, after receiving this training, hacked ...
-3
votes
1answer
86 views

Book about security in web applications [closed]

I'm new to security in web applications.I have searched in amazon but I was unable to find a book for today's technology. As far as I know HTML5 comes with a few new attack vectors, most of the books ...
0
votes
2answers
217 views

What is the best resource to learn malware analysis? [closed]

I am looking for a resource that helps learn malware analysis. I know about the practical malware analysis book but i am looking for something other than a book. For example a Site or video tutorials. ...
7
votes
3answers
435 views

CTF competitions/challenges that are Windows based?

I've been messing about in CTF's for a while and I also do pen-testing professionally, what i've noticed is a distinct lack of CTF competitions using windows environments. This is in stark contrast ...
10
votes
5answers
2k views

Do I need a bachelor's degree to break in information security? [closed]

First of all, I have a college diploma in computer networking. I tried to get a job as network admin, but because of my lack of experience in that field I did not succeed. So I returned as a help ...
1
vote
1answer
111 views

Developer Security Training .NET / JAVA [closed]

Hello my team is tasked to perform security focused training for developers (.NET and JAVA). I have used WebGoat to demonstrate OWASP Top 10 type security vulnerabilities and am looking for a similar ...
0
votes
2answers
327 views

CEH training courses requirements

What are the requirements for studying CEH? Is there any requirements for the programming background? And can anyone apply for it or does he has to have a recommendation for both studying and taking ...
0
votes
1answer
259 views

Preparation for Blue Team Competitions [closed]

I am a CS student, and am considering competing in the National Collegiate Cyber Defense Competition. Although I have a fair amount of experience in programming competitions (e.g. ACM at High School ...
0
votes
2answers
380 views

Books to start the study of TCP/IP [closed]

I'm 20 years old and have no knowledge in the world of information security! I'm currently studying engineering and I've recently found what work I want to do (pentesting or a career in fields like ...
0
votes
2answers
291 views

Is there a “classic” information security textbook? [closed]

Much in the same way compilers has the dragon book, algorithms has the Cormen, and graphics has Foley & van Dam I am wondering what the book on computer security is. Not the "best" book, or the ...
0
votes
2answers
156 views

What college majors are suitable for a career in security? [closed]

I was recently asked by a friend of mine (outside the computer science field) if he can be successful in web-application pen-testing I took this as an excuse to ask a more comprehensive question. I ...
-2
votes
2answers
320 views

Life in cybersecurity: How do I get there? [closed]

I am 17 years old and my ultimate job goal is a cyber security professional. I have been extensively studying TCP/IP, along with all other subjects in the CompTIA Network+ certification which I hope ...
3
votes
1answer
737 views

Syllabus for self-studying information security and Pentesting [closed]

I'm someone who's distant, industry-wise, from technology. I'm actually in the medical field. That said, I'm very interested in technology and specifically in information security. I'd like to make a ...
15
votes
5answers
3k views

Hackable linux distributions

A few years ago we had that awesome Linux distribution called Damn Vulnerable Linux. But unfortunately it looks like the project is dead. So my question is are there other Linux distributions which ...
3
votes
3answers
328 views

System Hardening: Outsource to Security Expert or have Sys Admin do it? [closed]

Can any of you security experts help me make a decision on how to deal with staffing for an initial hardening for an Apache server running MySQL and PHP? We are working on a new site have to do ...
-1
votes
1answer
289 views

Security Awareness Training Ideas [closed]

Does anyone have any solid recommendations for deploying and maintaining security awareness training? I am not looking for a specific vendor but I am trying to gain insight about how the material is ...
0
votes
1answer
43 views

Applications of ODEs to Cybersecurity

My university's cybersecurity program allows one to take a course in ordinary differential equations as an elective. The course would be interesting to take, although I don't know how I'd apply it to ...
0
votes
1answer
92 views

Worthy security related certifications for a software engineer [closed]

I am a software engineer with an interest in expanding my knowledge in the security field. In addition to security.stackexchange and OWASP, I am currently reading the book "The web application ...
1
vote
1answer
264 views

Audiobooks to learn about Infosec? [closed]

I recently got homeland on a humble bundle and I've been getting really interested in Information Security so i want to keep learning and the best way i find is to listen to Audio books or podcast ...
-1
votes
1answer
295 views

Linux security books [closed]

I am trying to find an updated book (preferably from 2012-2013) that can cover linux security aspects comprehensively. I searched on Amazon and found that most Linux security books are from back in ...
0
votes
3answers
509 views

Up to date books for OpenSSL coverage of TLS 1.1 and 1.2 [closed]

I currently have Implementing SSL / TLS Using Cryptography and PKI Joshua Davies. It is very recent and covers even newer TLS version 1.1 and 1.2 and ECC. It is based on many C sample that are ...
7
votes
4answers
724 views

Is there a book about secure system design? [closed]

I'm interested in learning about secure system design - the whole stack. Currently, I'm an expert .net/C# developer and I know about the differences between different hash functions, public/private ...
3
votes
1answer
225 views

security clearance for programmers

I am programmer by day and night, I work within security at the moment working on some security products. I have noticed a few non software engineering based roles which require security clearance. I ...
6
votes
3answers
555 views

What is a company's benefit of training employees in cybersecurity?

I'm a federally employed senior executive assistant with user knowledge of computer programs and software. I'm trying to change my career and am looking for my employer to pay for my training. I'm ...
16
votes
4answers
766 views

Tricky code to make memory-safe

I'm designing a homework challenge for students who are learning about memory safety and writing secure C code. As part of this, I am looking for a small programming task where it's non-trivial to ...
0
votes
1answer
79 views

Network and Security Associates v.s. CISCO Security Associates [closed]

My college is expanding the Information Technology department to include Networking and Security as well as the CISCO Security. In my research online I have found different information for each ...
-1
votes
2answers
226 views

Android OS Security [closed]

I am somewhat confused in terms of how secure Android OS is and how updates work on Android. Are there security fixes on each release? How can I keep track for Android exploits and what are the most ...
1
vote
1answer
207 views

Course project that teaches secure design

I'm looking for a class project that (1) is scalable to large classes, and (2) teaches secure design. This is for an undergraduate course on computer security. Hopefully, it would be educational and ...
7
votes
2answers
573 views

How to attract hackers?

I'm contributing to an open source project and we setup a testbed for security testing. We want to start a challenge to find security flaws and my question is: how do we attract hackers to ...
0
votes
1answer
676 views

Comprehensive & current book on native application exploit research & development [closed]

Is there a 'must read', comprenhensive book on native application exploit development? Covering the process of finding vulnerabilities (fuzzing, reverse engineering, code analysis, etc...) & ...
-1
votes
1answer
293 views

Breaking into the IT Security Industry as a pentester [closed]

I am currently a programmer with 4 years of experience. In the past I have done tech support for a few years and was an instructor at an IT trade school for a few years. I have a good balance of IT ...
7
votes
3answers
190 views

How do INFOSEC competitions deal with social engineering?

Whenever I read about a cybersecurity competition, I always wonder, since almost everyone involved is a security professional, can such exercises ever be realistic? One of the weakest links in any ...
2
votes
3answers
366 views

Certifications that involve practical knowledge

After a lot of googling and searches on forums, it was apparent that certificates like CEH and CISSP incorporated a lot of theory in them and were useful as an added for job. Are there any ...
2
votes
1answer
964 views

Study roadmap to write a crypter / backdoor

Recently I came across a site called SecurityTube.net, which has a ton of amazing security stuff. I'm following their Python Scripting Expert videos which are totally worth it. I also came across the ...
-1
votes
1answer
2k views

personal studies to become a security expert [closed]

I'm a little late, I'm 21 always been interested in IT and this past year I've looked here and there for computer security, but I don't have a diploma. I never had any idea on what to do in my life ...
0
votes
0answers
61 views

Pursue career in Network Security [duplicate]

My qualification is Masters in Computer Science and i am currently working as a Technical Support Associate (Network Support) with a MNC. I am good with JAVA programing and have worked on some small ...
5
votes
6answers
1k views

Best source(s) for security related news? [closed]

What is the best place to go for security news? I am looking for everything from news updates to editorials to guides and research. Anywhere considered more reliable or particularly hard-hitting? ...
5
votes
3answers
491 views

What are some signs that a certain degree in information security will be a quality one?

I have been searching frantically for a college that has a good information security program. One of the ones I came across is Wilmington Universities Computer and Network Security program. I got a ...