Formal education and training in preparation for the practice of a profession.

learn more… | top users | synonyms (3)

6
votes
0answers
83 views

CTF competitions/challenges that are Windows based?

I've been messing about in CTF's for a while and I also do pen-testing professionally, what i've noticed is a distinct lack of CTF competitions using windows environments. This is in stark contrast ...
10
votes
5answers
1k views

Do I need a bachelor's degree to break in information security? [closed]

First of all, I have a college diploma in computer networking. I tried to get a job as network admin, but because of my lack of experience in that field I did not succeed. So I returned as a help ...
1
vote
1answer
41 views

Developer Security Training .NET / JAVA [closed]

Hello my team is tasked to perform security focused training for developers (.NET and JAVA). I have used WebGoat to demonstrate OWASP Top 10 type security vulnerabilities and am looking for a similar ...
0
votes
2answers
123 views

CEH training courses requirements

What are the requirements for studying CEH? Is there any requirements for the programming background? And can anyone apply for it or does he has to have a recommendation for both studying and taking ...
0
votes
1answer
115 views

Preparation for Blue Team Competitions [closed]

I am a CS student, and am considering competing in the National Collegiate Cyber Defense Competition. Although I have a fair amount of experience in programming competitions (e.g. ACM at High School ...
0
votes
2answers
140 views

Books to start the study of TCP/IP [closed]

I'm 20 years old and have no knowledge in the world of information security! I'm currently studying engineering and I've recently found what work I want to do (pentesting or a career in fields like ...
0
votes
2answers
122 views

What college majors are suitable for a career in security? [closed]

I was recently asked by a friend of mine (outside the computer science field) if he can be successful in web-application pen-testing I took this as an excuse to ask a more comprehensive question. I ...
-2
votes
2answers
171 views

Life in cybersecurity: How do I get there? [closed]

I am 17 years old and my ultimate job goal is a cyber security professional. I have been extensively studying TCP/IP, along with all other subjects in the CompTIA Network+ certification which I hope ...
3
votes
1answer
449 views

Syllabus for self-studying information security and Pentesting [closed]

I'm someone who's distant, industry-wise, from technology. I'm actually in the medical field. That said, I'm very interested in technology and specifically in information security. I'd like to make a ...
13
votes
5answers
2k views

Hackable linux distributions

A few years ago we had that awesome Linux distribution called Damn Vulnerable Linux. But unfortunately it looks like the project is dead. So my question is are there other Linux distributions which ...
3
votes
3answers
301 views

System Hardening: Outsource to Security Expert or have Sys Admin do it? [closed]

Can any of you security experts help me make a decision on how to deal with staffing for an initial hardening for an Apache server running MySQL and PHP? We are working on a new site have to do ...
-1
votes
1answer
169 views

Security Awareness Training Ideas [closed]

Does anyone have any solid recommendations for deploying and maintaining security awareness training? I am not looking for a specific vendor but I am trying to gain insight about how the material is ...
0
votes
1answer
35 views

Applications of ODEs to Cybersecurity

My university's cybersecurity program allows one to take a course in ordinary differential equations as an elective. The course would be interesting to take, although I don't know how I'd apply it to ...
0
votes
1answer
70 views

Worthy security related certifications for a software engineer [closed]

I am a software engineer with an interest in expanding my knowledge in the security field. In addition to security.stackexchange and OWASP, I am currently reading the book "The web application ...
7
votes
4answers
588 views

Is there a book about secure system design? [closed]

I'm interested in learning about secure system design - the whole stack. Currently, I'm an expert .net/C# developer and I know about the differences between different hash functions, public/private ...
2
votes
0answers
177 views

security clearance for programmers

I am programmer by day and night, I work within security at the moment working on some security products. I have noticed a few non software engineering based roles which require security clearance. I ...
6
votes
3answers
371 views

What is a company's benefit of training employees in cybersecurity?

I'm a federally employed senior executive assistant with user knowledge of computer programs and software. I'm trying to change my career and am looking for my employer to pay for my training. I'm ...
16
votes
4answers
723 views

Tricky code to make memory-safe

I'm designing a homework challenge for students who are learning about memory safety and writing secure C code. As part of this, I am looking for a small programming task where it's non-trivial to ...
0
votes
1answer
68 views

Network and Security Associates v.s. CISCO Security Associates [closed]

My college is expanding the Information Technology department to include Networking and Security as well as the CISCO Security. In my research online I have found different information for each ...
1
vote
1answer
164 views

Course project that teaches secure design

I'm looking for a class project that (1) is scalable to large classes, and (2) teaches secure design. This is for an undergraduate course on computer security. Hopefully, it would be educational and ...
7
votes
2answers
505 views

How to attract hackers?

I'm contributing to an open source project and we setup a testbed for security testing. We want to start a challenge to find security flaws and my question is: how do we attract hackers to ...
-1
votes
1answer
243 views

Breaking into the IT Security Industry as a pentester [closed]

I am currently a programmer with 4 years of experience. In the past I have done tech support for a few years and was an instructor at an IT trade school for a few years. I have a good balance of IT ...
7
votes
3answers
179 views

How do INFOSEC competitions deal with social engineering?

Whenever I read about a cybersecurity competition, I always wonder, since almost everyone involved is a security professional, can such exercises ever be realistic? One of the weakest links in any ...
2
votes
3answers
269 views

Certifications that involve practical knowledge

After a lot of googling and searches on forums, it was apparent that certificates like CEH and CISSP incorporated a lot of theory in them and were useful as an added for job. Are there any ...
2
votes
1answer
623 views

Study roadmap to write a crypter / backdoor

Recently I came across a site called SecurityTube.net, which has a ton of amazing security stuff. I'm following their Python Scripting Expert videos which are totally worth it. I also came across the ...
-1
votes
1answer
1k views

personal studies to become a security expert [closed]

I'm a little late, I'm 21 always been interested in IT and this past year I've looked here and there for computer security, but I don't have a diploma. I never had any idea on what to do in my life ...
1
vote
0answers
58 views

Pursue career in Network Security [duplicate]

My qualification is Masters in Computer Science and i am currently working as a Technical Support Associate (Network Support) with a MNC. I am good with JAVA programing and have worked on some small ...
5
votes
6answers
710 views

Best source(s) for security related news? [closed]

What is the best place to go for security news? I am looking for everything from news updates to editorials to guides and research. Anywhere considered more reliable or particularly hard-hitting? ...
5
votes
3answers
422 views

What are some signs that a certain degree in information security will be a quality one?

I have been searching frantically for a college that has a good information security program. One of the ones I came across is Wilmington Universities Computer and Network Security program. I got a ...
4
votes
3answers
611 views

Is writing shellcode still a valid skill to have/learn?

Following up from this question: Should I bother teaching buffer overflows any more? I am a it sec researcher and also security course instructor. Recently questions have been raised about the ...
-2
votes
2answers
206 views

which certification course should I choose? [closed]

The company I'm working in propose among others the following courses related to security ISO 27001 Lead Auditor ISO 27001 Lead Implementer Certified Certified Information Systems Security ...
1
vote
1answer
257 views

Cryptography Online Education [closed]

Do the security experts at IT Security have a preference between the two cryptography courses offered by Coursera (Stanford), "Cryptography I" and Udacity, "Applied Cryptography"? I am seeking an ...
2
votes
0answers
146 views

SANS Forensic Course -worth it? [closed]

I'm a Security Student at Pennsylvania State University and I am considering taking FOR408 through SANS this summer in Pittsburgh (not far from my home). I really want this to help me stand out in my ...
3
votes
3answers
253 views

Resources for building a network security curriculum

I am currently helping my teacher create a curriculum around IT Security because it isn't currently implemented. Some previous question had decent responses but I was wondering if there was more. My ...
1
vote
2answers
3k views

How would one go about becoming a Security Researcher

Can any Security Researchers/Pentesters/Hackers point me in a direction to learn about becoming a Security Researcher and steps to take?
1
vote
3answers
405 views

Anti-Phishing Campaign Objective

At every office I have worked, links and files, both internal and external, are shared in emails. Is the objective of an anti-phishing campaign that users never click on blind, or otherwise ...
-3
votes
1answer
426 views

What should someone learn to get into IT Security? [closed]

I want to learn about security. How to monitor systems, mobile devices, computers etc. What sort of stuff do I need to research to get into my own devices and monitor/change things, be fluent in Linux ...
14
votes
8answers
2k views

Is advanced mathematics relevant to security beyond cryptography?

Short question. The title says it all... is advanced mathematics (i.e. beyond the classic college level calculus sequence) relevant to any field of computer security besides cryptography? By relevant, ...
0
votes
2answers
169 views

Necessary education for InfoSec? [closed]

So, as it stands I'm a 21 year old recent Bio-Chemistry graduate looking for a path into InfoSec. Without a background in any computing discipline I assumed that it would be seen as compulsory that I ...
4
votes
2answers
538 views

What are my options for a career switch into IT Security? [duplicate]

I am currently working as a Software/Web Developer with around eight years experience, however I have always had an interest in IT Security and am now hoping to move my career in this direction. I ...
6
votes
1answer
913 views

What are the good resources for learning Metasploit?

Ok. I'm a newbiw (Script kidde) and I want to learn more about Metasploit. Not for fun, but to understand what exploits are, how they are used, and deployed. I've heard a lot about the Metasploit ...
10
votes
2answers
482 views

Should a penetration tester have training in ISO 27001/ITIL etc?

I recently got offered a promotion but as part of the package I've been requested to do ISO 27001, ITIL, ARPA and other kinds of training. I've previously avoided this sort of training as I felt it ...
0
votes
2answers
915 views

What knowledge is neccessary to work in computer security? [closed]

What level of knowledge does a person need to work in computer security? Are the following skills sufficient? Good knowledge in TCP/IP networking Good knowledge in firewalls/firewall techniques ...
3
votes
0answers
91 views

Suggested books to study for CISSP? [duplicate]

Possible Duplicate: Good (preferably free) resource for CISSP practice questions I intend to study to take the CISSP exam within the next few months. Could anyone who's taken the CISSP ...
6
votes
2answers
409 views

How to explain computer security to low-grade students?

This is my first question here on Security, so please forgive me if I'm in the wrong place for asking this. I am a computer science teacher currently teaching classes of teenage students age between ...
3
votes
5answers
2k views

Building a Security Training Simulation environment

My university is keen to build a security training simulation environment/platform and it will be a good learning experience for students. I Googled around to find out how it is built, but I only ...
18
votes
6answers
4k views

As a beginner in IT Security, should I learn TCP/IP?

I'm a university lecturer and a web and desktop software developer. For many reasons I want to learn software security to change my field in the long run. It's been a few days that I've started ...
1
vote
3answers
1k views

How to prepare for hacking competitions [closed]

I know that there are several hacking competitions, but I would like to know how to prepare for hacking competitions. I know that there are several hacking courses, online and offline, but they only ...
-4
votes
2answers
225 views

Whats the best IT Security Web Forum? [closed]

I'm looking for a good source for IT Security, specifically information for Information Security Professionals. I'm wondering what your favorite is?
14
votes
5answers
831 views

Application security training for developers [closed]

I am trying to establish an application security group within an organization and although there is a plethora of courses for penetration testers, i fail to find an equal amount of training courses ...