Formal education and training in preparation for the practice of a profession.

learn more… | top users | synonyms (4)

0
votes
1answer
769 views

Comprehensive & current book on native application exploit research & development [closed]

Is there a 'must read', comprenhensive book on native application exploit development? Covering the process of finding vulnerabilities (fuzzing, reverse engineering, code analysis, etc...) & ...
-1
votes
1answer
321 views

Breaking into the IT Security Industry as a pentester [closed]

I am currently a programmer with 4 years of experience. In the past I have done tech support for a few years and was an instructor at an IT trade school for a few years. I have a good balance of IT ...
7
votes
3answers
197 views

How do INFOSEC competitions deal with social engineering?

Whenever I read about a cybersecurity competition, I always wonder, since almost everyone involved is a security professional, can such exercises ever be realistic? One of the weakest links in any ...
2
votes
3answers
421 views

Certifications that involve practical knowledge

After a lot of googling and searches on forums, it was apparent that certificates like CEH and CISSP incorporated a lot of theory in them and were useful as an added for job. Are there any ...
2
votes
1answer
1k views

Study roadmap to write a crypter / backdoor

Recently I came across a site called SecurityTube.net, which has a ton of amazing security stuff. I'm following their Python Scripting Expert videos which are totally worth it. I also came across the ...
-2
votes
1answer
2k views

personal studies to become a security expert [closed]

I'm a little late, I'm 21 always been interested in IT and this past year I've looked here and there for computer security, but I don't have a diploma. I never had any idea on what to do in my life ...
0
votes
0answers
65 views

Pursue career in Network Security [duplicate]

My qualification is Masters in Computer Science and i am currently working as a Technical Support Associate (Network Support) with a MNC. I am good with JAVA programing and have worked on some small ...
5
votes
6answers
2k views

Best source(s) for security related news? [closed]

What is the best place to go for security news? I am looking for everything from news updates to editorials to guides and research. Anywhere considered more reliable or particularly hard-hitting? ...
5
votes
3answers
525 views

What are some signs that a certain degree in information security will be a quality one?

I have been searching frantically for a college that has a good information security program. One of the ones I came across is Wilmington Universities Computer and Network Security program. I got a ...
4
votes
3answers
934 views

Is writing shellcode still a valid skill to have/learn?

Following up from this question: Should I bother teaching buffer overflows any more? I am a it sec researcher and also security course instructor. Recently questions have been raised about the ...
-2
votes
2answers
449 views

which certification course should I choose? [closed]

The company I'm working in propose among others the following courses related to security ISO 27001 Lead Auditor ISO 27001 Lead Implementer Certified Certified Information Systems Security ...
1
vote
0answers
495 views

Is anything written in the book “Internet Denial of Service: Attack and Defense Mechanisms” c2004 still valid? [closed]

I was reading through some of this book on google: http://books.google.ca/books?id=qmdCs_Jf2AEC It is uploaded to a hungarian website here: http://denialofservice.uw.hu/index.html I was reading... ...
1
vote
1answer
280 views

Cryptography Online Education [closed]

Do the security experts at IT Security have a preference between the two cryptography courses offered by Coursera (Stanford), "Cryptography I" and Udacity, "Applied Cryptography"? I am seeking an ...
2
votes
0answers
167 views

SANS Forensic Course -worth it? [closed]

I'm a Security Student at Pennsylvania State University and I am considering taking FOR408 through SANS this summer in Pittsburgh (not far from my home). I really want this to help me stand out in my ...
4
votes
3answers
276 views

Resources for building a network security curriculum

I am currently helping my teacher create a curriculum around IT Security because it isn't currently implemented. Some previous question had decent responses but I was wondering if there was more. My ...
2
votes
2answers
6k views

How would one go about becoming a Security Researcher [closed]

Can any Security Researchers/Pentesters/Hackers point me in a direction to learn about becoming a Security Researcher and steps to take?
1
vote
3answers
648 views

Anti-Phishing Campaign Objective

At every office I have worked, links and files, both internal and external, are shared in emails. Is the objective of an anti-phishing campaign that users never click on blind, or otherwise ...
-3
votes
1answer
560 views

What should someone learn to get into IT Security? [closed]

I want to learn about security. How to monitor systems, mobile devices, computers etc. What sort of stuff do I need to research to get into my own devices and monitor/change things, be fluent in Linux ...
14
votes
9answers
5k views

Is advanced mathematics relevant to security beyond cryptography?

Short question. The title says it all... is advanced mathematics (i.e. beyond the classic college level calculus sequence) relevant to any field of computer security besides cryptography? By relevant, ...
-1
votes
3answers
1k views

Reading for starter in Computer System Security [closed]

What book is a best introduction to a computer systems security for a beginner in the field. One which covers the breadth as well as depth of security and finding vulnerabilities.
0
votes
2answers
198 views

Necessary education for InfoSec? [closed]

So, as it stands I'm a 21 year old recent Bio-Chemistry graduate looking for a path into InfoSec. Without a background in any computing discipline I assumed that it would be seen as compulsory that I ...
4
votes
2answers
1k views

What are my options for a career switch into IT Security? [duplicate]

I am currently working as a Software/Web Developer with around eight years experience, however I have always had an interest in IT Security and am now hoping to move my career in this direction. I ...
6
votes
1answer
2k views

What are the good resources for learning Metasploit?

Ok. I'm a newbiw (Script kidde) and I want to learn more about Metasploit. Not for fun, but to understand what exploits are, how they are used, and deployed. I've heard a lot about the Metasploit ...
15
votes
3answers
773 views

Should a penetration tester have training in ISO 27001/ITIL etc?

I recently got offered a promotion but as part of the package I've been requested to do ISO 27001, ITIL, ARPA and other kinds of training. I've previously avoided this sort of training as I felt it ...
0
votes
2answers
2k views

What knowledge is neccessary to work in computer security? [closed]

What level of knowledge does a person need to work in computer security? Are the following skills sufficient? Good knowledge in TCP/IP networking Good knowledge in firewalls/firewall techniques ...
3
votes
0answers
98 views

Suggested books to study for CISSP? [duplicate]

Possible Duplicate: Good (preferably free) resource for CISSP practice questions I intend to study to take the CISSP exam within the next few months. Could anyone who's taken the CISSP ...
6
votes
2answers
567 views

How to explain computer security to low-grade students?

This is my first question here on Security, so please forgive me if I'm in the wrong place for asking this. I am a computer science teacher currently teaching classes of teenage students age between ...
3
votes
5answers
4k views

Building a Security Training Simulation environment

My university is keen to build a security training simulation environment/platform and it will be a good learning experience for students. I Googled around to find out how it is built, but I only ...
0
votes
2answers
1k views

Networking books for programmers [closed]

I have some programming experience, mostly in web apps, based on pre-existing frameworks. That is, all the networking side of things are handled already, and no knowledge of them is necessary. I ...
18
votes
6answers
7k views

As a beginner in IT Security, should I learn TCP/IP?

I'm a university lecturer and a web and desktop software developer. For many reasons I want to learn software security to change my field in the long run. It's been a few days that I've started ...
1
vote
3answers
2k views

How to prepare for hacking competitions [closed]

I know that there are several hacking competitions, but I would like to know how to prepare for hacking competitions. I know that there are several hacking courses, online and offline, but they only ...
7
votes
4answers
1k views

applications of linear algebra to “security”?

I am taking a course in linear algebra which was to be credited towards a program in applied math. My interests have moved towards matters of "security" (information, network, cryptographic, etc.). ...
-4
votes
2answers
320 views

Whats the best IT Security Web Forum? [closed]

I'm looking for a good source for IT Security, specifically information for Information Security Professionals. I'm wondering what your favorite is?
15
votes
5answers
2k views

Application security training for developers [closed]

I am trying to establish an application security group within an organization and although there is a plethora of courses for penetration testers, i fail to find an equal amount of training courses ...
2
votes
2answers
412 views

Studies on Android users' attitude to security

I'm a final year BSc. student of Computer Security & Forensics at the University of Bedfordshire (UK). I'm investigating perceptions of security on Android platforms, and how to educate users of ...
5
votes
1answer
2k views

“Hello World” example of a Buffer Overflow attack in many programming languages

I'm looking for a very simple application that has an intentional Buffer Overflow embedded in it. I'm assuming this possible in systems where DEP and ASLR are not being used Ideally (and if ...
0
votes
1answer
138 views

How to initiate the learning process of modern day IT Security concepts mainly cryptography? [closed]

I am a programmer with about 7 years of experience mainly in Java . I am interested in the subject of cryptography very much . I love algorithms and datastructures . When I first started learning ...
2
votes
3answers
795 views

What are the risks of a rogue Access Point? What lessons can be learned from the Wifi Pineapple?

I'd like to educate colleagues and peers on rogue access points using the tool "Wifi Pineapple". What are some specific security-related lessons I could demonstrate? If applicable, what are the ...
2
votes
3answers
539 views

What things should a penetration tester know about databases?

I want to start learning about databases from a penetration tester's perspective and I would like to know what things will be useful on the long run. Also do you know any good books to kickstart my ...
0
votes
1answer
309 views

Good reading about windows architecture/reversing [closed]

I have a feeling that I need to get more knowledge about system programming and winapi/windows architecture in particular to be able to understand how lots of exploits work (like those exploiting ...
2
votes
1answer
244 views

Career path: Is going for PMP along with having a rich experience in the InfoSec field a good career move?

I think the title pretty says it all. Do you think that if one has experience in implementations of security and network solutions, and then gets to become a PMP, will that be an added value to his ...
5
votes
3answers
554 views

Where can I get security breach alerts?

I've been following a mish-mash of Google News alerts as well as some 'security' influencers on Twitter, but have a feeling there's a more efficient way to deal with this out there...
-3
votes
2answers
975 views

Cheap, Foot-in-the-door certifications? [closed]

Could you recommend cheap certifications to get your foot in the door of the industry.
11
votes
4answers
761 views

How to convince your boss about importance of IT security

Do you know how could I make my security complaints/advices more effective? Or How could I convince my boss about IT security? There are a couple of known good practices in the field of IT security. ...
4
votes
7answers
765 views

Information Security is becoming more important, but why is it still so difficult to start off in?

For example i have seen countless speachess by the UK goverment on how likely a cyber attack is, if so why do they not offer more incentives for new security professionals. I find it frustrating as a ...
8
votes
3answers
8k views

Ethical Hacking - Penetration Testing Book(s) [closed]

I am an IT student who wishes to seek a career in the field of Ethical Hacking, more specific in Penetration Testing. Due to the nature of my course, none of my classes go deep enough into this ...
6
votes
5answers
2k views

Where should I go from here to be a pentester?

I would like some tips on what I can study to be a better penetration tester. That is what I would like to work towards being, although I have trouble knowing where to start. I have a decent ...
2
votes
1answer
1k views

Web application penetration testing resources? [duplicate]

Possible Duplicate: Best resources to learn web security attacks? I'm very interested in web application penetration testing. I went over every good Youtube video on that subject and most ...
14
votes
2answers
16k views

What preparation do I need to fullfil for OSCP?

I am new to this whole Offensive Security field. Also I have not spent much time in IT. 6 months back I started running behind Offensive Security & started studying. First I studied for C|EH and ...
4
votes
1answer
257 views

Jobs Regarding Network Security

I am new college graduate from India with no job experience. I have deep interest in Information Security and would like to a work for any good company related to the field. Since I don't have ...