Formal education and training in preparation for the practice of a profession.

learn more… | top users | synonyms (4)

4
votes
2answers
591 views

What are my options for a career switch into IT Security? [duplicate]

I am currently working as a Software/Web Developer with around eight years experience, however I have always had an interest in IT Security and am now hoping to move my career in this direction. I ...
6
votes
1answer
1k views

What are the good resources for learning Metasploit?

Ok. I'm a newbiw (Script kidde) and I want to learn more about Metasploit. Not for fun, but to understand what exploits are, how they are used, and deployed. I've heard a lot about the Metasploit ...
11
votes
2answers
524 views

Should a penetration tester have training in ISO 27001/ITIL etc?

I recently got offered a promotion but as part of the package I've been requested to do ISO 27001, ITIL, ARPA and other kinds of training. I've previously avoided this sort of training as I felt it ...
0
votes
2answers
1k views

What knowledge is neccessary to work in computer security? [closed]

What level of knowledge does a person need to work in computer security? Are the following skills sufficient? Good knowledge in TCP/IP networking Good knowledge in firewalls/firewall techniques ...
3
votes
0answers
93 views

Suggested books to study for CISSP? [duplicate]

Possible Duplicate: Good (preferably free) resource for CISSP practice questions I intend to study to take the CISSP exam within the next few months. Could anyone who's taken the CISSP ...
6
votes
2answers
422 views

How to explain computer security to low-grade students?

This is my first question here on Security, so please forgive me if I'm in the wrong place for asking this. I am a computer science teacher currently teaching classes of teenage students age between ...
3
votes
5answers
2k views

Building a Security Training Simulation environment

My university is keen to build a security training simulation environment/platform and it will be a good learning experience for students. I Googled around to find out how it is built, but I only ...
0
votes
2answers
711 views

Networking books for programmers [closed]

I have some programming experience, mostly in web apps, based on pre-existing frameworks. That is, all the networking side of things are handled already, and no knowledge of them is necessary. I ...
18
votes
6answers
5k views

As a beginner in IT Security, should I learn TCP/IP?

I'm a university lecturer and a web and desktop software developer. For many reasons I want to learn software security to change my field in the long run. It's been a few days that I've started ...
1
vote
3answers
2k views

How to prepare for hacking competitions [closed]

I know that there are several hacking competitions, but I would like to know how to prepare for hacking competitions. I know that there are several hacking courses, online and offline, but they only ...
7
votes
4answers
776 views

applications of linear algebra to “security”?

I am taking a course in linear algebra which was to be credited towards a program in applied math. My interests have moved towards matters of "security" (information, network, cryptographic, etc.). ...
-4
votes
2answers
236 views

Whats the best IT Security Web Forum? [closed]

I'm looking for a good source for IT Security, specifically information for Information Security Professionals. I'm wondering what your favorite is?
15
votes
5answers
893 views

Application security training for developers [closed]

I am trying to establish an application security group within an organization and although there is a plethora of courses for penetration testers, i fail to find an equal amount of training courses ...
2
votes
2answers
346 views

Studies on Android users' attitude to security

I'm a final year BSc. student of Computer Security & Forensics at the University of Bedfordshire (UK). I'm investigating perceptions of security on Android platforms, and how to educate users of ...
5
votes
1answer
1k views

“Hello World” example of a Buffer Overflow attack in many programming languages

I'm looking for a very simple application that has an intentional Buffer Overflow embedded in it. I'm assuming this possible in systems where DEP and ASLR are not being used Ideally (and if ...
0
votes
1answer
109 views

How to initiate the learning process of modern day IT Security concepts mainly cryptography? [closed]

I am a programmer with about 7 years of experience mainly in Java . I am interested in the subject of cryptography very much . I love algorithms and datastructures . When I first started learning ...
2
votes
3answers
567 views

What are the risks of a rogue Access Point? What lessons can be learned from the Wifi Pineapple?

I'd like to educate colleagues and peers on rogue access points using the tool "Wifi Pineapple". What are some specific security-related lessons I could demonstrate? If applicable, what are the ...
2
votes
3answers
362 views

What things should a penetration tester know about databases?

I want to start learning about databases from a penetration tester's perspective and I would like to know what things will be useful on the long run. Also do you know any good books to kickstart my ...
0
votes
1answer
253 views

Good reading about windows architecture/reversing [closed]

I have a feeling that I need to get more knowledge about system programming and winapi/windows architecture in particular to be able to understand how lots of exploits work (like those exploiting ...
2
votes
1answer
208 views

Career path: Is going for PMP along with having a rich experience in the InfoSec field a good career move?

I think the title pretty says it all. Do you think that if one has experience in implementations of security and network solutions, and then gets to become a PMP, will that be an added value to his ...
4
votes
3answers
351 views

Where can I get security breach alerts?

I've been following a mish-mash of Google News alerts as well as some 'security' influencers on Twitter, but have a feeling there's a more efficient way to deal with this out there...
-3
votes
2answers
765 views

Cheap, Foot-in-the-door certifications? [closed]

Could you recommend cheap certifications to get your foot in the door of the industry.
11
votes
4answers
619 views

How to convince your boss about importance of IT security

Do you know how could I make my security complaints/advices more effective? Or How could I convince my boss about IT security? There are a couple of known good practices in the field of IT security. ...
4
votes
7answers
636 views

Information Security is becoming more important, but why is it still so difficult to start off in?

For example i have seen countless speachess by the UK goverment on how likely a cyber attack is, if so why do they not offer more incentives for new security professionals. I find it frustrating as a ...
8
votes
3answers
5k views

Ethical Hacking - Penetration Testing Book(s) [closed]

I am an IT student who wishes to seek a career in the field of Ethical Hacking, more specific in Penetration Testing. Due to the nature of my course, none of my classes go deep enough into this ...
6
votes
5answers
1k views

Where should I go from here to be a pentester?

I would like some tips on what I can study to be a better penetration tester. That is what I would like to work towards being, although I have trouble knowing where to start. I have a decent ...
2
votes
1answer
703 views

Web application penetration testing resources? [duplicate]

Possible Duplicate: Best resources to learn web security attacks? I'm very interested in web application penetration testing. I went over every good Youtube video on that subject and most ...
6
votes
2answers
6k views

What preparation do I need to fullfil for OSCP?

I am new to this whole Offensive Security field. Also I have not spent much time in IT. 6 months back I started running behind Offensive Security & started studying. First I studied for C|EH and ...
4
votes
1answer
235 views

Jobs Regarding Network Security

I am new college graduate from India with no job experience. I have deep interest in Information Security and would like to a work for any good company related to the field. Since I don't have ...
0
votes
2answers
449 views

How to get started in information security with sales background?

I am currently a Masters student looking to change career from sales to IT, specifically Information Security. What are some good resources about finding jobs? What skills should I focus on to get a ...
7
votes
10answers
594 views

networking and security

I'm trying to pick up networking security within a reasonable amount of time. I'm not specifically looking to learn about all the little tools that are available (although I do want to know about ...
-1
votes
3answers
550 views

Code auditing and/or fuzzing - Books and resources

I've read the 'Shellcoder's Handbook' as well as 'The Art of Exploitation', and appreciated both a lot. Now I'm looking for additional resources delving into vulnerability spotting, code auditing, and ...
3
votes
3answers
6k views

OSCP certification for junior pen tester position any good?

Currently finishing my degree in computer security and have a few years experience in IT support and want to get into a junior pen testing job or similar. Would the OSCP certification do me any ...
4
votes
3answers
968 views

What sort of mathematical background is necessary to learn ethical hacking?

Do I need to be a "mathematical whiz" to be a hacker?
3
votes
3answers
1k views

Reading Wireshark Result and Security Learning Recommendation

I am (not so) currently learning about security and right now I am learning about using Wireshark. I bumped into this video: ...
4
votes
2answers
1k views

How to use attack trees and attack graphs

I am trying to understand how attack trees\graphs can be used in the security process. I read a lot of papers presenting the topic and how this reppresentation can be useful, but I really don't ...
0
votes
3answers
3k views

Demo of web site that is vulnerable to command injection

I'm looking for a demonstration web site that shows an example of a web site that is vulnerable to command injection: where I can inject something and get the web site to run a shell command. (This ...
3
votes
6answers
2k views

Best resources to learn web security attacks? [closed]

Can anyone suggest good resources to learn about vulnerabilities in and attacks on web sites, in a hands-on way, for someone with limited programming experience?
7
votes
5answers
370 views

What should students learn about security in an introductory programming course?

Some folks have advocated that security should be integrated into computer science coursework, throughout the curriculum. Suppose we are going to add one lecture on security, to a first course on ...
1
vote
0answers
312 views

NetSec/InfoSec position salary expectation and negotiation [closed]

I'm about to receive an offer for a position of "Security developer / Pen-tester" that I have been interviewing for. The firm is moderately sized and as some very big clients, so in terms of cost vs. ...
5
votes
4answers
4k views

What are the basic certification course for beginners?

I am an application developer in MNC with 2 year experience. What are the basic certification or course should I do what can help myself to shift in security field?
4
votes
2answers
3k views

Security Architect as a career path. How do i do it?

As it says, I want to become a Security Architect and I'm not sure of the career path to follow! I've already asked a few questions about certifications and got great help from this community. ...
0
votes
2answers
178 views

Looking for information about the job from security consultants

I'm graduating with my bachelor's in computer science in December, and I'm looking to get an internship in a security consultant firm for the summer, or apply as an analyst/associate in October. I've ...
9
votes
7answers
20k views

Programming language for network security

I am working as a tester now. I am planning to move to the domain of security such as a CEH or CISSP. But many say that to be a great hacker you need to know at least one programming language well. I ...
25
votes
13answers
30k views

How to learn penetration testing at home?

I am interested in learning ethical hacking or penetration testing to head towards a career in that direction. I have a strong knowledge of linux and unix, basic computer theory and practice and ...
12
votes
2answers
321 views

Should a pentest report include the tester's opinion?

In this particular case, the webserver turned out to be a shared 3rd party system and was not tested. Examples: We do express grave concern at the overall security posture of that webserver and ...
0
votes
1answer
765 views

Good book about Scapy [closed]

Is there any good learning resources for Scapy apart from the official documentation? I am looking for a good book about the Scapy
4
votes
2answers
1k views

Security Engineers - What Do They Do?

I'm starting my MS in Computer Science (I hold a BS currently) soon and I'm considering specializing in cyber security. I'll be taking courses such as cryptography, biometrics, network security, ...
2
votes
2answers
2k views

What career path do I need to follow to become a CISO?

I'm a security researcher and I want to know what career path you think I need to follow to become a Chief Information Security Officer. What skills are necessary in this position ? What field of ...
2
votes
1answer
192 views

CIS vs CS for Information Systems Security?

I would like to know which degree out of these two would better prepare me for Information Systems Security. I want to eventually work with the CIA as a Information Systems security specialist however ...