Formal education and training in preparation for the practice of a profession.

learn more… | top users | synonyms (2)

5
votes
2answers
1k views

Beginner level security for a CS student

I am a final year CS student, and would like to study info sec. Till today, I've been reading infosec mailing lists, some Phrack papers etc., but all in a very casual way. I am interested in learning ...
2
votes
1answer
193 views

NSA CAE/IAE courses

Is there any list of specific courses that the NSA suggests to be taken at the schools that they have designated CAE/IAE? I have a general knowledge of what courses I should take, but I still want to ...
7
votes
1answer
3k views

SANS training - worth it?

I am a programmer, doing mostly web development now, dealing also with securing the web applications in my line of work. I have reasonable knowledge of security matters, though not always staying ...
5
votes
4answers
4k views

CEH or GIAC - Which one should I pursue?

After a lot of Google and forum searches, I found out CISSP is one of the few valuable certs. Unfortunately, I only have 2 years of experience and don't have any specific experience in security ...
5
votes
2answers
694 views

Should I go for Master of Science by GIAC SANS and what to do with my expiring GSEC cert?

I am now concentrating on my startup which is basically a one-man show. At the same time, i just received an email from SANS Technology Institute’s (STI) about their exciting new accelerated option ...
12
votes
5answers
810 views

How to get into RFID auditing?

I would like to get more knowledge around RFID-systems auditing. Does anyone have a basic guide step-by-step which I can use to set up a lab with proper RFID "sniffing" equipment? I would like to ...
4
votes
2answers
242 views

What does a MCSE need to learn to be proficient regarding *nix security?

I have a top notch Windows MCSE/MCSD (developer) who wants to broaden his skills with Linux security... but needs to update his skills from the Ultrix / Yellowpages days of 40 years ago. What ...
5
votes
2answers
408 views

How do you organize a code review / static analysis report?

Recently I get involved in a security code review. I found many format string, buffer overflow and dangerous libc function call. Right now I need to write down a report with all the stuff founded ...
4
votes
1answer
122 views

Reading about security by design?

Security folks often encourage people to build security in from the start, and architect systems that are secure by design. What are some readings you would recommend for someone who wants to learn ...
8
votes
5answers
314 views

In what ways do some banks inadequately advise their customers on online security?

I'm looking for specific examples of things such as: Misleading, but common advice Advice which has backfired Advice which is just, quite simply, incorrect which have been circulated time and time ...
5
votes
5answers
653 views

Where can I find a mentor/teacher in computer security?

I really enjoy computers - especially security. That's why I went to a school profiled as technical/IT. However, they teach crap. They don't know anything after the release of windows xp/2003. When ...
-1
votes
1answer
307 views

Learning Network Security [duplicate]

Possible Duplicate: Resources to learn about security I'm a software developer. I'm interested in learning Network Security, what is the recommended books, video courses, etc that I can ...
5
votes
2answers
626 views

Beginners materials for web security [duplicate]

Possible Duplicate: Resources to learn about security What materials can I study to learn web development security. I'm a web developer, I use ASP.NET, Java, PHP, and JavaScript. I want to ...
18
votes
4answers
650 views

How would you reason with and work with the security paranoiac on your team?

The question of how to balance pragmatism with an absolutist view of security has been discussed here already. But I need the answer to a concrete variant of that question. You're the security expert ...
5
votes
2answers
512 views

Digital Forensics and Pentesting: what now?

So, i want to enter the security field, and i'm leaning towards security auditing, digital forensics, and reverse engineering. i'm in school right now, i'm studying x86 ASM, exploring Linux, and soon ...
5
votes
3answers
292 views

Some good resources on viruses/worms?

I am searching good info on sophisticated viruses/worms. One example would be STUXNET and the very good analysis made by folks from Symantec. Any ideas?
3
votes
2answers
331 views

How to “get in sync” with what is happening in the security scene right now? [duplicate]

Possible Duplicate: What security resources should a white-hat developer follow these days? A colleague of mine already has some understanding of security fundamentals but still needs "get ...
9
votes
4answers
2k views

Is Schneier's “Applied Cryptography” current?

I've been recommended Bruce Schneier's 1994 book Applied Cryptography as an introduction to the use and the inner workings of cryptography. Is this book still current and a good introduction?
6
votes
2answers
203 views

dealing with small businesses and security issues

I am dealing with a small business that I have no choice right now but to deal with. I do not work for this business but my personal life dictates that I use them right now. I noticed a few months ago ...
4
votes
3answers
827 views

What key attributes indicate candidate potential for future success in a security career?

So you are looking to hire a fresh graduate to work in an entry-level/trainee IT security role that covers a wide range of tasks: vulnerability research, penetration testing, secure software ...
5
votes
3answers
145 views

What policies maximize incident detection (and compromise detection)?

What are the equivalent digital parallels to the practice of offering bonuses to employees challenging persons in a secured area without a visible badge?
4
votes
3answers
195 views

Most informative DEF CON talk?

I didn't make it to DEF CON this last year... I'd like to know what you thought was the most interesting/informative presentation and possibly a link to more information on the topic. [mod - ...
10
votes
2answers
597 views

What is a “pre-play” attack?

I understand what a replay attack is, but I keep reading about a pre-play attack. What is it? Is it when someone intercepts an unused message and blocks the sender so they can't finish using it, and ...
4
votes
0answers
650 views

Best website to learn computer security basics? [duplicate]

Possible Duplicate: Resources to learn about security Can someone advice on which are the good sites out there to learn the basics of computer security from?