Formal education and training in preparation for the practice of a profession.

learn more… | top users | synonyms (4)

2
votes
3answers
912 views

Ranking of web security conferences

I have prepared a paper to publish in a web security conference. How can I know the ranking of available conferences to know which conference is better? For example, should I look at their sponsors?
2
votes
3answers
400 views

What things should a penetration tester know about databases?

I want to start learning about databases from a penetration tester's perspective and I would like to know what things will be useful on the long run. Also do you know any good books to kickstart my ...
2
votes
3answers
660 views

What are the risks of a rogue Access Point? What lessons can be learned from the Wifi Pineapple?

I'd like to educate colleagues and peers on rogue access points using the tool "Wifi Pineapple". What are some specific security-related lessons I could demonstrate? If applicable, what are the ...
2
votes
1answer
209 views

NSA CAE/IAE courses

Is there any list of specific courses that the NSA suggests to be taken at the schools that they have designated CAE/IAE? I have a general knowledge of what courses I should take, but I still want to ...
2
votes
1answer
229 views

Career path: Is going for PMP along with having a rich experience in the InfoSec field a good career move?

I think the title pretty says it all. Do you think that if one has experience in implementations of security and network solutions, and then gets to become a PMP, will that be an added value to his ...
2
votes
1answer
844 views

Web application penetration testing resources? [duplicate]

Possible Duplicate: Best resources to learn web security attacks? I'm very interested in web application penetration testing. I went over every good Youtube video on that subject and most ...
2
votes
1answer
202 views

CIS vs CS for Information Systems Security?

I would like to know which degree out of these two would better prepare me for Information Systems Security. I want to eventually work with the CIA as a Information Systems security specialist however ...
2
votes
1answer
906 views

Study roadmap to write a crypter / backdoor

Recently I came across a site called SecurityTube.net, which has a ton of amazing security stuff. I'm following their Python Scripting Expert videos which are totally worth it. I also came across the ...
2
votes
0answers
157 views

SANS Forensic Course -worth it? [closed]

I'm a Security Student at Pennsylvania State University and I am considering taking FOR408 through SANS this summer in Pittsburgh (not far from my home). I really want this to help me stand out in my ...
1
vote
3answers
1k views

How to prepare for hacking competitions [closed]

I know that there are several hacking competitions, but I would like to know how to prepare for hacking competitions. I know that there are several hacking courses, online and offline, but they only ...
1
vote
2answers
3k views

How would one go about becoming a Security Researcher

Can any Security Researchers/Pentesters/Hackers point me in a direction to learn about becoming a Security Researcher and steps to take?
1
vote
1answer
270 views

Cryptography Online Education [closed]

Do the security experts at IT Security have a preference between the two cryptography courses offered by Coursera (Stanford), "Cryptography I" and Udacity, "Applied Cryptography"? I am seeking an ...
1
vote
2answers
441 views

Books, videos, and other resources for CEHv7 [closed]

What are recommenced books, videos and other resources for CEHv7. It seems as though not much is published on the new version of the cert just yet. Currently, I have read All In One CEH by Matt ...
1
vote
1answer
90 views

Developer Security Training .NET / JAVA [closed]

Hello my team is tasked to perform security focused training for developers (.NET and JAVA). I have used WebGoat to demonstrate OWASP Top 10 type security vulnerabilities and am looking for a similar ...
1
vote
1answer
200 views

Course project that teaches secure design

I'm looking for a class project that (1) is scalable to large classes, and (2) teaches secure design. This is for an undergraduate course on computer security. Hopefully, it would be educational and ...
1
vote
1answer
64 views

Sans security courses: How are self study courses certified? [closed]

If i were to take the course http://www.sans.org/course/advanced-web-app-penetration-testing-ethical-hacking# as a self study course over 4 months, how is it eventually graded? Is it an exam at the ...
1
vote
3answers
509 views

Anti-Phishing Campaign Objective

At every office I have worked, links and files, both internal and external, are shared in emails. Is the objective of an anti-phishing campaign that users never click on blind, or otherwise ...
1
vote
1answer
230 views

Audiobooks to learn about Infosec? [closed]

I recently got homeland on a humble bundle and I've been getting really interested in Information Security so i want to keep learning and the best way i find is to listen to Audio books or podcast ...
1
vote
0answers
424 views

Is anything written in the book “Internet Denial of Service: Attack and Defense Mechanisms” c2004 still valid? [closed]

I was reading through some of this book on google: http://books.google.ca/books?id=qmdCs_Jf2AEC It is uploaded to a hungarian website here: http://denialofservice.uw.hu/index.html I was reading... ...
1
vote
0answers
344 views

NetSec/InfoSec position salary expectation and negotiation [closed]

I'm about to receive an offer for a position of "Security developer / Pen-tester" that I have been interviewing for. The firm is moderately sized and as some very big clients, so in terms of cost vs. ...
0
votes
2answers
188 views

Hacking Course Value (Soft) [closed]

The college that I'm currently attending (masters) offers a ethical hacking course, which I am currently enrolled in. I have been seriously considering dropping the course for several reasons. 1) ...
0
votes
1answer
92 views

Cyber Security Training v. Cyber Security Education for Middle to High Schoolers [closed]

In my community, we have one state university that offers cyber security training once a year to high school students that show interest. Last year a student, after receiving this training, hacked ...
0
votes
2answers
263 views

Is there a “classic” information security textbook? [closed]

Much in the same way compilers has the dragon book, algorithms has the Cormen, and graphics has Foley & van Dam I am wondering what the book on computer security is. Not the "best" book, or the ...
0
votes
3answers
405 views

Up to date books for OpenSSL coverage of TLS 1.1 and 1.2 [closed]

I currently have Implementing SSL / TLS Using Cryptography and PKI Joshua Davies. It is very recent and covers even newer TLS version 1.1 and 1.2 and ECC. It is based on many C sample that are ...
0
votes
3answers
3k views

Demo of web site that is vulnerable to command injection

I'm looking for a demonstration web site that shows an example of a web site that is vulnerable to command injection: where I can inject something and get the web site to run a shell command. (This ...
0
votes
2answers
171 views

What is the best resource to learn malware analysis? [closed]

I am looking for a resource that helps learn malware analysis. I know about the practical malware analysis book but i am looking for something other than a book. For example a Site or video tutorials. ...
0
votes
2answers
493 views

How to get started in information security with sales background?

I am currently a Masters student looking to change career from sales to IT, specifically Information Security. What are some good resources about finding jobs? What skills should I focus on to get a ...
0
votes
1answer
121 views

penetration testing first step [closed]

I've started a course about Penetration testing and CEH on cybrary. The course begins with an introduction that quickly describes each step of pentesting. The first step is essentially to gather ...
0
votes
2answers
145 views

What college majors are suitable for a career in security? [closed]

I was recently asked by a friend of mine (outside the computer science field) if he can be successful in web-application pen-testing I took this as an excuse to ask a more comprehensive question. I ...
0
votes
1answer
619 views

Comprehensive & current book on native application exploit research & development [closed]

Is there a 'must read', comprenhensive book on native application exploit development? Covering the process of finding vulnerabilities (fuzzing, reverse engineering, code analysis, etc...) & ...
0
votes
2answers
186 views

Necessary education for InfoSec? [closed]

So, as it stands I'm a 21 year old recent Bio-Chemistry graduate looking for a path into InfoSec. Without a background in any computing discipline I assumed that it would be seen as compulsory that I ...
0
votes
2answers
184 views

Looking for information about the job from security consultants

I'm graduating with my bachelor's in computer science in December, and I'm looking to get an internship in a security consultant firm for the summer, or apply as an analyst/associate in October. I've ...
0
votes
1answer
899 views

Good book about Scapy [closed]

Is there any good learning resources for Scapy apart from the official documentation? I am looking for a good book about the Scapy
0
votes
2answers
254 views

CEH training courses requirements

What are the requirements for studying CEH? Is there any requirements for the programming background? And can anyone apply for it or does he has to have a recommendation for both studying and taking ...
0
votes
1answer
231 views

Preparation for Blue Team Competitions [closed]

I am a CS student, and am considering competing in the National Collegiate Cyber Defense Competition. Although I have a fair amount of experience in programming competitions (e.g. ACM at High School ...
0
votes
2answers
287 views

Books to start the study of TCP/IP [closed]

I'm 20 years old and have no knowledge in the world of information security! I'm currently studying engineering and I've recently found what work I want to do (pentesting or a career in fields like ...
0
votes
1answer
37 views

Applications of ODEs to Cybersecurity

My university's cybersecurity program allows one to take a course in ordinary differential equations as an elective. The course would be interesting to take, although I don't know how I'd apply it to ...
0
votes
1answer
87 views

Worthy security related certifications for a software engineer [closed]

I am a software engineer with an interest in expanding my knowledge in the security field. In addition to security.stackexchange and OWASP, I am currently reading the book "The web application ...
0
votes
1answer
78 views

Network and Security Associates v.s. CISCO Security Associates [closed]

My college is expanding the Information Technology department to include Networking and Security as well as the CISCO Security. In my research online I have found different information for each ...
0
votes
2answers
1k views

What knowledge is neccessary to work in computer security? [closed]

What level of knowledge does a person need to work in computer security? Are the following skills sufficient? Good knowledge in TCP/IP networking Good knowledge in firewalls/firewall techniques ...
0
votes
2answers
834 views

Networking books for programmers [closed]

I have some programming experience, mostly in web apps, based on pre-existing frameworks. That is, all the networking side of things are handled already, and no knowledge of them is necessary. I ...
0
votes
1answer
119 views

How to initiate the learning process of modern day IT Security concepts mainly cryptography? [closed]

I am a programmer with about 7 years of experience mainly in Java . I am interested in the subject of cryptography very much . I love algorithms and datastructures . When I first started learning ...
0
votes
1answer
277 views

Good reading about windows architecture/reversing [closed]

I have a feeling that I need to get more knowledge about system programming and winapi/windows architecture in particular to be able to understand how lots of exploits work (like those exploiting ...
0
votes
0answers
61 views

Pursue career in Network Security [duplicate]

My qualification is Masters in Computer Science and i am currently working as a Technical Support Associate (Network Support) with a MNC. I am good with JAVA programing and have worked on some small ...
-1
votes
3answers
598 views

Code auditing and/or fuzzing - Books and resources

I've read the 'Shellcoder's Handbook' as well as 'The Art of Exploitation', and appreciated both a lot. Now I'm looking for additional resources delving into vulnerability spotting, code auditing, and ...
-1
votes
2answers
193 views

Android OS Security [closed]

I am somewhat confused in terms of how secure Android OS is and how updates work on Android. Are there security fixes on each release? How can I keep track for Android exploits and what are the most ...
-1
votes
1answer
283 views

Breaking into the IT Security Industry as a pentester [closed]

I am currently a programmer with 4 years of experience. In the past I have done tech support for a few years and was an instructor at an IT trade school for a few years. I have a good balance of IT ...
-1
votes
2answers
76 views

Advice on the degree path [closed]

I am currently in the first year of Computer Security at the university. But I have some doubts about the course. So I want to ask the professionals some questions :D Is it better to lose a year ...
-1
votes
1answer
253 views

Security Awareness Training Ideas [closed]

Does anyone have any solid recommendations for deploying and maintaining security awareness training? I am not looking for a specific vendor but I am trying to gain insight about how the material is ...
-1
votes
1answer
256 views

Linux security books [closed]

I am trying to find an updated book (preferably from 2012-2013) that can cover linux security aspects comprehensively. I searched on Amazon and found that most Linux security books are from back in ...