Formal education and training in preparation for the practice of a profession.

learn more… | top users | synonyms (4)

36
votes
14answers
57k views

How to learn penetration testing at home?

I am interested in learning ethical hacking or penetration testing to head towards a career in that direction. I have a strong knowledge of linux and unix, basic computer theory and practice and ...
6
votes
4answers
9k views

OSCP certification for junior pen tester position any good?

Currently finishing my degree in computer security and have a few years experience in IT support and want to get into a junior pen testing job or similar. Would the OSCP certification do me any ...
4
votes
3answers
2k views
1
vote
2answers
54 views

InfoSec Jobs without College Degree With Work Experience? [closed]

This question as been asked before it seems, but I could use some advice myself for my specific situation. I am very frustrated with my university. I study software engineering and I am very bored. I ...
17
votes
2answers
21k views

What preparation do I need to fullfil for OSCP?

I am new to this whole Offensive Security field. Also I have not spent much time in IT. 6 months back I started running behind Offensive Security & started studying. First I studied for C|EH and ...
70
votes
19answers
5k views

What security resources should a white-hat *developer* follow these days?

What sites, twitter accounts, FOSS software should a white-hat code 'hacker' follow these days? Do Include: Late breaking information on new security issues (RSS, Twitter, etc) A website that ...
1
vote
1answer
60 views

How can programming knowledge help towards information security [duplicate]

Im interested in becoming a cyber security expert. I feel comfortable with my networking skills but im worried about my programming skills. How important is for a cyber security expert to have ...
0
votes
2answers
1k views

How much programming knowledge do I need to enter the security field? [closed]

I'm still young (16 years old) and I haven't entered the security field yet. I'm curious how much programming I need to enter the security field. I can write real-life programs in Python. I can also ...
28
votes
15answers
2k views

List of good security blogs one should read

I graduated this year and am working in the security domain. I want to explore security topics and don't have a strong background since it was not part of our curriculum. Can you list some good ...
4
votes
1answer
1k views

Syllabus for self-studying information security and Pentesting [closed]

I'm someone who's distant, industry-wise, from technology. I'm actually in the medical field. That said, I'm very interested in technology and specifically in information security. I'd like to make a ...
-1
votes
1answer
135 views

how to start penetration testing? [closed]

I am currently working as security analyst on few applications and am willing to jump into penetration testing in future.To start with, what kind of skill set do i need to develop like tools and ...
-1
votes
2answers
122 views

What should I learn for Cyber security [closed]

I am a first-year student that wants to study Cyber security in future. But I don't know exactly all subjects which I must study deeper for this area. I read that I need to study, as for programming ...
64
votes
7answers
4k views

Which topics should a security training for non-IT persons contain?

(I am not sure, if this question fits the security.stackexchange-board, but the list of askable topics does not exclude this question imho and there are some examples) I've worked for several ...
-3
votes
1answer
91 views

The “5 years experience required” paradox [closed]

In looking for a job in the Raleigh/Durham area, every information security position has CISSP required, or 5+ years experience in information security required. This doesn't add up. Every day I hear ...
0
votes
3answers
118 views

Getting into pentesting with no experience

Wanted to ask a question that I've seen answered in many places, but I could find nothing related to a specific point I got. Just a bit of background, I work in 3rd level software support for 5+ ...
32
votes
10answers
7k views

Vulnerable OS's?

Which vulnerable OS's like for example DVL would you recommend for someone to use for the purpose of pentest/exploitation learning?
3
votes
2answers
126 views

Need some recommendations on good IR hands-on training

Does anyone know if there is any good hands-on training for incident response and digital forensics, or certification I need to take in order to gain more hands-on experience? Thanks and any helpful ...
121
votes
14answers
39k views

What “hacking” competitions/challenges exist? [closed]

I have always enjoyed trying to gain access to things I'm not really supposed to play around with. I found Hack This Site a long time ago and I learned a lot from it. The issue I have with HTS is that ...
12
votes
9answers
44k views

Programming language for network security

I am working as a tester now. I am planning to move to the domain of security such as a CEH or CISSP. But many say that to be a great hacker you need to know at least one programming language well. I ...
0
votes
2answers
99 views

How to get started? [closed]

Hi I am trying to get started in all this. I don't have that much experience but I am going to school to get a bachelors in information technology and I have learned a little bit about hacking as well ...
4
votes
3answers
3k views

What career path do I need to follow to become a CISO?

I'm a security researcher and I want to know what career path you think I need to follow to become a Chief Information Security Officer. What skills are necessary in this position ? What field of ...
47
votes
5answers
4k views

Teaching “Secure by Design”

I'm a Security Architect, and I'm used to defining the security of project as a specification that gets carried out by others. I have been recently tasked with teaching new coders how to design and ...
15
votes
3answers
871 views

Should a penetration tester have training in ISO 27001/ITIL etc?

I recently got offered a promotion but as part of the package I've been requested to do ISO 27001, ITIL, ARPA and other kinds of training. I've previously avoided this sort of training as I felt it ...
6
votes
2answers
6k views

SANS training - worth it? [closed]

I am a programmer, doing mostly web development now, dealing also with securing the web applications in my line of work. I have reasonable knowledge of security matters, though not always staying up-...
1
vote
1answer
67 views

Strategy/structure/roadmap to learn Pentesting [closed]

I am currently teaching myself computer security and pentesting. My problem is the following: I more or less know the absolute basics (tcp/ip, bufferoverflows, xss...) but in all those areas I dont ...
3
votes
3answers
83 views

Is there an effective social engineering employee awareness program?

Social engineering is cited as one of the primary threat vectors (see for example at: https://gallery.technet.microsoft.com/Fixing-the-1-Problem-in-2e58ac4a). Employee awareness training is also ...
4
votes
4answers
748 views

Can you pass C|EH without any hands-on experience in hacking tools

I've been in the IT security industry for well almost a year now since I graduated last year and I'm currently thinking about taking up C|EH examination. I've glanced through several prep and review ...
-1
votes
1answer
1k views

Good book about Scapy [closed]

Is there any good learning resources for Scapy apart from the official documentation? I am looking for a good book about the Scapy
14
votes
9answers
6k views

Is advanced mathematics relevant to security beyond cryptography?

Short question. The title says it all... is advanced mathematics (i.e. beyond the classic college level calculus sequence) relevant to any field of computer security besides cryptography? By relevant, ...
0
votes
1answer
116 views

How do you go about researching and discovering zero days? [closed]

How do you go about researching and discovering zero days? Breakdown the process. What positions can I expect to see that offers a more offensive and research oriented approach to security? i see How ...
28
votes
11answers
6k views

Resources to learn about security

I am currently just finishing a undergrad computer science degree, but I know very little about computer security. What are some good resources (aside from this site) to learn the fundamentals of ...
31
votes
14answers
3k views

Courses on “Secure Software Development” [closed]

This semester, I'm offering a course on "secure software development". The course is divided into three parts: Secure Software Engineering Reverse Engineering Secure Coding Do you know of any ...
0
votes
0answers
35 views

Does Wassenaar Arrangement on the transfers of conventional arms and dual-use goods and technologies apply to security training?

Does the Wassenaar Arrangement on the transfers of conventional arms and dual-use goods and technologies apply to security training? Does it apply to security training on exploitation techniques? Is ...
27
votes
7answers
530 views

How to keep an eye on upgrades, patches and security issues for used open-source libraries?

For a project with many open-source libraries as a part of it, I began to search for information source concerning all upgrades and security issues. The kind of sources I gathered are either ...
26
votes
5answers
4k views

Professional certifications for IT Security [closed]

Which credentials of the sub-list of IT certifications (as per the Information Systems Security Association) would be considered MUST HAVE for a IT Security specialist? CEH Certified Ethical Hacker ...
2
votes
1answer
75 views

Which conferences are comparable to the Defcon? [closed]

Rory Aslop wrote something interesting regarding conferences here: Defcon always worked out as the most cost effective broad technical training for my penetration testers and technical security ...
1
vote
1answer
130 views

In the United States, when can someone legally search my personal laptop? (Government or private security) [closed]

Unlike the United Kingdom, U.S. citizens don't have an explicit right to privacy in the Constitution. Although there are implied privacy rights within "penumbras" of the Bill of Rights this has ...
25
votes
5answers
3k views

WarGames: Platforms to practice and improving your hacking skill set [closed]

Do you know of any good free platform in which we can practice different attack vectors and vulnerabilities such as XSS, SQL injection, low level hacking, reverse engineering etc. ? For example, I ...
3
votes
2answers
209 views

Connected cars: Skills needed for a security specialist [closed]

Connected cars are being mass produced by many car manufactures such as Audi, GM, Honda and Hyundai (Founding members of the Open Automotive Alliance). Recently I have read a scaring article about ...
18
votes
5answers
2k views

At what point in their employment should security policies be explained to an employee?

There are the basic things that need to be explained to every employee about a security policy. For example: How sensitive information must be handled. How to properly maintain your ID, and password,...
-4
votes
3answers
770 views

How do I find vulnerabilities in software? [closed]

I read an answer here which talked about becoming a PenTester. The answer said that you have to learn to break software. I posted a comment on the answer asking where do I start learning to break ...
0
votes
2answers
480 views

What certifications do I need to become a Malware Analyst? [closed]

I've previously posted here on how to get started as a malware analyst, and wanted to say thanks on getting me started. How much do certifications help me on my resume and which one(s) should I get? ...
0
votes
1answer
130 views

Lost in a field of Degrees and certifications [closed]

I have another semester or so before I graduate with my As in Information security. This is going to be a two part question. Other than the degree I will also have a few different certifications. ...
3
votes
1answer
1k views

Responsibilities as a Junior Information Security Analyst? [closed]

Tomorrow will be my first day as a new Junior Information Security Analyst, and I'm nervous and excited at the same time. I want to apologize if this is the wrong place to ask such questions, but I ...
8
votes
2answers
752 views

CTF competitions/challenges that are Windows based?

I've been messing about in CTF's for a while and I also do pen-testing professionally, what i've noticed is a distinct lack of CTF competitions using windows environments. This is in stark contrast ...
1
vote
1answer
221 views

Sans security courses: How are self study courses certified? [closed]

If i were to take the course http://www.sans.org/course/advanced-web-app-penetration-testing-ethical-hacking# as a self study course over 4 months, how is it eventually graded? Is it an exam at the ...
-1
votes
2answers
118 views

Advice on the degree path [closed]

I am currently in the first year of Computer Security at the university. But I have some doubts about the course. So I want to ask the professionals some questions :D Is it better to lose a year ...
0
votes
1answer
231 views

penetration testing first step [closed]

I've started a course about Penetration testing and CEH on cybrary. The course begins with an introduction that quickly describes each step of pentesting. The first step is essentially to gather ...
0
votes
2answers
286 views

Hacking Course Value (Soft) [closed]

The college that I'm currently attending (masters) offers a ethical hacking course, which I am currently enrolled in. I have been seriously considering dropping the course for several reasons. 1) ...
0
votes
1answer
148 views

Cyber Security Training v. Cyber Security Education for Middle to High Schoolers [closed]

In my community, we have one state university that offers cyber security training once a year to high school students that show interest. Last year a student, after receiving this training, hacked ...