Formal education and training in preparation for the practice of a profession.

learn more… | top users | synonyms (4)

0
votes
1answer
59 views

Lost in a field of Degrees and certifications [closed]

I have another semester or so before I graduate with my As in Information security. This is going to be a two part question. Other than the degree I will also have a few different certifications. ...
-3
votes
3answers
115 views

How do I find vulnerabilities in software? [closed]

I read an answer here which talked about becoming a PenTester. The answer said that you have to learn to break software. I posted a comment on the answer asking where do I start learning to break ...
11
votes
2answers
9k views

What preparation do I need to fullfil for OSCP?

I am new to this whole Offensive Security field. Also I have not spent much time in IT. 6 months back I started running behind Offensive Security & started studying. First I studied for C|EH and ...
4
votes
1answer
387 views

Responsibilities as a Junior Information Security Analyst? [closed]

Tomorrow will be my first day as a new Junior Information Security Analyst, and I'm nervous and excited at the same time. I want to apologize if this is the wrong place to ask such questions, but I ...
-2
votes
1answer
79 views

Crypto for penetration test [closed]

I'm a newbie but I want to become a penetration tester. I'm taking a course on cryptography but I'm wondering... how useful is crypto for penetration testing compared to other skills like operating ...
7
votes
3answers
412 views

CTF competitions/challenges that are Windows based?

I've been messing about in CTF's for a while and I also do pen-testing professionally, what i've noticed is a distinct lack of CTF competitions using windows environments. This is in stark contrast ...
27
votes
13answers
37k views

How to learn penetration testing at home?

I am interested in learning ethical hacking or penetration testing to head towards a career in that direction. I have a strong knowledge of linux and unix, basic computer theory and practice and ...
1
vote
1answer
77 views

Sans security courses: How are self study courses certified? [closed]

If i were to take the course http://www.sans.org/course/advanced-web-app-penetration-testing-ethical-hacking# as a self study course over 4 months, how is it eventually graded? Is it an exam at the ...
-1
votes
2answers
86 views

Advice on the degree path [closed]

I am currently in the first year of Computer Security at the university. But I have some doubts about the course. So I want to ask the professionals some questions :D Is it better to lose a year ...
11
votes
8answers
27k views

Programming language for network security

I am working as a tester now. I am planning to move to the domain of security such as a CEH or CISSP. But many say that to be a great hacker you need to know at least one programming language well. I ...
0
votes
1answer
131 views

penetration testing first step [closed]

I've started a course about Penetration testing and CEH on cybrary. The course begins with an introduction that quickly describes each step of pentesting. The first step is essentially to gather ...
0
votes
2answers
198 views

Hacking Course Value (Soft) [closed]

The college that I'm currently attending (masters) offers a ethical hacking course, which I am currently enrolled in. I have been seriously considering dropping the course for several reasons. 1) ...
0
votes
1answer
103 views

Cyber Security Training v. Cyber Security Education for Middle to High Schoolers [closed]

In my community, we have one state university that offers cyber security training once a year to high school students that show interest. Last year a student, after receiving this training, hacked ...
6
votes
3answers
528 views

What is a company's benefit of training employees in cybersecurity?

I'm a federally employed senior executive assistant with user knowledge of computer programs and software. I'm trying to change my career and am looking for my employer to pay for my training. I'm ...
-3
votes
1answer
81 views

Book about security in web applications [closed]

I'm new to security in web applications.I have searched in amazon but I was unable to find a book for today's technology. As far as I know HTML5 comes with a few new attack vectors, most of the books ...
3
votes
1answer
223 views

security clearance for programmers

I am programmer by day and night, I work within security at the moment working on some security products. I have noticed a few non software engineering based roles which require security clearance. I ...
0
votes
2answers
198 views

What is the best resource to learn malware analysis? [closed]

I am looking for a resource that helps learn malware analysis. I know about the practical malware analysis book but i am looking for something other than a book. For example a Site or video tutorials. ...
-2
votes
2answers
299 views

Life in cybersecurity: How do I get there? [closed]

I am 17 years old and my ultimate job goal is a cyber security professional. I have been extensively studying TCP/IP, along with all other subjects in the CompTIA Network+ certification which I hope ...
4
votes
3answers
1k views
0
votes
2answers
291 views

CEH training courses requirements

What are the requirements for studying CEH? Is there any requirements for the programming background? And can anyone apply for it or does he has to have a recommendation for both studying and taking ...
25
votes
10answers
4k views

Vulnerable OS's?

Which vulnerable OS's like for example DVL would you recommend for someone to use for the purpose of pentest/exploitation learning?
10
votes
5answers
2k views

Do I need a bachelor's degree to break in information security? [closed]

First of all, I have a college diploma in computer networking. I tried to get a job as network admin, but because of my lack of experience in that field I did not succeed. So I returned as a help ...
24
votes
10answers
15k views

Good (preferably free) resource for CISSP practice questions

I'm looking to sit for my exam in a few weeks, and I want to have a good set of practice tests to bounce against and make sure that I'm up to par with the types of questions that will be asked.
1
vote
1answer
102 views

Developer Security Training .NET / JAVA [closed]

Hello my team is tasked to perform security focused training for developers (.NET and JAVA). I have used WebGoat to demonstrate OWASP Top 10 type security vulnerabilities and am looking for a similar ...
15
votes
5answers
1k views

Application security training for developers [closed]

I am trying to establish an application security group within an organization and although there is a plethora of courses for penetration testers, i fail to find an equal amount of training courses ...
17
votes
9answers
5k views

List of good security podcast one should listen to

I'm a hard core dyslectic who wants to read up on all things security without the reading part. So I want to know what good high quality security podcasts are there? I'm interested in almost ...
27
votes
11answers
5k views

Resources to learn about security

I am currently just finishing a undergrad computer science degree, but I know very little about computer security. What are some good resources (aside from this site) to learn the fundamentals of ...
0
votes
1answer
241 views

Preparation for Blue Team Competitions [closed]

I am a CS student, and am considering competing in the National Collegiate Cyber Defense Competition. Although I have a fair amount of experience in programming competitions (e.g. ACM at High School ...
0
votes
2answers
342 views

Books to start the study of TCP/IP [closed]

I'm 20 years old and have no knowledge in the world of information security! I'm currently studying engineering and I've recently found what work I want to do (pentesting or a career in fields like ...
0
votes
2answers
277 views

Is there a “classic” information security textbook? [closed]

Much in the same way compilers has the dragon book, algorithms has the Cormen, and graphics has Foley & van Dam I am wondering what the book on computer security is. Not the "best" book, or the ...
0
votes
2answers
150 views

What college majors are suitable for a career in security? [closed]

I was recently asked by a friend of mine (outside the computer science field) if he can be successful in web-application pen-testing I took this as an excuse to ask a more comprehensive question. I ...
15
votes
5answers
3k views

Hackable linux distributions

A few years ago we had that awesome Linux distribution called Damn Vulnerable Linux. But unfortunately it looks like the project is dead. So my question is are there other Linux distributions which ...
3
votes
1answer
700 views

Syllabus for self-studying information security and Pentesting [closed]

I'm someone who's distant, industry-wise, from technology. I'm actually in the medical field. That said, I'm very interested in technology and specifically in information security. I'd like to make a ...
4
votes
1answer
250 views

Jobs Regarding Network Security

I am new college graduate from India with no job experience. I have deep interest in Information Security and would like to a work for any good company related to the field. Since I don't have ...
3
votes
3answers
326 views

System Hardening: Outsource to Security Expert or have Sys Admin do it? [closed]

Can any of you security experts help me make a decision on how to deal with staffing for an initial hardening for an Apache server running MySQL and PHP? We are working on a new site have to do ...
-1
votes
1answer
273 views

Security Awareness Training Ideas [closed]

Does anyone have any solid recommendations for deploying and maintaining security awareness training? I am not looking for a specific vendor but I am trying to gain insight about how the material is ...
0
votes
1answer
41 views

Applications of ODEs to Cybersecurity

My university's cybersecurity program allows one to take a course in ordinary differential equations as an elective. The course would be interesting to take, although I don't know how I'd apply it to ...
0
votes
1answer
89 views

Worthy security related certifications for a software engineer [closed]

I am a software engineer with an interest in expanding my knowledge in the security field. In addition to security.stackexchange and OWASP, I am currently reading the book "The web application ...
1
vote
1answer
242 views

Audiobooks to learn about Infosec? [closed]

I recently got homeland on a humble bundle and I've been getting really interested in Information Security so i want to keep learning and the best way i find is to listen to Audio books or podcast ...
0
votes
2answers
500 views

How to get started in information security with sales background?

I am currently a Masters student looking to change career from sales to IT, specifically Information Security. What are some good resources about finding jobs? What skills should I focus on to get a ...
27
votes
5answers
3k views

Professional certifications for IT Security

Which credentials of the sub-list of IT certifications (as per the Information Systems Security Association) would be considered MUST HAVE for a IT Security specialist. Information Security CEH ...
0
votes
3answers
463 views

Up to date books for OpenSSL coverage of TLS 1.1 and 1.2 [closed]

I currently have Implementing SSL / TLS Using Cryptography and PKI Joshua Davies. It is very recent and covers even newer TLS version 1.1 and 1.2 and ECC. It is based on many C sample that are ...
-1
votes
1answer
281 views

Linux security books [closed]

I am trying to find an updated book (preferably from 2012-2013) that can cover linux security aspects comprehensively. I searched on Amazon and found that most Linux security books are from back in ...
4
votes
3answers
737 views

Is writing shellcode still a valid skill to have/learn?

Following up from this question: Should I bother teaching buffer overflows any more? I am a it sec researcher and also security course instructor. Recently questions have been raised about the ...
7
votes
4answers
705 views

Is there a book about secure system design? [closed]

I'm interested in learning about secure system design - the whole stack. Currently, I'm an expert .net/C# developer and I know about the differences between different hash functions, public/private ...
28
votes
9answers
2k views

I see entry level security skills as a problem for industry - what can we do about it?

Okay, so we push corporates to improve security, and provide training to IT staff and awareness presentations to CEO's etc, but each year a new batch of graduates are brought in to companies as others ...
6
votes
5answers
1k views

Firewall demo - iptables

I have to make a demonstration about firewalls in my class as a student(university). It should be implemented using iptables on Linux. I am reading all the theories around them but I can't figure out ...
16
votes
4answers
751 views

Tricky code to make memory-safe

I'm designing a homework challenge for students who are learning about memory safety and writing secure C code. As part of this, I am looking for a small programming task where it's non-trivial to ...
2
votes
3answers
932 views

Ranking of web security conferences

I have prepared a paper to publish in a web security conference. How can I know the ranking of available conferences to know which conference is better? For example, should I look at their sponsors?
3
votes
3answers
587 views

Can too much web searching be a danger to a security professional?

As a junior security professional, I spend a lot of time goggling for things such as 'wpa dictionaries', 'vulnerabilities...' , 'how to crack ...','and so on. I sometimes feel like I am calling for ...