Formal education and training in preparation for the practice of a profession.

learn more… | top users | synonyms (4)

0
votes
1answer
18 views

GCIH Certification advice needed [closed]

i am looking into the GIAC GCIH certification so since i am new with the GIAC certification is there anyone who has already passed it to let me know what should i read? What is the best way to get ...
11
votes
9answers
38k views

Programming language for network security

I am working as a tester now. I am planning to move to the domain of security such as a CEH or CISSP. But many say that to be a great hacker you need to know at least one programming language well. I ...
0
votes
2answers
70 views

How to get started? [closed]

Hi I am trying to get started in all this. I don't have that much experience but I am going to school to get a bachelors in information technology and I have learned a little bit about hacking as well ...
4
votes
3answers
3k views

What career path do I need to follow to become a CISO?

I'm a security researcher and I want to know what career path you think I need to follow to become a Chief Information Security Officer. What skills are necessary in this position ? What field of ...
47
votes
5answers
3k views

Teaching “Secure by Design”

I'm a Security Architect, and I'm used to defining the security of project as a specification that gets carried out by others. I have been recently tasked with teaching new coders how to design and ...
15
votes
3answers
765 views

Should a penetration tester have training in ISO 27001/ITIL etc?

I recently got offered a promotion but as part of the package I've been requested to do ISO 27001, ITIL, ARPA and other kinds of training. I've previously avoided this sort of training as I felt it ...
6
votes
2answers
5k views

SANS training - worth it? [closed]

I am a programmer, doing mostly web development now, dealing also with securing the web applications in my line of work. I have reasonable knowledge of security matters, though not always staying ...
1
vote
1answer
34 views

Strategy/structure/roadmap to learn Pentesting [closed]

I am currently teaching myself computer security and pentesting. My problem is the following: I more or less know the absolute basics (tcp/ip, bufferoverflows, xss...) but in all those areas I dont ...
3
votes
3answers
59 views

Is there an effective social engineering employee awareness program?

Social engineering is cited as one of the primary threat vectors (see for example at: https://gallery.technet.microsoft.com/Fixing-the-1-Problem-in-2e58ac4a). Employee awareness training is also ...
4
votes
4answers
664 views

Can you pass C|EH without any hands-on experience in hacking tools

I've been in the IT security industry for well almost a year now since I graduated last year and I'm currently thinking about taking up C|EH examination. I've glanced through several prep and review ...
-1
votes
1answer
1k views

Good book about Scapy [closed]

Is there any good learning resources for Scapy apart from the official documentation? I am looking for a good book about the Scapy
14
votes
9answers
5k views

Is advanced mathematics relevant to security beyond cryptography?

Short question. The title says it all... is advanced mathematics (i.e. beyond the classic college level calculus sequence) relevant to any field of computer security besides cryptography? By relevant, ...
0
votes
1answer
97 views

How do you go about researching and discovering zero days? [closed]

How do you go about researching and discovering zero days? Breakdown the process. What positions can I expect to see that offers a more offensive and research oriented approach to security? i see How ...
31
votes
14answers
3k views

Courses on “Secure Software Development” [closed]

This semester, I'm offering a course on "secure software development". The course is divided into three parts: Secure Software Engineering Reverse Engineering Secure Coding Do you know of any ...
0
votes
0answers
31 views

Does Wassenaar Arrangement on the transfers of conventional arms and dual-use goods and technologies apply to security training?

Does the Wassenaar Arrangement on the transfers of conventional arms and dual-use goods and technologies apply to security training? Does it apply to security training on exploitation techniques? Is ...
27
votes
7answers
503 views

How to keep an eye on upgrades, patches and security issues for used open-source libraries?

For a project with many open-source libraries as a part of it, I began to search for information source concerning all upgrades and security issues. The kind of sources I gathered are either ...
28
votes
5answers
4k views

Professional certifications for IT Security [closed]

Which credentials of the sub-list of IT certifications (as per the Information Systems Security Association) would be considered MUST HAVE for a IT Security specialist? CEH Certified Ethical Hacker ...
14
votes
2answers
15k views

What preparation do I need to fullfil for OSCP?

I am new to this whole Offensive Security field. Also I have not spent much time in IT. 6 months back I started running behind Offensive Security & started studying. First I studied for C|EH and ...
3
votes
1answer
68 views

Which conferences are comparable to the Defcon? [closed]

Rory Aslop wrote something interesting regarding conferences here: Defcon always worked out as the most cost effective broad technical training for my penetration testers and technical security ...
1
vote
1answer
101 views

In the United States, when can someone legally search my personal laptop? (Government or private security) [closed]

Unlike the United Kingdom, U.S. citizens don't have an explicit right to privacy in the Constitution. Although there are implied privacy rights within "penumbras" of the Bill of Rights this has ...
23
votes
5answers
3k views

WarGames: Platforms to practice and improving your hacking skill set [closed]

Do you know of any good free platform in which we can practice different attack vectors and vulnerabilities such as XSS, SQL injection, low level hacking, reverse engineering etc. ? For example, I ...
4
votes
2answers
186 views

Connected cars: Skills needed for a security specialist [closed]

Connected cars are being mass produced by many car manufactures such as Audi, GM, Honda and Hyundai (Founding members of the Open Automotive Alliance). Recently I have read a scaring article about ...
18
votes
5answers
2k views

At what point in their employment should security policies be explained to an employee?

There are the basic things that need to be explained to every employee about a security policy. For example: How sensitive information must be handled. How to properly maintain your ID, and ...
-4
votes
3answers
254 views

How do I find vulnerabilities in software? [closed]

I read an answer here which talked about becoming a PenTester. The answer said that you have to learn to break software. I posted a comment on the answer asking where do I start learning to break ...
0
votes
2answers
187 views

What certifications do I need to become a Malware Analyst? [closed]

I've previously posted here on how to get started as a malware analyst, and wanted to say thanks on getting me started. How much do certifications help me on my resume and which one(s) should I get? ...
0
votes
1answer
112 views

Lost in a field of Degrees and certifications [closed]

I have another semester or so before I graduate with my As in Information security. This is going to be a two part question. Other than the degree I will also have a few different certifications. ...
4
votes
1answer
775 views

Responsibilities as a Junior Information Security Analyst? [closed]

Tomorrow will be my first day as a new Junior Information Security Analyst, and I'm nervous and excited at the same time. I want to apologize if this is the wrong place to ask such questions, but I ...
-2
votes
1answer
176 views

Crypto for penetration test [closed]

I'm a newbie but I want to become a penetration tester. I'm taking a course on cryptography but I'm wondering... how useful is crypto for penetration testing compared to other skills like operating ...
7
votes
3answers
573 views

CTF competitions/challenges that are Windows based?

I've been messing about in CTF's for a while and I also do pen-testing professionally, what i've noticed is a distinct lack of CTF competitions using windows environments. This is in stark contrast ...
30
votes
13answers
49k views

How to learn penetration testing at home?

I am interested in learning ethical hacking or penetration testing to head towards a career in that direction. I have a strong knowledge of linux and unix, basic computer theory and practice and ...
1
vote
1answer
172 views

Sans security courses: How are self study courses certified? [closed]

If i were to take the course http://www.sans.org/course/advanced-web-app-penetration-testing-ethical-hacking# as a self study course over 4 months, how is it eventually graded? Is it an exam at the ...
-1
votes
2answers
107 views

Advice on the degree path [closed]

I am currently in the first year of Computer Security at the university. But I have some doubts about the course. So I want to ask the professionals some questions :D Is it better to lose a year ...
0
votes
1answer
200 views

penetration testing first step [closed]

I've started a course about Penetration testing and CEH on cybrary. The course begins with an introduction that quickly describes each step of pentesting. The first step is essentially to gather ...
0
votes
2answers
261 views

Hacking Course Value (Soft) [closed]

The college that I'm currently attending (masters) offers a ethical hacking course, which I am currently enrolled in. I have been seriously considering dropping the course for several reasons. 1) ...
0
votes
1answer
135 views

Cyber Security Training v. Cyber Security Education for Middle to High Schoolers [closed]

In my community, we have one state university that offers cyber security training once a year to high school students that show interest. Last year a student, after receiving this training, hacked ...
6
votes
3answers
711 views

What is a company's benefit of training employees in cybersecurity?

I'm a federally employed senior executive assistant with user knowledge of computer programs and software. I'm trying to change my career and am looking for my employer to pay for my training. I'm ...
-4
votes
1answer
105 views

Book about security in web applications [closed]

I'm new to security in web applications.I have searched in amazon but I was unable to find a book for today's technology. As far as I know HTML5 comes with a few new attack vectors, most of the books ...
3
votes
1answer
268 views

security clearance for programmers

I am programmer by day and night, I work within security at the moment working on some security products. I have noticed a few non software engineering based roles which require security clearance. I ...
0
votes
2answers
367 views

What is the best resource to learn malware analysis? [closed]

I am looking for a resource that helps learn malware analysis. I know about the practical malware analysis book but i am looking for something other than a book. For example a Site or video tutorials. ...
-2
votes
2answers
448 views

Life in cybersecurity: How do I get there? [closed]

I am 17 years old and my ultimate job goal is a cyber security professional. I have been extensively studying TCP/IP, along with all other subjects in the CompTIA Network+ certification which I hope ...
4
votes
3answers
2k views
0
votes
2answers
522 views

CEH training courses requirements

What are the requirements for studying CEH? Is there any requirements for the programming background? And can anyone apply for it or does he has to have a recommendation for both studying and taking ...
26
votes
10answers
6k views

Vulnerable OS's?

Which vulnerable OS's like for example DVL would you recommend for someone to use for the purpose of pentest/exploitation learning?
11
votes
5answers
2k views

Do I need a bachelor's degree to break in information security? [closed]

First of all, I have a college diploma in computer networking. I tried to get a job as network admin, but because of my lack of experience in that field I did not succeed. So I returned as a help ...
24
votes
10answers
18k views

Good (preferably free) resource for CISSP practice questions

I'm looking to sit for my exam in a few weeks, and I want to have a good set of practice tests to bounce against and make sure that I'm up to par with the types of questions that will be asked.
1
vote
1answer
137 views

Developer Security Training .NET / JAVA [closed]

Hello my team is tasked to perform security focused training for developers (.NET and JAVA). I have used WebGoat to demonstrate OWASP Top 10 type security vulnerabilities and am looking for a similar ...
15
votes
5answers
2k views

Application security training for developers [closed]

I am trying to establish an application security group within an organization and although there is a plethora of courses for penetration testers, i fail to find an equal amount of training courses ...
17
votes
9answers
6k views

List of good security podcast one should listen to

I'm a hard core dyslectic who wants to read up on all things security without the reading part. So I want to know what good high quality security podcasts are there? I'm interested in almost ...
0
votes
1answer
380 views

Preparation for Blue Team Competitions [closed]

I am a CS student, and am considering competing in the National Collegiate Cyber Defense Competition. Although I have a fair amount of experience in programming competitions (e.g. ACM at High School ...
0
votes
2answers
771 views

Books to start the study of TCP/IP [closed]

I'm 20 years old and have no knowledge in the world of information security! I'm currently studying engineering and I've recently found what work I want to do (pentesting or a career in fields like ...