Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [certification]

We use the certification tag for questions about programs designed to vouch for an individual's competence in security-related work. Use the "compliance" tag for programs like PCI-DSS that assess the security of a server.

0
votes
2answers
1k views

How to convert my cert chain to PFX without a password

I am trying to enable an Azure Front Door instance on the front of my website using my EV cert (Extended Validation Certificate). However, from Azure Front Door Cert Instructions, Azure Front Door ...
1
vote
0answers
23 views

Certification courses from a novice to professional [closed]

I would like to know the list of certification courses that I can start as a beginner and become proficient in the field of network security and from which website or institution can I take the ...
0
votes
2answers
72 views

Certificates with no sysadmin skills?

I am coming from a web application developer career, so no sysadmin skills. But I also like security topics. I was wondering if after getting a certification such as GIAC, GPEN or EC Council CEH, or ...
1
vote
1answer
57 views

Is a bank's affiliate that provides services to the bank issuer required to show compliance or certification to PCI DSS

Is a bank's affiliate that provides services to the bank issuer required to demonstrate compliance or certification to PCI DSS? If so, how is this typically done?
6
votes
1answer
124 views

What Certification(s) to look for in Hard Drive destruction?

Many vendors exist to pick up old (enterprise) Hardware for recycling and offer services including sanitization and destruction (shredding). The concern is that media could potentially still ...
3
votes
2answers
244 views

AppSec Developer Certifications

I've noticed that certifications seem to be a big part of the IT Security Professional (non-development), but have not seen the same attention being given/required of the software development engineer ...
4
votes
2answers
639 views

Can a security job be cracked without OSCP?

I have my B.Tech in Information Technology with CEHv8 certification. I have 2 years of vulnerability assessment experience and 1.5 years of python automation experience. I am not able to crack any ...
3
votes
2answers
2k views

Verify S/MIME signature with no certificate included

Let's sign a file with $ openssl smime -sign -in file -out file.sign -outform DER -inkey private.pem -signer certificate.pem -nocerts With the option -no certs no certificate is included in file....
3
votes
1answer
313 views

What are vendor affirmed algorithms in FIPS 140-2

FIPS 140-2 allows FIPS approved algorithms to be either tested by CAVP or to be vendor affirmed. What does "vendor affirmed" imply here? Can I say my AES implementation as vendor affirmed and get it ...
2
votes
2answers
114 views

Conflicting requirements in FIPS 140-2 regarding manual key entry

Requirement 1 All output data exiting the cryptographic module via the "data output" interface shall only pass through the output data path. The output data path shall be logically disconnected ...
1
vote
0answers
31 views

Are protocol implementations also tested as part of FIPS certification?

I just went to CMVP website and opened a random FIPS certificate. https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Certificate/2898 In the FIPS certificate, FIPS algorithms ...
1
vote
0answers
65 views

Changing Horses Mid-Stream: A New Career in Technology [closed]

So, after a few years in the professional world of sales, I have finally stumbled onto something that I actually enjoy doing and being around: the wonderful world of IT. Perhaps I am crazy? Anyways, ...
-3
votes
2answers
117 views

TLS Verification does NOT fail although the CA root is NOT set in IE

As far as I know: when we make an ssl connection to a site we receive the site certificate, the browser check if the site certificate is in its list of root and trusted certification. So if the CA is ...
0
votes
1answer
220 views

ACME protocol without LetsEncrypt, using dedicated CA [closed]

I have a question about the ACME protocol without using LetsEncrypt, and using our dedicated CA instead. Can anyone enlighten me what should I consider in my client-server application which ...
1
vote
0answers
53 views

implementing a CA and a CSP

We are in the process of implementing a CA and a CSP for our organization. I came across these issues while implementing. Can the CA and CSP be owned by the same party? Will there be a conflict of ...
24
votes
6answers
4k views

How to start with an Information Security Program?

I am a software tester, InfoSec is mostly tangential to my job, and people only ask me questions about InfoSec because I am not afraid to use Google or Stack Exchange when I don't know something. (...
1
vote
3answers
178 views

Is there any Online Certification that is worthy enough to get a Job as a Security Professional? [closed]

I am highly interested in Network and Information Security and already a good understanding of Linux. I am also good at WiFi Penetration Testing and practice a lot of that. I am wondering that is ...
1
vote
1answer
83 views

Industry Certification Question [duplicate]

I have been researching cybersecurity industry certifications for some time now and I am looking for some guidance/input on what combination of education, experience, and certification is best suited ...
0
votes
2answers
152 views

Will GCIH help me in my career path? [closed]

I am into non-functional (performance) testing for 12 years. I am planning to move to pen testing with GCIH certification. Can I get a fresh start in pen testing after this?
1
vote
1answer
1k views

Certification or Course equivalent to OSWE? [closed]

Is there any certification which focuses specifically on web application penetration, CWE issues and code analysis like Offensive Security Web Expert (OSWE) does? OSWE is not available online and it ...
2
votes
2answers
108 views

Certification 27001 Issue

My department already got certification for ISO 27001:2013 last year (2016). But for a particular reason, my department should move to new building. How would be the status for my ISO 27001:2013 ...
1
vote
1answer
174 views

How is a certificate extension different from a certificate file name extension?

The following article has explained both differently. X.509 wiki Now my question is: Can we use more than one extension in a certificate? Is it how there can be more than one use of extensions in a ...
1
vote
0answers
47 views

Does the value of security certifications for hiring/being hired decrease for more experienced positions? [closed]

In an industry where there are a dizzying array of security certifications to be had, many of them are either entry-level certifications, or are based around a particular area of specialization (...
0
votes
1answer
72 views

Do I need my own server for signing certificates?

Sorry for any confusion with this question. I'm not even sure exactly what I'm asking. So what I'm trying to do is reverse-engineer an android app, and then building a python program on my Windows PC ...
3
votes
2answers
136 views

How to ensure that a program is implemented as per your recommendation?

I have an security protocol whose implementation will be done by many third parties developers (lets call them as 'manufacturers') which in turn will be programmed in the embedded hardware designed by ...
0
votes
1answer
84 views

Advice on career switch [closed]

I'm an IT technical writer with 6 years of experience looking to transition to a career in information security. I have good knowledge of software, databases, and cloud computing with a year or so of ...
0
votes
1answer
80 views

PCI DSS or PCI Standard - Standards | Requirement | Implementation

I have done ISO 27001 implementation and auditin. I want to get a clear idea of PCIDSS standard. What is PCI DSS (I know the abbreviation) What are all the materials and sites to refer? What are all ...
-4
votes
1answer
65 views

Secuirty related certification/training for .NET Developers [closed]

I would like to know if there are any Free certifications related to writing secure code that myself and our team of .NET/AngularJS web-developers take up, So that we can write secure code and also ...
1
vote
1answer
461 views

Validate Code Signing Root Certificate Offline

I am developing a library distributed as a Windows DLL to be called by 3rd party executables. I expect the calling EXE to be digitally signed and need to verify that. I have no control over the ...
4
votes
3answers
2k views

When should I renew certification authority?

What is best practice in renewing certification authorities? I mean when should I renew certification authority? For example, suppose I have the following setup: 1. Root CA with validity of 30 years ...
6
votes
2answers
706 views

ISO 27001:2013 certification questions

Advice/opinion appreciated. Ultimately, our company would like to achieve ISO27001:2013 certification, but that is some way off. In the interim, we want to be able to get to the point whereby we can "...
0
votes
1answer
405 views

What kind of ISO 27k certifications can an individual get?

I heard that there are ISO 27K certifications. E.G. Info Security foundation based on ISO/IEC 27002. I am interested how it is possible to get a higher level, what kind of options there are to get iso ...
3
votes
1answer
3k views

ISSA vs ISACA vs (ISC)2 [closed]

I am an aspiring information security professional. I have asked various professionals in the community for advice and one common theme in responses to my inquiries is "Get to know the community!" ...
1
vote
1answer
152 views

Why is my answer to this security exam prep question incorrect?

I'm studying for a security exam and am confused by one of the chapter review questions in the book I'm using. It reads: When scanning a network via a hardline connection to a wired-switch NIC ...
4
votes
0answers
107 views

HIPAA/FISMA certification for IT audits [closed]

I currently work for an IT security company that is looking to expand our services offered to clients. Two avenues we are looking at is reviewing FISMA and HIPAA compliance for our clients. I have ...
3
votes
1answer
127 views

Why does SSL EV certification have a range of encryption (40-128 bit)?

I would like to get SSL-EV certification for my company website. After comparing a list of providers, I am confused by their advertisements. Why do all providers say that their certifications support ...
6
votes
1answer
297 views

Who can certify RNG according NIST SP800-22?

I have written my own random number generator as a C library and I tested it on NIST Statistical Test Suite. Now I would like to get a certification to have a formal proof that my C library generates ...
2
votes
2answers
3k views

What certifications do I need to become a Malware Analyst? [closed]

I've previously posted here on how to get started as a malware analyst, and wanted to say thanks on getting me started. How much do certifications help me on my resume and which one(s) should I get? ...
0
votes
1answer
124 views

FIPS 201(-2): Central requirements for PIV?

I was recentely asked in the comments on some details on tamper-proofing of a smartcard in question. The term "FIPS-201" was used to specify what kind of details was needed. I understand that FIPS ...
-2
votes
2answers
156 views

Which is first job or certificates [closed]

Here goes a question I have in my mind after I finish my study and start looking for a job. I have visited many recruiting websites and also clicked on many career tabs on companies websites. There ...
2
votes
1answer
194 views

help developer choose correct path to go down for security certifications [duplicate]

Sorry if this is a duplicate however I felt it was a little more unique than the answers I found. Basically I am a software developer and I have moved recently into an architecture role. Throughout my ...
8
votes
3answers
7k views

Is industry experience the only way to a CREST certification?

I hope this question is direct enough for the stackexchange format, my apologies if it is not, please feel free to downvote to close. I'm interested in pursuing a CREST certification, however it ...
1
vote
1answer
109 views

Security certification of software products: what about libraries or third-party services?

How the security certification works if the software uses third party libraries or services? E.g., if someone would like to certify a software product following Common Criteria standard (let's say, ...
0
votes
3answers
8k views

what are the best security certifications for beginners with no experience in IT [closed]

I want to make a career change from administration to IT but I have absolutely no experience and no certifications in IT. I am interested in information security and networking. So what certifications ...
-1
votes
2answers
239 views

Advice - When just starting your career, what are the best certifications to eyeball? [closed]

Im just starting out in school to study Network and Info Security. I know this is the field I want to invest my time and study into. Well over 200k security jobs went unfulfilled last year. My ...
3
votes
2answers
6k views

Course Material for GPEN Certification? [closed]

I am planning for GPEN certification, although i have been extensively involved in penetration projects, still looking at the topics it seems a bit difficult.. what could be good study guide for ...
1
vote
4answers
12k views

What is the difference between active reconnaissance and scanning/enumeration

I have just started studying for CEH exam v8 and I am trying to get the core of so called hacking phases. I could not totally understand the practical difference between the first two phases. In ...
0
votes
2answers
1k views

CEH training courses requirements

What are the requirements for studying CEH? Is there any requirements for the programming background? And can anyone apply for it or does he has to have a recommendation for both studying and taking ...
2
votes
1answer
2k views

What is the relationship between Suite B and FIPS 140-2?

What is the relationship between the Suite B algorithms and FIPS 140-2 certification? Does OpenSSL meet both criteria? From what I've read, it seems that OpenSSL's crypto library implements many ...
-3
votes
1answer
161 views

Certifications comparisons

I have been asked to compare "officially" some pentest certifications, namely: GIAC CEH OPST OSCP ...and if you have some more, they're welcome! Now, I have my points of view and I don't want to ...