![]() |
|
![]() |
| LinkBack | Thread Tools | Display Modes |
| | #1 (permalink) |
| Moderator Join Date: Jun 2006 Location: India
Posts: 960
Thanks: 0
Thanked 38 Times in 33 Posts
Rep Power: 17 | It was almost two years ago now that I wrote the SecurityFocus article on TCP/IP skills required for security analysts. That article offered advice on how one can seek employment in the security field through education, training, and a strong focus on TCP/IP. The idea came about from all of the questions this author has been asked on the subject. There is often a lot of uncertainty as to what one should study to further one’s career in the network security world. Much as I mentioned previously, it can be a daunting task. What was laid out as core skills required for a fully competent security analyst are in reality, but a baseline. From that foundation of skills learnt, and honed over time can you begin to think about acquiring more advanced skills. The purpose of this article is to guide network security analysts towards learning the advanced skillset required to help further their careers. We'll look at two key pillars of knowledge, protocols and programming, and why they're so both so important in the security field. Two pillars of knowledge In this author’s opinion, there is perhaps a basic truth about network security and obtaining the skills required to practice it. Network security really boils down to understanding two key pillars: protocols (starting with TCP/IP), and programming. Everything else can generally fall within those two broad categories. That includes everything from web application security to exploit development, and many things in between. While we all understand that the base unit of computer-to-computer communications is the packet, there is still a tremendous amount of knowledge required to understand what is behind that small packet. That very small packet incorporates a great amount of networking knowledge to understand and be able to parse effectively. Contained in that very packet is a good deal of information. What is required of you as an analyst, though, is the knowledge of protocols in order to extract the relevant information. Not all of the TCP/IP protocol world evolves around the four core protocols of TCP, UDP, IP, and ICMP. A good amount of other protocols reside at the application layer. It's also good to not only understand how protocols work, but also understand some of the design considerations that went it them. For example, knowing such things as why there are only 16 bits assigned to a port, and its relevance to the actual protocol will help give an analyst a far deeper insight into his daily work. TCP/IP is a good start, but what about the other pillar of network security knowledge? The strong silent partner of the security field is programming. While there is a lot to be said for understanding networking and protocols, they are all related to the programs that use them. It is therefore with an understanding of programming and the ability to actually program that a far more profound knowledge of network security will come. It could be argued that one need not program to be good at network security. However the point remains that to obtain an advanced skill set, you will have no choice but to pick up programming to make it to the next level. http://www.securityfocus.com/infocus/1861
__________________ \"WHEN GOING GETS TOUGH, ONLY THE TOUGH GETS GOING\" |
| | |
| The Following User Says Thank You to wizkid For This Useful Post: | AjayKumar.Kataram (05-01-09)
|
| | #2 (permalink) |
| Member Join Date: Aug 2006 Age: 25
Posts: 32
Thanks: 0
Thanked 1 Time in 1 Post
Rep Power: 4 | Re: Learning an advanced skillset You explained the carrer path for a advance security analyst.How will it be for a junior security analyst? I recently completed my graduation.I want to become a networking engineer. |
| | |
![]() |
| Tags |
| advanced , learning , skillset |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| Display Modes | |
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Web Resources in Learning English | P Malathy | Improve Your Language Skills | 3 | 14-03-09 11:46 PM |
| acronyms--A | abeetha.m | Improve Your Language Skills | 2 | 07-07-06 03:00 PM |
| better institute for Advanced Unix in Hyderabad? | sskknaga | Ask for Suggestion | 0 | 22-06-06 06:40 PM |
| Good Coching Center for Learning IELTS | vinoddas | Other Queries | 5 | 19-03-06 04:11 PM |
| More Interview Questions Here... |