Archive for category: IT Certifications

You are here: / IT Certifications

SANSFIRE 2012 is coming to Washington, DC

SANSFIRE 2012 will take place at our Hilton Washington and Towers campus, July 6-15.  There will be more than 40 SANS IT Security Training courses available.  This training event is powered by the (ISC) Internet Storm Center and is an opportunity to meet the ISC handlers.
Each evening, the ISC handlers share compelling talks on their most interesting experiences and newest cyber hazards. These special presentations are free to everyone who attends a course at SANSFIRE 2012. For more than 10 years, the Internet Storm Center has been providing free analysis and warning to our community. It is your chance to meet some of our handlers face to face, to listen to what they have to report, and to ask questions about topics that interest you.
New cutting-edge courses coming to SANSFIRE 2012:

·       Security 575: Mobile Device Security and Ethical Hacking

·       Security 579: Virtualization and Private Cloud Security

·       Forensics 508: Advanced Computer Forensic Analysis and Incident Response

Many of our courses offered at SANSFIRE 2012 are associated with a GIAC Certification. Put the skills you’ll learn to practical use and join over 41,500 GIAC certified professionals who make the IT Security industry safe!

NetWars Tournament Play: Two Night Interactive Security Challenge:

Thursday, July 12 & Friday, July 13 * 6:30pm – 9:30pm

**All students who register for a 5- or 6- day course will be eligible to play NetWars for FREE. Register Now!

For complete details regarding SANSFIRE 2012 please visit:

http://www.sans.org/info/103104

*** Free corresponding GIAC Certification Exam attempt (a $549 value) when you register and pay for a qualifying SANSFIRE 2012 course with referral code: SecOrb_SFGIAC ***

IT Security Certification (Part 2)

According to a survey by InfoSecurity magazine that stated IT professionals’ average salaries overall decreased by 5.5%, while those in IT security increased by 3.1% show that experience in security is a valuable skill.

Furthermore, The US Department of Defense (DoD) Directive 8570.1-M requires every part-time or full-time military member or defense contractor that has access to a privileged DoD system to be held by trained and CERTIFIED personnel in a commercial certification to enhance Information Assurance (IA) of the US Department of Defense’s (DoD) information, information systems, and networks.

So how important is it to be certified if you want to work in the IT Security field?  I would say important.

Being certified displays competency in IT security related terms and concepts.  As a hiring manager, who has to interview over 100 candidates, having someone who speaks the IT Security language is helpful.

When looking into certification, you have vendor neutral and vendor specific IT security certifications.  Below are a list of some of the more popular certifications:
Security+
Requires: 1 Exam
Approximate Cost = $199 ($149 for CompTIA members)

 

Application Security

ISC2 Certified Secure Software Lifecycle Professional (CSSLP)

GIAC Secure Software Programmer – Java (GSSP – JAVA)

GIAC Secure Software Programmer – .NET

The Show the software developer to think like an attacker

 

Auditing

ISACA CISA

GIAC Security Audit Essentials

 

Management

CISSP

CISM

Penetration Testing

CEH

GIAC’s Certified Intrusion Analyst

Certified Penetration Tester (CPT)

Certified Expert Penetration Tester (CEPT)

Wireless

Certified Wireless Security Professional (CWSP)

 

Windows Security

GIAC Certified Windows Security Administrator (GCWN)

Computer Forensics

CHFI

ACE

EnCe

Foote Partners’ “IT Skills and Certification Pay Index – Q3 2011 edition” indicates that the following security certifications translate into the highest pay premiums:

Certified Information Systems Security Professional (CISSP)

Information Systems Security Engineering Professional (CISSP/ISSEP)

GIAC Secure Software Programmer –.NET

CyberSecurity Forensic Analyst

Certified Information Security Manager (CISM)

Certified Information Systems Auditor (CISA)

Cisco Security Solutions and Design Specialist

GIAC Reverse Engineering Malware (GREM)

GIAC Secure Software Programmer –Java

GIAC Systems and Network Auditor (GSNA)

Information Systems Security Architecture Professional (CISSP/ISSAP)

Security Certified Network Architect

Check Point Certified Master Architect (CCMA)

EC-Council Announces New CISO Certification: C|CISO

C|CISO is ideal for those who:

aspire to attain the highest regarded title within the information security profession – CISO,
already serve as an official CISO, or perform CISO functions in their organization without the official title.
The C|CISO designation is the recognition of your knowledge and achievements, and will award you with professional acknowledgement and propel your career.

C|CISO benefits

Independent validation of competency and experience in crucial CISO disciplines
Senior executive level business knowledge benchmark
Peer and Industry level recognition
Increased value of your information security role
Increased credibility, confidence and promotability
Access to the C|CISO community.The C|CISO certification recognizes an individual’s accumulated skills in developing and executing an information security management strategy in alignment with organizational goals.

The C|CISO equips information security leaders with the most effective toolset to defend organizations from cyber attacks.

C|CISOs are certified in the following domains:

Governance (Policy, Legal & Compliance)
IS Management Controls and Auditing Management (Projects, Technology & Operations)
Management – Projects and Operations
Information Security Core Competencies
Strategic Planning & Finance
Achieving a C|CISO Certification will differentiate you from others in the competitive ranks of senior Information Security Professionals. C|CISO will provide your employers with the assurance that as a C|CISO certified executive leader, you possess the proven knowledge and experience to plan and oversee information security for the entire corporation.

C|CISO is a unique designation that has been designed in cooperation with industry leaders to identify a solid blend of functional and executive IT Job Roles and skill requirements.

 

For more information on the C|CISO check here

 

 

SECURITY 660: Advanced Penetration Testing, Exploits, and Ethical Hacking

 

Course Author statement:

As a perpetual student of information security, I am excited to offer this course on advanced penetration testing. Often, when conducting an in-depth penetration test, we are faced with situations that require unique or complex solutions to successfully pull off an attack, mimicking the activities of increasingly sophisticated real-world attackers. Without the skills to do so, you may miss a major vulnerability or not properly assess its business impact. Target system personnel are relying on you to tell them whether or not an environment is secured. Attackers are almost always one step ahead and are relying on our nature to become complacent with controls we work so hard to deploy. This course was written to keep you from making mistakes others have made, teach you cutting edge tricks to thoroughly evaluate a target, and provide you with the skills to jump into exploit development.

-Stephen Sims, SANS Senior Instructor

Click here for more info and upcoming training events for SEC660: http://www.sans.org/info/82554

Save $150 off your registration by using promo code: Connect_SecOrb

SANS Network Security in Las Vegas, NV is from September 17-26 (SEC660 – Sept 19-24).

 

 

Black Hat USA 2011

Black Hat USA is the premier security event where members of the security industry gather to learn from elite security researchers in the field. This year’s event will be hosted at Caesars Palace in Las Vegas, Nevada July 30-Aug 4 and offer over 50 multi-day training sessions, feature 7 Briefings tracks with the latest research, and 2 workshop tracks dedicated to practical application and demonstration of tools.

Use code SEORBHUS to receive a $250 discount off Black Hat USA 2011 briefings Registration is at https://www.blackhat.com/html/bh-us-11/registration/bh-us-11-registration.html

SANSFIRE 2011 in DC

Information taken from SANS website.

If you like what the SANS Internet Storm Center (ISC) provides to the cyber security community, then you will love SANSFIRE! SANSFIRE 2011 is the one annual training event powered by the ISC. This years event will be held in Washington DC, July 15-24, and includes more than 25 courses and dozens of up-to-the-minute field reports from ISC handlers.Each evening, the ISC handlers share riveting talks on their most interesting experiences and newest cyber hazards. These special presentations are free to everyone who attends a course at SANSFIRE 2011.

SANSFIRE 2011 hosts world-class instructors teaching top-quality SANS courses covering penetration testing and hacker exploits, security, management, wireless, forensics, secure coding, and much more. See our Event-at-a-Glance page for the whole list of courses and links to course descriptions. We also have 11 one-and two-day courses to round out your training, which if taken with a five- or six-day course, will be available at approximately 50 percent of the normal tuition fee.

All SANS courses directly address the kinds of incidents reported by the Internet Storm Center in their daily diaries. And, it’s a SANS promise that what you learn you’ll be able to apply immediately back at the office. Last year’s SANSFIRE attendees told us:

SANSFIRE has been the best learning experience in my career as a security professional.
– Mohamid Narin, Verizon Business

SANSFIRE was a great venue for learning, networking, and realizing potential future career opportunities.
– Curtis Kozielec, State of DE-DTI

I got lucky and hit the SANS lottery having Stephen Northcutt as the instructor. This is a week that I thought would drag. Maybe it was the nice hotel. Maybe it was the goodies. Most of the week was spent in class. Get the picture.
– Eric Peiffer, Defense Logistics Agency

Our conference location is the Hilton Washington & Towers. Discounted room rates of $215 S/D are available for SANS students through June21. Government per diem rooms are available with proper ID. You must call the hotel and specifically ask for this rate (1-800-HILTONS). These special SANS rates include high-speed internet in your room. See our Event Location page to learn for about this hotel and its surroundings.

SANS training is the best there is. Conferences are always smooth running and well planned. Events are good or great, amenities are complete.
– Jonathan Schulman, U.S. Army Data Center Fairfield

Plus, register for SANSFIRE 2011 by June 1, and you can receive a $400 tuition fee discount.

You won’t want to miss SANSFIRE 2011!

Marcus Sachs
Director, SANS Internet Storm Center
Johannes Ullrich,
Chief Research Officer, SANS
P.S. If you are not part of the active defensive community, we appreciate your continued support by submitting your logs and helping us make a difference.

FREE On-Line CEH by Shon Harris

Through LinkedIn, Shon Harris is providing FREE On-Line CEH Course with Over 25 Hours Long of information.
The video modules are outlined below and can be found at her website at: www.logicalsecurity.com/resources/resources_videos.html

1. Ethical Hacking and Penetration Testing
2. Footprinting and Reconnaissance
3. TCP/IP Basics and Scanning
4. Enumeration and Verification
5. Hacking and Defending Wireless/Modems
6. Hacking and Defending Web Servers
7. Hacking and Defending Web Applications
8. Sniffers and Session Hijacking
9. Hacking and Defending Windows Systems
10. Hacking and Defending Unix Systems
11. Rootkits, Backdoors, Trojans and Tunnels
12. Denial of Service and Botnets
13. Automated Penetration Testing Tools
14. Intrusion Detection Systems
15. Firewalls
16. Honeypots and Honeynets
17. Ethics and Legal Issues

All videos can be viewed at: www.logicalsecurity.com/resources/resources_videos.html

Hope you find them useful!

CWSP – Certified Wireless Security Professional

The CWSP exam is an advanced level wireless LAN certification developed by Planet3 Wireless. This exam is a part of the Certified Wireless Network Program (CWNP). The exam tests your ability on how well you are able to protect your company’s valuable data from hackers. For anyone desiring a career in IT or Security this is a certification you cannot afford to be without.

The CWSP is the first nationally recognized wireless security exam offering in the United States. While this exam is has been around for several years, it is probably one of the best kept secrets. However when securing employment with major corporations in the area of wireless security, you will find that employers are looking for this certification.

One of the great fears around wireless is security. The one thing that beats fear is education. I applaud Planet3 Wireless on the job they have done in providing an exam that is both comprehensive and accurate. This vendor neutral exam really outlines the security solutions that are available today and more importantly how the solution should be utilized. The exam looks at the customer’s infrastructure and not the vendor’s product. You will find that the exam leaves no stone unturned.

Test Preparation:
The best study material to date other than real world experience is a combination of the following

1. CWSP Instructor-led Training
2. CWSP Study Guide
3. Practice Test

Ideally, your chances are better for passing the exam when you combined all three of these methods. However, money and time constraints sometimes prevent this from happening.

Exam Prerequisites:
There is only one prerequisite. Individuals attempting to take this exam must be CWNA certified. (Certified Wireless Network Administrator (CWNA) is another wireless certification through Planet3 Wireless which deals with wireless administration). While not a requirement, it is recommended that testers have their Security+ and/or SCP certification.

Exam Registration #:
PW0-200

Exam Cost:
The exam can be purchased for $175.00 USD.

Exam Format:
The CWSP exam is a 90 minute timed exam which consists of 60 scenario based questions. You are required to obtain a passing score of 70%. Should you have an interests in being an instructor, the passing score requirements are a little more stringent. A passing score of 80% is required.

Exam Content
You will find that the exam covers three basic areas; Wireless LAN Security Solutions, Wireless LAN Intrusion, and Wireless LAN Security Policies. The exam goes into deeper detail by highlighting the topic below:

* Wireless Security Principles
* Intrusion Techniques
* How Networks are Compromised
* Intrusion Detection Systems
* Layer 2 Wireless VPNs
* SOHO/SMB 802.1X/EAP Security
* Enterprise Wireless Gateways
* Secure Wireless Bridging
* Wireless LAN Switching
* Wireless VLANs and EAP Types
* Secure Wireless LAN Management
* Wireless VPN Routers

Exam Location:
The exam is nationally recognized and can be taken through any Authorized Thompson Prometric Testing Center. For locations in your area, check out http://www.2test.com.

I highly recommend anyone who is going into the field of security wired or wireless to take this exam.

MGT414: SANS® +S™ Training Program for the CISSP® Certification Exam

MGT414: SANS® +S™ Training Program for the CISSP® Certification Exam will prepare you to pass the CISSP® Certification Exam. This course is an accelerated review course that focuses solely on the ten domains of knowledge as determined by ISC2. Test-taking tips and strategies are also discussed.

Each domain of knowledge is dissected into its critical components. Every component is discussed, explaining its relationship to other components and other areas of network security. After completing the course you will have a solid understanding of the ten domains of knowledge.

Eric Conrad, author of CISSP Study Guide (Syngress), will be teaching this course LIVE in a vLive! virtual classroom. The class will begin on November 1st and will meet on Monday, Tuesday and Wednesday evenings for five weeks. Don’t worry if you have to miss a night — classes will be recorded and you will be able to review the archives for SIX MONTHS.

We are excited to announce that any student who registers for MGT414 and enters promo code Connect_SecOrb10 will receive an autographed copy of Eric’s book, “CISSP(R) Study Guide”, published by Syngress.  It is a great supplement to your SANS course materials!  Plus you are already receiving 10% off the course by using discount code: Connect_SecOrb10.
To register please click here: https://www.sans.org/info/65313

Recorded Wireshark Certification Webinar Available Now

The Wireshark Certified Network Analyst webinar recording is available at www.wiresharktraining.com/certification. The Exam Information Pack is available at the same location.

In addition, the Examp Prep Guide released earlier than expected. The Exam Prep Guide contains 300+ sample exam questions and both timed and untimed quizzes on the accompanying CD. Order your copy at Amazon.com. (ISBN 1893939987)

The recorded webinar covers:

– Certification Process (Study, Exam, Maintenance, Recertification)
– Certification Maintenance (CPE requirements)
– Online Portal (free training portal)
– Registering for the Exam
– Sample Exam Questions
= How to Contact Us

Please send your questions about the Wireshark Certified Network Analyst Exam to info@wiresharktraining.com.

Laura Chappell
This message was sent by: Protocol Analysis Institute, 5339 Prospect Road, Suite 343, San Jose, CA 95129

Forward to a friend: