Does anyone have any recommendations on books/sites that are doing botnet research. Technical details and the coding behind them (not just the news stories of x number of infections).

Thanks

I appreciate the suggestions but as I said I can't setup a VM network or bring any kind of LIVE malware into the school.

What I am looking for is more on the order of a simulator virus - one that mimics a live virus but has no destructive payload.

 

Thanks for the links. Unfortunately I asked about setting up a VM environment and because it is a shared lab and not secure the powers that be will not allow it.

I found a couple of testers with sigs that anti virus will alert on and show how they can work if it was a real virus. I may have to be satisfied with that and just show the code of some that were caught in the wild.

I am going to be teaching about various viruses in a class on security for a tech school and I am looking for "safe examples" (ones that are non destructive) that I can use to show the various types that are out there. Macro, Trojan, etc.

Does anyone know where I can find something like this?

Thanks

Thanks for the link - I went there but it looks like the site is not maintained or has been abandoned since 2006. 

I agree that education and experience are many times the most important parts of job qualifications. Employers are looking for a standard to judge people by when they are hiring. Thus we have standard tests to level the playing field. For good or bad the cert tests are a part of the industry. Many employers are now asked if they can "prove" that they have qualified people by their insurance companies otherwise they are not covered.

Just my 2 cents. 

I appreciate your comments. As I am fairly new to the security end of things, just trying to see what is out there. I have read up on the various certs and which angles that they are covering. It is sometimes confusing to those who are starting out and many of the certifications state "we are the best".

I appreciate this site coming along at this point and the people in the community helping out and trying to steer me in the right direction.

Has anyone been through  Offensive Security 101? If so, how do you feel about the course. Would it be good to help someone teaching security to Tech School students to go through it?

Thanks for your thoughts.

Just found this site searching around. Glad that their is a community of people who are getting or have their certs and are willing to share with others.

I am a technical school instructor, part time and programmer the other part.

I have my Network+ and Linux+ certs. My question is - Is it better to go for Security+ first before CEH or just skip that one and go on to the CEH?

Thanks for the site and for your answers in advance.