Hello Everyone,

I'm currently working as a security analyst that performs only network or system based security (OS, Firewalls, IPS, Anti-Virus, content filtering, encryption, etc.), but have no experience with programming or databases.  I read about many of these web vulnerabilities, but don't have the background to fully grasp them. My question is, in order to become a better security analyst what should I learn and where do I start? Right now I'm more interested in understanding vulnerabilities through web attacks if that helps. I'm very new to this side of security

Thanks


 

Actually knowing SQL, both general, and RDBMS-specific will be a great plus here.  PHP, ASP, VB, JavaScript, etc, are all very beneficial if you are going to get into web app security.   If you have any programming background, I think these are all very easy to pick up, and rather quickly.   

Try what awesec has suggested.  A google search will get you all the info you need.

I like webgoat because its more than just a book that teaches you theory, it actually has hands on labs that will reinforce the lessons.

Perl and phython are always useful as well...