Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 24 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Certificationarrow Pick a cert, any cert
Ethical Hacker Community Forums
January 09, 2009, 02:49:26 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2009 - May 4 - 9. Boot Camps & an Ethical Hacking Conf. www.chicagocon.com
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Pick a cert, any cert  (Read 2848 times)
0 Members and 1 Guest are viewing this topic.
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« on: December 19, 2006, 03:26:45 PM »

Ok, I've got an apraisal at work on Fri and I'm wondering what training/exams to ask for. It will be InfoSec related if I get my way. I work for an ISP so swinging it won't be too difficult (I hope!).

Now the training budget isn't huge so I may have to home study, which doesn't bother me, as long as they pay Wink

I'm CCNA/MCP trained and have about 7yrs in IT, currently about halfway through, and taking a break from, a BSc in IT/Comp Sci. I've been interested in computer security for about as long as I've been in the IT trade, but haven't really studied it, just picked up books, read tutorials and played with various "l33t skillz"  Roll Eyes websites. I'm not looking for something that will get me a new job, just a stepping stone to more advanced qualifications that might.

I took a quick look at test questions for the CompTIA Sec+ and think I could sail that with only a little bit of study, but the pen test exams seem a bit more hands on.

How do the CEH and CPTS compare to Sec+?  Are there any other certs people would recomend taking?

Oh, and I've got to be able to get it here in the UK, I don't think work'll shell out for plane tickets.


Any views would be gladly taken into account.

Cheers,
plik.

I was going to tack this on to an old thread, but it suggested I start a new one as it was ancent, so here are the answer to the questions asked in that thread:

Aim for Management or stay Geek? - Geek! all the way!
Networking/Servers/Clients? - Everything and anything (see above)
Logged
ChrisG
EH-Net Columnist
Hero Member
*****
Offline Offline

Posts: 1049


View Profile WWW
« Reply #1 on: December 19, 2006, 03:54:36 PM »

others may disagree, but i think CEH/CPTS are basically the next step after Sec+...you'll have to evaluate where you are with the Security+ objectives on if you need to actually take the exam or not.

as a (somewhat bad) analogy i would say that Security+ expects you to know things about security and threats to your network's security where CEH/CPTS you are kinda expected to know how to conduct those threats to your network's security.

Logged

...tests i took go here...

http://carnal0wnage.blogspot.com/
d1spat3r
Newbie
*
Offline Offline

Posts: 28



View Profile
« Reply #2 on: December 19, 2006, 04:26:11 PM »

I think another good source for learning is Sans.  I taken multiple courses from them and have always rated them top notch.  You could try something like the OnDemand, @home or other various methods.  If you can go to a conference, do it.  The knowledge you get from the instructors is excellent.

there was also a recent comparison done between all the certs (but I can't seem to find it now) that had some good details in it. 

I can't say anything about CEH/CPTS as I have not gone through them. 

What part of security do you want to get into is the main question?  Depending upon that reply the certs to go for may change.
Logged

CISSP, GSEC, GCFA
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #3 on: December 19, 2006, 04:48:44 PM »

What part of security do you want to get into is the main question?  Depending upon that reply the certs to go for may change.

That's the thing, I'm not totally sure. Closest thing to security I've done have just been bits of roles in the past, it's been server and data, currently it's more internet/network security, but I've always had a thing for finding holes in things so pen test would be a logical step. I do spend time with IDS and honeypots/nets at home, I also like following the latest ways the underground find to keep under the radar (but I never find out until it's on the radar!) but I've not got any expert knowledge in any one field so doubt I could get into research.

Forensics might be another path, it seems a bit sadistic but give me a dir of logs or packet captures and an incident to piece together and I'm a happy bunny
« Last Edit: December 19, 2006, 04:58:11 PM by plik » Logged
blackazarro
Sr. Member
****
Offline Offline

Posts: 259



View Profile
« Reply #4 on: December 19, 2006, 06:53:48 PM »

Hey plik, I have a link to a good article regarding security certs. Hope this help.

http://searchsecurity.techtarget.com/tip/1,289483,sid14_gci990011,00.html
Logged

Security+, OSCP, CEH
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 2442


Editor-In-Chief


View Profile WWW
« Reply #5 on: December 20, 2006, 01:40:45 AM »

Seems like your thinking is on the right track. Since you are looking for the more technical track as opposed to the management track, forensics could be for you. But as one investigator told me, be careful as to what field you enter. You may get involved in cases that require you to see information that you can never get out of your head. It's just like a cop dealing with murder cases. You may do a lot of good, but there is a price. Unless you stay specifically on the network forensics side, but there is always a chance for those odd cases.

You may also want to look at our sister site, CSP Mag.

Hope this helps,
Don
Logged

CISSP, MCSE, CEH, Security+ SME
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #6 on: December 20, 2006, 03:20:18 AM »

Hey plik, I have a link to a good article regarding security certs. Hope this help.

http://searchsecurity.techtarget.com/tip/1,289483,sid14_gci990011,00.html

Cheers, I'll read and inwardly digest.


Don: Yeah I'm quite aware that forensics would probably lead to me seeing a few things that would be f'd up. I'd think that it's one of the most likely professions for that. The few times I've had to pull data together for the police have creeped me out, and that was just logs.
Logged
d1spat3r
Newbie
*
Offline Offline

Posts: 28



View Profile
« Reply #7 on: December 20, 2006, 12:37:54 PM »

Yes forensics can be a bad thing...

A little off topic but...

Every time I go to my brothers house he "requests" my help on his computer.  Of course I always forget to tell him to 'clean up' his office before I go work on his computer.  Without fail he always forgets one/two photos lying around on the desk...  I seriously think he does it for fun to watch my reaction.

Oh... the photos well let's just say he is a deputy coroner and the photos are always extremely graphic.  Needless to say I don't eat much while I am at his house.  Lips sealed
Logged

CISSP, GSEC, GCFA
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #8 on: December 21, 2006, 05:00:47 PM »

Well thanks for the input, I've got a better idea about what to ask for now.

And on top of that I've found the exams are cheaper that I first thought, so I might just take a couple anyway!  Grin

I'll let you know how it goes.

Logged
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #9 on: December 22, 2006, 05:30:38 AM »

Well I got them to agree to paying for the Sec+ and CPTS exams (no training tho' boo!) and giving me some time to study which is a win! The trade off was doing ITIL and Project Management training too, which don't grab me but will keep them happy and look good on the CV. (there was also a rather ominous sounding "and any other training we think you'll need"....)

Thanks again guys for the input.

plik
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2007, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.06 seconds with 24 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.