Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 25 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow General Certificationarrow Pick a cert, any cert
EH-Net
May 25, 2013, 02:36:04 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Pick a cert, any cert  (Read 6537 times)
0 Members and 1 Guest are viewing this topic.
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« on: December 19, 2006, 03:26:45 PM »

Ok, I've got an apraisal at work on Fri and I'm wondering what training/exams to ask for. It will be InfoSec related if I get my way. I work for an ISP so swinging it won't be too difficult (I hope!).

Now the training budget isn't huge so I may have to home study, which doesn't bother me, as long as they pay Wink

I'm CCNA/MCP trained and have about 7yrs in IT, currently about halfway through, and taking a break from, a BSc in IT/Comp Sci. I've been interested in computer security for about as long as I've been in the IT trade, but haven't really studied it, just picked up books, read tutorials and played with various "l33t skillz"  Roll Eyes websites. I'm not looking for something that will get me a new job, just a stepping stone to more advanced qualifications that might.

I took a quick look at test questions for the CompTIA Sec+ and think I could sail that with only a little bit of study, but the pen test exams seem a bit more hands on.

How do the CEH and CPTS compare to Sec+?  Are there any other certs people would recomend taking?

Oh, and I've got to be able to get it here in the UK, I don't think work'll shell out for plane tickets.


Any views would be gladly taken into account.

Cheers,
plik.

I was going to tack this on to an old thread, but it suggested I start a new one as it was ancent, so here are the answer to the questions asked in that thread:

Aim for Management or stay Geek? - Geek! all the way!
Networking/Servers/Clients? - Everything and anything (see above)
Logged
LSOChris
Guest
« Reply #1 on: December 19, 2006, 03:54:36 PM »

others may disagree, but i think CEH/CPTS are basically the next step after Sec+...you'll have to evaluate where you are with the Security+ objectives on if you need to actually take the exam or not.

as a (somewhat bad) analogy i would say that Security+ expects you to know things about security and threats to your network's security where CEH/CPTS you are kinda expected to know how to conduct those threats to your network's security.

Logged
d1spat3r
Newbie
*
Offline Offline

Posts: 28



View Profile
« Reply #2 on: December 19, 2006, 04:26:11 PM »

I think another good source for learning is Sans.  I taken multiple courses from them and have always rated them top notch.  You could try something like the OnDemand, @home or other various methods.  If you can go to a conference, do it.  The knowledge you get from the instructors is excellent.

there was also a recent comparison done between all the certs (but I can't seem to find it now) that had some good details in it. 

I can't say anything about CEH/CPTS as I have not gone through them. 

What part of security do you want to get into is the main question?  Depending upon that reply the certs to go for may change.
Logged

CISSP, GSEC, GCFA
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #3 on: December 19, 2006, 04:48:44 PM »

What part of security do you want to get into is the main question?  Depending upon that reply the certs to go for may change.

That's the thing, I'm not totally sure. Closest thing to security I've done have just been bits of roles in the past, it's been server and data, currently it's more internet/network security, but I've always had a thing for finding holes in things so pen test would be a logical step. I do spend time with IDS and honeypots/nets at home, I also like following the latest ways the underground find to keep under the radar (but I never find out until it's on the radar!) but I've not got any expert knowledge in any one field so doubt I could get into research.

Forensics might be another path, it seems a bit sadistic but give me a dir of logs or packet captures and an incident to piece together and I'm a happy bunny
« Last Edit: December 19, 2006, 04:58:11 PM by plik » Logged
nebu10uz
Sr. Member
****
Offline Offline

Posts: 368



View Profile WWW
« Reply #4 on: December 19, 2006, 06:53:48 PM »

Hey plik, I have a link to a good article regarding security certs. Hope this help.

http://searchsecurity.techtarget.com/tip/1,289483,sid14_gci990011,00.html
Logged

Security+, OSCP, CEH
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 4169


Editor-In-Chief


View Profile WWW
« Reply #5 on: December 20, 2006, 01:40:45 AM »

Seems like your thinking is on the right track. Since you are looking for the more technical track as opposed to the management track, forensics could be for you. But as one investigator told me, be careful as to what field you enter. You may get involved in cases that require you to see information that you can never get out of your head. It's just like a cop dealing with murder cases. You may do a lot of good, but there is a price. Unless you stay specifically on the network forensics side, but there is always a chance for those odd cases.

You may also want to look at our sister site, CSP Mag.

Hope this helps,
Don
Logged

CISSP, MCSE, CSTA, Security+ SME
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #6 on: December 20, 2006, 03:20:18 AM »

Hey plik, I have a link to a good article regarding security certs. Hope this help.

http://searchsecurity.techtarget.com/tip/1,289483,sid14_gci990011,00.html

Cheers, I'll read and inwardly digest.


Don: Yeah I'm quite aware that forensics would probably lead to me seeing a few things that would be f'd up. I'd think that it's one of the most likely professions for that. The few times I've had to pull data together for the police have creeped me out, and that was just logs.
Logged
d1spat3r
Newbie
*
Offline Offline

Posts: 28



View Profile
« Reply #7 on: December 20, 2006, 12:37:54 PM »

Yes forensics can be a bad thing...

A little off topic but...

Every time I go to my brothers house he "requests" my help on his computer.  Of course I always forget to tell him to 'clean up' his office before I go work on his computer.  Without fail he always forgets one/two photos lying around on the desk...  I seriously think he does it for fun to watch my reaction.

Oh... the photos well let's just say he is a deputy coroner and the photos are always extremely graphic.  Needless to say I don't eat much while I am at his house.  Lips sealed
Logged

CISSP, GSEC, GCFA
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #8 on: December 21, 2006, 05:00:47 PM »

Well thanks for the input, I've got a better idea about what to ask for now.

And on top of that I've found the exams are cheaper that I first thought, so I might just take a couple anyway!  Grin

I'll let you know how it goes.

Logged
plik
Newbie
*
Offline Offline

Posts: 31


View Profile
« Reply #9 on: December 22, 2006, 05:30:38 AM »

Well I got them to agree to paying for the Sec+ and CPTS exams (no training tho' boo!) and giving me some time to study which is a win! The trade off was doing ITIL and Project Management training too, which don't grab me but will keep them happy and look good on the CV. (there was also a rather ominous sounding "and any other training we think you'll need"....)

Thanks again guys for the input.

plik
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.087 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.