.

Programming for Network Security analyst?

<<

scucci

Newbie
Newbie

Posts: 29

Joined: Mon Sep 15, 2008 10:55 am

Post Wed Jul 15, 2009 9:11 pm

Programming for Network Security analyst?

Hello Everyone,

I'm currently working as a security analyst that performs only network or system based security (OS, Firewalls, IPS, Anti-Virus, content filtering, encryption, etc.), but have no experience with programming or databases.  I read about many of these web vulnerabilities, but don't have the background to fully grasp them. My question is, in order to become a better security analyst what should I learn and where do I start? Right now I'm more interested in understanding vulnerabilities through web attacks if that helps. I'm very new to this side of security :)

Thanks
<<

UNIX

User avatar

Hero Member
Hero Member

Posts: 1244

Joined: Mon Apr 28, 2008 9:20 am

Post Thu Jul 16, 2009 12:27 am

Re: Programming for Network Security analyst?

If you are interested in web-security you may take a closer look at such topics as SQL Injection (SQL in general may help you too), Cross-site scripting (XSS) and Cross-Site Request Forgery (XSRF/ CSRF).

For testing I can recommend Damn Vulnerable Web App whos author is here in the boards too, WebGOAT and OWASP in general.
Also take a lookg at irongeek's Mutillidae and the Hacme series from Foundstone.
Last edited by UNIX on Thu Jul 16, 2009 12:32 am, edited 1 time in total.
<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Thu Jul 16, 2009 7:21 am

Re: Programming for Network Security analyst?

Actually knowing SQL, both general, and RDBMS-specific will be a great plus here.  PHP, ASP, VB, JavaScript, etc, are all very beneficial if you are going to get into web app security.  If you have any programming background, I think these are all very easy to pick up, and rather quickly. 
~~~~~~~~~~~~~~
Ketchup
<<

scucci

Newbie
Newbie

Posts: 29

Joined: Mon Sep 15, 2008 10:55 am

Post Thu Jul 16, 2009 10:13 am

Re: Programming for Network Security analyst?

Thank You everyone!! I took C++ in college, but haven't used it in years. If I was going to start from basics on web security (taking on SQL later on) what books would you recomend for someone who wanted to start getting into web security? I've spent some time on amazon looking up some books, but I've been slightly intimdated by which books to purchase and which areas to focus on. Can someone push me in the right direction or maybe even a recomened path? Thanks for all the help already!!
<<

putosusio

Newbie
Newbie

Posts: 26

Joined: Wed Aug 12, 2009 8:20 pm

Post Thu Aug 13, 2009 8:11 pm

Re: Programming for Network Security analyst?

Try what awesec has suggested.  A google search will get you all the info you need.

I like webgoat because its more than just a book that teaches you theory, it actually has hands on labs that will reinforce the lessons.
Its not the fixing that's the hard part, its knowing what needs fixing.
<<

HotSoup

Post Wed Aug 26, 2009 12:49 am

Re: Programming for Network Security analyst?

Well my suggestion is to learn xhtml and a little css and javascript if you haven't already.  Then try php and mysql.

http://w3schools.com

Common methods that I've seen or used for hacking are: SQL injection, PHP session hijacking, you can get code on the server through file upload forms, idk just do a search on common website vulnerabilities....

edit: also I forgot. this site has some good stuff with web hacking.

http://hackthissite.org
Last edited by HotSoup on Wed Aug 26, 2009 12:51 am, edited 1 time in total.
<<

jason

User avatar

Hero Member
Hero Member

Posts: 1013

Joined: Sat Jun 21, 2008 6:23 pm

Location: USA

Post Wed Aug 26, 2009 10:15 am

Re: Programming for Network Security analyst?

Perl and phython are always useful as well...

Return to Programming

Who is online

Users browsing this forum: No registered users and 0 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software