Security cert for s/w eng

[The_Idiot]

Hey guys, I am a software engineer by trade. I hope to get a security cert (CEH) for gaining knowledge, btw not for the sake of getting security job: I have no intention to change line.

My network knowledge is zilch: I only noe what is private/public ip addr and subnet. I do not have OS administrative knowledge. I only noe how to prevent buffer overruns and sql injection in source code. I think Security+ is out for me, since its exam include hands-on questions rather than all MCQ. I am looking at CEH or any basic cert where I have a chance of passing bcos I am footing the course fee all by myself.

Any advice?

 

[glockification]

Hey guys, I am a software engineer by trade. I hope to get a security cert (CEH) for gaining knowledge, btw not for the sake of getting security job: I have no intention to change line.

My network knowledge is zilch: I only noe what is private/public ip addr and subnet. I do not have OS administrative knowledge. I only noe how to prevent buffer overruns and sql injection in source code. I think Security+ is out for me, since its exam include hands-on questions rather than all MCQ. I am looking at CEH or any basic cert where I have a chance of passing bcos I am footing the course fee all by myself.

Any advice?

You might want to check out SANS course. They have some security courses customised for developers.

 

[Semimaru]

from what i read around, CEH teaches methodologies, not hardcore technical stuff...

for s/w can probably go into app pen testing.

 

[The_Idiot]

Hi thanks for the replies.

I have found EC Council Certified Secure Programmer Course but is not what I wanted. I know how to code securely. Secure app is only half of the equation. I want to learn how to secure the server (where the app is run). My ex-company server often get hacked but they do not know where/how it got hacked: their only solution is to change all pw. I hope to acquire the hacker mindset so that I can secure server against attack. Pen testing is probably what I need to learn.

 

[davidktw]

Hi thanks for the replies.

I have found EC Council Certified Secure Programmer Course but is not what I wanted. I know how to code securely. Secure app is only half of the equation. I want to learn how to secure the server (where the app is run). My ex-company server often get hacked but they do not know where/how it got hacked: their only solution is to change all pw. I hope to acquire the hacker mindset so that I can secure server against attack. Pen testing is probably what I need to learn.

ThinkSECURE Certifications - PRACTICAL IT-Security Certification & Training for TECHNICAL IT-Professionals

 

[BossQ]

https://www.sans.org/media/security-training/roadmap.pdf

 

[Xiaosa1]

CLSSP Lor........

 

[dskw]

My ex-company server often get hacked but they do not know where/how it got hacked: their only solution is to change all pw.

I kena that in a red/blue team exercise before. really frustrating

 

[MoeMoeSama]

CSSLP... or thinksecure.

 

[dupdupdup]

Hey guys, I am a software engineer by trade. I hope to get a security cert (CEH) for gaining knowledge, btw not for the sake of getting security job: I have no intention to change line.

My network knowledge is zilch: I only noe what is private/public ip addr and subnet. I do not have OS administrative knowledge. I only noe how to prevent buffer overruns and sql injection in source code. I think Security+ is out for me, since its exam include hands-on questions rather than all MCQ. I am looking at CEH or any basic cert where I have a chance of passing bcos I am footing the course fee all by myself.

Any advice?

I have completed CEH and ECSA, to me it is nearly useless.. You are better of taking online courses like eLearnSecurity Offensive Security etc.. if you want something local then maybe SANS, COSEINC, or thinkSecure would be better.

 

[MoeMoeSama]

I have completed CEH and ECSA, to me it is nearly useless.. You are better of taking online courses like eLearnSecurity Offensive Security etc.. if you want something local then maybe SANS, COSEINC, or thinkSecure would be better.

offsec is tailored for OCD

 

[chinhw]

I am a software engineer with some network knowledge.
I took CEH and ECSA course to learn more about hacking. CEH is more on offensive. You will learn how a hacker can hack a server.

If you join a school, you should not have problem passing the exam.

The total course for CEH and ECSA was $5000. I was able to claim $2500 from IDA under the Critical Infocomm Skills program (CITREP) (You do not need your company to endorse the claim.)

You might want check out the CITREP.