Skills needed for security experts

[SephStorm]

What skills should someone who is interested in being a security expert be focusing on? Firewall implementation? IDS/IPS configuration? Straight up technical knowledge?

[hitthemlow]

Understand TCP/IP To The Level Where you could (if need be) implement it all in RAW sockets. (Dont actually do this if you dont have a death wish, but just understand it enough )


Learn to Program, I suggest C(++) and ASM as your low Level Programs, and Python and Shell Scripts as your Higher Level.


Learn the CLI, it is all possible in the GTK, but nothing beats a good old:
ls -Rla / | grep -e "wsr" -e "\-sr" -e "ws\-" -e "\-s\-"
To get a list of SUID Binaries on the system. (In case anyone didnt get it)


I hate to sound Cliche, but learn Linux, aside from the obvious (tools are made for it), theres also the whole "you get way more freedom to do things like inject modules and all that great stuff"


If at all possible, learn physical security, and social engineering + hardware hacking. I havent really found my niche yet, but being able to tailgate to get in to a building, pick a lock to get into the sesitive areas where tailgating isnt possible. Then slice an ethernet cable and make my own connection into their network is a nice feeling.

[imported_wyze]

Don't forget regular expressions

[lupin]

What skills should someone who is interested in being a security expert be focusing on? Firewall implementation? IDS/IPS configuration? Straight up technical knowledge?

I think your question is too general, there are many different specialties within the IT security field such as incident response, penetration testing, forensics, security administration, etc, and each will have different skill requirements. Even within those areas there can be further specialties (such as wireless pen testers, web app pen testers, network pen testers, network forensics, non volatile storage forensics, etc).

In addition, many security related positions (jobs) would require different levels of skill in each of those areas.

If you're asking because you want to know what you should learn, then the answer depends on the potential job you want to get and what type of duties you will be performing.

[thorin]

What skills should someone who is interested in being a security expert be focusing on? Firewall implementation? IDS/IPS configuration? Straight up technical knowledge?

All of the above, plus:

• Good communication skills (written and oral)
• Interest in learning and reading constantly
• Networking Knowledge
• Understanding of protocols
• Scripting skills
• etc

While our focus is security it seems that the most talented people who do things like Vulnerability Assessment, Penetration Testing, and Threat and Risk Assessment are usually "jack of all trades" type people.

[PeppersGhost]

What everyone said and the obvious Security+ with CISSP.

[SephStorm]

no offense to any here, but I am tired of CISSP. To many people asking for it, not enough people applying it, IMO. While I respect ISC2, and their certs, but when you have a "industry standard" the HR departments tend to throw out the guy who can protect their organization, for the guy who has CISSP. I personally would never say "MCSE required, CISSP required.".

That is why certifications have been devalued. Take me for example. I studied for my Sec+, I have a good grasp of the knowledge, but in this economic situation, I cant pay to take the test. How many doors does that close for me? How many organizations are currently insecure because they want a certified professional, instead of someone who can get the job done?

Right now, closest I plan on going is SSCP. That is enough for me as an individual. Maybe my job will require it. maybe I'll get it, or maybe i'll go do something else I enjoy.

[hitthemlow]

Don't forget regular expressions

lol like this:

ls -anR / | grep "^[^/]..s"

[streaker69]

lol like this:

ls -anR / | grep "^[^/]..s"

No, I believe he meant things like:

How's the weather?

Do you want fries with that?