Training advice

[Aspman]

Got an email from my Boss asking if I'd like to do this course:
http://www.sec-1.com/hacking_revealed.html


It's a CD based course so I'd be doing it in the office or at home probably.
He also hinted that I'd get to do a proper (residential) course on the same subject if I wanted.

I'm not big on self training, I tend to get bored and not pay too much attention.
On the other hand I'm not a techy at work my role is more along the lines of auditing, assessing, incident reponse, control setting, risk assessment.... blah blah.
I tend to need to know a little about everything without being too specialised.
I could do a 5 day hacking course but not having a programming background I'd probably find it quite tough and it would be overkill for what I'm doing. Though I'd be happy to learn it for the sake of learning, you can't know too much can you?

Any ideas suggestions?
I'm not sure myself where I'd like to go with this.

If you know any UK courses you've done that were useful I'd like to know but any comments on the type of courses would be useful.

They're quite positive towards training here so I'd like to take advantage of it.

Sorry this is a bit of a ramble, I've started on the hayfever meds and even the non-drowsey stuff knocks me out a bit.

[nihil]

Hi Aspman,

I would have a go at it, as from your role description it seems a pretty good fit.

A lot depends on how well it is structured and presented. Remember that the human attention span is only about 20 minutes IRL, so you should not try to do to much at one go. Also the course should have practical/demonstration, questionnaire or other breaks to accommodate this fact.

Might I suggest that you get the book "Teaching, Training and Learning" from your library and have a browse through it. It could teach you a lot about the way you personally learn.

The authors are Ian Reece and Stephen Walker, Publisher: Business Education Publishers Limited,

ISBN 1 901666 30 4

I would not worry to much about programming, as most hackers are not programmers, they just use tools like everyone else. I would say that systems analysis is a more pertinent generic skillset.

After all, how many hacks happen because of PURE CODING ERRORS? the answer is "not a lot". The vulnerabilities come from architecture and design, and by not setting the system and security policy correctly.

As in, I may not know how to burgle a house, but I do know how to lock the doors and windows (and set the claymore mines )

I hope that helps

Cheers