August 16th, 2007, 02:50 PM
I am interested in IT security, but I am a programmer by profession. I develop web application using Java. Besides programming, I knew nothing about network/system.
Please advise how can I move on to IT security?
August 16th, 2007, 03:15 PM
Train as a postman for 2 years...
August 16th, 2007, 03:31 PM
I believe Nokia is joking around ........
I also feel you have answered your own question
I knew nothing about network/system.
How people treat you is their karma- how you react is yours-Wayne Dyer
August 17th, 2007, 03:03 AM
I'd go with what you know first and then branch out. Look into what it takes to be a security engineer in development (so a dev who knows security and secure coding practices...).
You're more likely to sell your company on getting you training if it's something you can apply directly to your work now.
"When I get a little money I buy books; and if any is left I buy food and clothes." - Erasmus
"There is no programming language, no matter how structured, that will prevent programmers from writing bad programs." - L. Flon
"Mischief my ass, you are an unethical moron." - chsh
Blog of X
August 17th, 2007, 04:44 PM
Id have to agree with Juridan. You should learn what you can on the side and once you build up more try to apply it to what you do and make a steady transition.
August 18th, 2007, 07:03 AM
Yup, If I transit to network/sys environment I would definitely get a great pay cut =p
August 18th, 2007, 06:18 PM
I would have to agree with what the others have said.
If your looking to spend some time and money towards getting there, you may want to consider taking some cisco classes to get a feel for how networking and ACL's (access control lists) work, as well as fire walling using their PIX firewalls. Learning a PIX firewall system would be a good primer for learning the basics behind network security (at least on the switching/routing level).
Juridian also brings up a good point that even on the programming level we have to worry about security. Things in this arena includes input validation, SQL validation, keeping constraints properly, and encrypting sensitive information properly. Further more wrapping and kind of information going over the internet into ssl, wraping that in vpn tunnels, for any kind of traversal of sensative info, regardless of the socket protocol used.
I however took the degree path over the certificate path. It will help you learn, how to learn, much of the aspects of computer sciences and engineering, which tends to greatly increase your learning curve of any new systems.
Have fun learning your new path.
Last edited by xmaddness; August 18th, 2007 at 06:23 PM.
August 18th, 2007, 09:22 PM
1. What makes you think that there is any future in it? other than as an a COTS apps drone?
2. Is it worth the cost, both the real and the opportunity cost, of obtaining the skills in an uncertain market?
3. Have you checked opportunities, job ads, and the like in your preferred localities?
4. Why are you looking at throwing away your proven skills for this?
5. Have you considered the management route?
August 22nd, 2007, 03:53 PM
Originally Posted by nihil
1. I am a fresh graduate, looking around network/system/programming jobs and see which one suits me.
2. I believe security gurus are paid very well, I am a interested in security as well
3. Security is a very niche market in my country. Not much jobs compared to other fields like network/programming
4. Programming is the only skill I have at the moment : (
thanks for your advise
Last edited by liangteh; August 22nd, 2007 at 04:38 PM.
August 22nd, 2007, 04:07 PM
just remember, job security = Microsoft
technical security = CISCO
end of lesson 1
see the sarcasim in my smile
By linux1880 in forum Newbie Security Questions
Last Post: February 26th, 2005, 04:14 AM
By redemption in forum Newbie Security Questions
Last Post: July 6th, 2004, 11:03 PM
By coVert in forum Newbie Security Questions
Last Post: January 30th, 2004, 10:38 AM
By cable in forum Product / Book / Training / Conference Reviews
Last Post: September 18th, 2003, 08:54 PM
By 5150 in forum AntiOnline's General Chit Chat
Last Post: July 9th, 2002, 04:32 PM