Need Advice For Getting Into Network Security Field

[LiquidFlame]

Hi guys, I was hoping you guys could give me some advice about getting into the field of network security. First let me give you a little background about myself. I recently graduated from college with a Computer Information Systems degree and I currently work for a fortune 500 company doing legacy system programming, mainly in COBOL/JCL. I’ve taken some networking classes before, but it has been awhile since I’ve had them, for example I took a CCNA class at my high school, and some basic ones in college.

I really like programming, but I really want to get into network security as well, because it has always interested me. I was wondering if any of you guys in the field could give me some advice on where to start/order of steps I should go in, classes to take, and books to read. I looked around and some people have suggested to start out with Security+, then CCNA, then CISSP. Any advice would be great. Thanks.

[SirDice]

Network security is a pretty broad subject. Anything in particular you're interested in?

Being a programmer you might want to concentrate on source code audits?

Getting some hands-on experience running a network and/or administrating servers will help you get into network security.
You need to know how (and more importantly, why) things work before you're able to secure them.

[LiquidFlame]

What I was planing on doing was re-familiarizingly my self with TCP/IP and home networking, and then create my own security lab to play around with and learn from that. I was wondering though, what would be a good setup for a security lab?

[nihil]

Well,

I am not sure what you mean by "setup", but I would start by seeing what "free" equipment I could lay my hands on. I would go for old flatops as you can stack/rack them.

Also try for both wired and wireless connections.

You don't tell us if you have a budget, and how you are fixed for space

[SirDice]

I was wondering though, what would be a good setup for a security lab?

That would be highly dependent on what you're going to test

But like nihil said, start collecting "old" machines. That will give you something to play with without nuking your "workstation".

Another option is to stick an insane amount of memory in your workstation and use VMWare or MS VirtualPC.
(More internal memory means you can run more virtual machines)

[Cider]

Virtual PC 2007 is a good one if you dont have old machines or space to play with.

However a lab that you are speaking of can give more of a realistic approach with the phyisical layout

Just my two cents.