Printable View
What is The best thing for a new guy to learn about Security as a whole.I am very new to this. I started as a PC tech intern then some help desk and some ISP stuff and now I was hired 3 months ago as the Security Admin for a Bank. I told them I had VERY little experiance and they didnt seem to care.
So here I am...I built the helpdesk up as was agreed upon when i was hired and now i need to start in on the security stuff. :)
Broad topic. You can look through the Security Tutorials forum for some specific tutorials, the Newsletters for some others and probably read everything. The following might help as far as links are concerned:
http://www.snort.org
http://www.netfilter.org
http://www.antionline.com
http://www.attrition.org
http://www.cert.org
http://www.sans.org <--- check out the Reading Room
http://www.securityfocus.com
http://www.cve.mitre.org <--- Common Vulnerabilities and Exposures
http://www.raid-symposium.org <-- Recent Advances in Intrusion Detection (RAID) Conference
http://directory.google.com/Top/Comp...mail/Security/
http://www.microsoft.com/security/ <--- Microsoft Security
Exploits
http://www.packetstormsecurity.com
http://www.zone-h.org
http://www.k-optik.com
http://www.cotse.com
http://www.netsys.com
Penetration Testing
http://www.gao.gov/special.pubs/mgmtpln.pdf <-- US General Accounting Office Management Planning Guide for Information Systems Security Auditing (PDF)
http://csrc.nist.gov/publications/dr...ty-testing.pdf <--- National Institute for Standards and Technology (NIST) Guidelines on Network Security Testing (PDF)
http://www.isecom.org/projects/osstmm.htm <--- Open Source Security Testing Methodology Manual (OSSTMM)
Security Email Lists
http://www.netsys.com/cgi-bin/displaynews?a=301 <-- Full Disclosure
http://www.securityfocus.com/archive <--- BugTraq Mailing Lists (variety of topics)
Scanning Sites/Utilities
http://www.security-forums.com/forum...b_pages&cat=21
Tools
http://www.blackcode.com/net-tools/
http://www.kloth.net/services/
http://network-tools.com/
Trojans/Port Listings
http://www.iss.net/security_center/a...ts/default.htm
http://www.blackcode.com/trojans/ports.php
If you are like me and like to read actual paper books some to consider include:
2600 <-- quarterly magazine
Hacking Exposed, 4th Edition
Network Intrusion Detection
Network SEcurity Hacks
Google Hacks
TCP/IP Illustrated
Hacking: The Art of Exploitation
Hacknotes
Unix System Administration Handbook (Purple Book)
.. and many others (my personal collection is about 300-400 books). Visit Amazon.com and do a search on computer security. :)
HTH
start with the basics. Make sure you keep everything updated, learn your hardware, keep ontop of knowing new virusis that are put on the net that may effect you. Read up on firewall configurations and make sure yours are set correctly. and dont forget about the people working for you, make sure they know what they are doing, and make sure they aren't giving out info to unauthorized people. (read "the art of deception" by Kevin Mitnik) Security isnt just your computers, users play a huge roll as well. Also do things like password audits and watch what they are downloading if anything. stuff like that. but read everything you can get your hands on, the more info you have the better. good luck.
Dang...this is going to take a while! :shocked
Thanks, J
Jason, you're starting at the snowflake of a huge glacier. :D Enjoy!
Well,does the bloody glacier EVER end?not that I've seen*looks at all the stuff he has to read*
oh,and getiing back to the topic...it'd also be nifty if you learned a bit about programming..it'd teach you how programs'd work and such
Nope. It never ends. That's why security is always considered a "verb" rather than a noun. It is a process, not a thing. Even IT doesn't have an end when you consider all the different things you can do. That's why when someone says "Where do I start in security?", it's always a broad question. Narrow it down to specifics and people can help you out faster.Quote:
Well,does the bloody glacier EVER end?not that I've seen*looks at all the stuff he has to read*
oh,and getiing back to the topic...it'd also be nifty if you learned a bit about programming..it'd teach you how programs'd work and such
Ms. M: There are times when you are "priceless"....
This time you exceeded yourself...... :cool:Quote:
Jason, you're starting at the snowflake of a huge glacier. Enjoy!
security is a lifestyle (way of life) not just a 9 - 5 job :)
Can you name the bank :D Only i would like to make sure i dont use it, till your upto speed ;)
Jason1977:
Some additional beginning tips...
1. Go to a SANS course. Maybe _SANS Security Essentials Bootcamp_ http://www.sans.org/sansfire2004/description.php?tid=23 or _IT Security Audit Essentials_ http://www.sans.org/sansfire2004/description.php?tid=9. I figured your company (re.; bank) can afford it and they are of very high quality in my opinion.
2. Learn networking
That along with the other good tips everyone's offered should get you started.
Gotta plug http://www.rfc-editor.org . It's useful to study how things are _supposed_ to work to better understand why a given flaw/divergence can be exploited the way it can.
Nice list Ms. Mittens.
-- spurious
I was thinking the same thing, but he is obviously willing to do the leg work to get up to speed so Im sure he'll do fine. good luck.Quote:
Originally posted here by jinxy
Can you name the bank :D Only i would like to make sure i dont use it, till your upto speed ;)