User:Smcnaught/BlogEntry: Road Map to being a Security Professional

Road Map to being a Security Professional

There are some essential skills required to being a proficient security professional.

The following is an outline of the different skills. ChekMate will be having training sessions around these topics.

TCP/IP Skills
- Packet Analysis
  - tcpdump
  - windump
  - snort
  - application layer protocols
  - fingerprinting protocols/operating systems/etc
Intrusion Detection Systems
- snort
- berkely packet filters
Firewalls and Routers
Programming and Scripting
- Read Code
- Debug Code
- Automate jobs via scripting
- Analyze and study exploits
- Reduce vulnerabilities within code
- Programming Languages
  - C and C++
  - Perl
  - PHP
  - Java
  - Assembler
- Additional Languages
  - SQL
  - HTML
  - XML
  - Javascript
  - ActiveX
  - Cascading Stylesheets
Vulnerability Scanning
Penetration Testing
Network Monitoring
Trend Analysis
Syslog Management
Operating Systems
- Linux
- Windows
- BSD Variants
- Hardening an Operating System
Best Practices
- CoBIT
- ITIL
Certifications
- SANS GCIA
- SANS GCIH
- CISSP
- CCNA
- MCSE
- CISA
- CISM
Ethical Hacking
Management and Policy
- Policies
  - BS7799
  - ISO17799
  - ISO17799-2005
  - ISO27000
- Laws and Regulations