Need Advice For Getting Into Network Security Field

[LiquidFlame]

Hi guys, I was hoping you guys could give me some advice about getting into the field of network security. First let me give you a little background about myself. I recently graduated from college with a Computer Information Systems degree and I currently work for a fortune 500 company doing legacy system programming, mainly in COBOL/JCL. I?ve taken some networking classes before, but it has been awhile since I?ve had them, for example I took a CCNA class at my high school, and some basic ones in college.

I really like programming, but I really want to get into network security as well, because it has always interested me. I was wondering if any of you guys in the field could give me some advice on where to start/order of steps I should go in, classes to take, and books to read. I looked around and some people have suggested to start out with Security+, then CCNA, then CISSP. Any advice would be great. Thanks.

 

[netsysadmin]

Well I would say the path to a network security job would be just doing Networking in general. The way I look at it the networking security guys are just people that do networking and specialize in security. If anything I would think you would have to be at the top of you game to consider being a security specialist. The issue I have with that type of position is you will never beat the hackers. In some places that means you job is on the line. When an employer has a security breach the first person to get nailed is the security people. A lot of times that means you are getting fired. Too much on the line for me!!

John

 

[narzy]

Really can't go wrong with the Cisco Security certifications but that is really only a start, I've also heard good things about the ethical hacker cert but haven't looked in to it very much. beyond that, learn how to hack, set up a dummy network in your house, segment it learn how packets flow across the network, and experiment. try to break in to a system with a known vulnerability, then patch the system to keep yourself out. be prepared to READ READ READ...there are a bunch of great security resources out there like insecure.org milw0rm and a whole host of others. get failure with the dark underworld of the internet and lurk.

beyond that, talk to your network guys at your company, don't ask specific questions about how they secure the network ect...that sets off red flags, ask general network questions , show that you are interested and buy them alcohol...they can point you down the right path. Also see if your company offers any type of continuing education incentives.

 

[LiquidFlame]

I have thought of setting up my own network at home, and learning from that, but I wasn't sure what all I would need. I could set up a simple home network using a common router like d-link, etc..., but I figured that in order for me to learn anything substantial, I would need to get some real routers and switches, like CISCO, which aren't cheap. Any suggestions?

 

[netsysadmin]

I am going to have to say this is something you don't just learn from a book or cert. You need to work on Cisco gear as your job everyday and work toward a Security Specialization. Same goes for any computer job. You dont just get your MCSE and then get a job as a Engineer. Unfortunately that is what some people think, but that is not how it is. Get you CCNA and try and get a job working with Cisco gear and go from there.

John

 

[narzy]

just need 2 computers and a cross over cable, set them up on the same network, turn off all the services on one and go for it . Then add to the herd, start small then go big.