[a4anand]

Hi you all pagals,

This is Anand , and i am a Software Testing Engineer by profession.

Now let me come to the point, i am planning to shift into Security / Penetartion testing field on lines of Information security. Any one heard of it ? CISA (Certified Information Security Auditor) , CISSP exams.

I wanted to know abt the basics from start about things which are minimal requirements to get an entry foot in this field before attempting for CISA.

Any forums / any one in security field / any good websites etc etc would be of great help.

Request you all to make a sincere effort to reply this post. and eagarly awaiting for ur replies.


Anand

[a4anand]

Originally Posted by a4anand

Hi you all pagals,

This is Anand , and i am a Software Testing Engineer by profession.

Now let me come to the point, i am planning to shift into Security / Penetartion testing field on lines of Information security. Any one heard of it ? CISA (Certified Information Security Auditor) , CISSP exams.

I wanted to know abt the basics from start about things which are minimal requirements to get an entry foot in this field before attempting for CISA.

Any forums / any one in security field / any good websites etc etc would be of great help.

Request you all to make a sincere effort to reply this post. and eagarly awaiting for ur replies.


Anand

cmon guys need some serious help .

pour in with ur comments .

[Psychodementia]

Check your PM

Arun

[Mrs.Zong]

hi

I am working in the same domain. :-)

U can try this site called.. www.foundstone.com.
U have dummy applications here. free download. try to crack them.
u'll learn how to do cross site scripting, sql injection and many more
flaws that one can come across.

Try using tools like ethereal, nmap and paros on ur own.
at first it will be a bit confusing but always google and when in doubt..
google even more :-)

u even have step by step manuals how to use the tools so u shud be ok.

i think i can send some read ups for ya just pm me ur email id. okie.

[Mrs.Zong]

also u can buy a book on cissp. see for a certification of this level.
they generally will expect a field experience of three years in this domain.

but its always a good starting point to know about the 10 domains of security. what they are all about.

also be clear about the network fundamentals.. the protocols etc.

It always help. Dont try stunts from ur com or ur cubicle. I think ur company shud have a lab where u can try all these things. so play safe.