Skip to main content

5 Year Path To Success in InfoSec: The Basics of Becoming an InfoSec Expert in 5 years!


Information security is a very broad field.  No one is an expert in everything (i.e., risk management, application security, security awareness, policy development, etc.) 



How quickly one becomes an expert also depends deeply on how much of a background one has in computer science, information technology, business management, and other related fields. 

So the title is 5 Year Path To Success in InfoSec: The Basics of Becoming an InfoSec Expert in 5 years!

This amazing web cast (TL;DR below) shows you the basics of becoming an expert in 5 years, I recommend you to watch it. But, for the lazy:


tl;dr:
  • Year one: Focus on core concepts (OS, networking, etc)
  • Year two: start projects, learn PowerShell
  • Year three: year of web apps
    • PHP and ASP.Net
    • Develop something
  • Year four: start hacking
    • Learn IDA and Immunity
    • Pick a protocol and dive into it
    • Online challenges
  • Year five: present
    • Take what you've learned and share it, be active in the community
Closing list of "DOs" and "DO NOTs"
DO:
  • Indulge in distractions
  • Stick to my plan
  • Ignore my plan
  • Develop your own plan
  • Get good at just one thing
  • Get a degree
  • Don't get a degree
  • Get certifications
  • Don't get certifications
DO NOT:
  • Sink into video games
  • Waste your time going after epic Pokemon
  • Binge watch shows on Netflix
  • Use Bing for anything
  • Just barely learn Metasploit to impress women/men
  • Spend more time on the hacker "look" than learning
  • Get angry
  • Blame others

Courtesy of  /u/Definitely__Working


Regards,

AZID
Labels:

Comments

Post a Comment

Most Viewed Content:

CEH v10 Write-up | Certified Ethical Hacker | 2020

On July 10th I passed the CEH with 105/125 questions right and this is the write up to the exam and certification. I got really interested in the CEH because it was a well known certification and the syllabus really interested me. I also had a ton of recommendations online and from people in this industry saying that the CEH was a really good beginner level security certification. Details about the exam and course: I bought the course from the EC-Council website. There are certain requirements if you want to take this certification. You should either have 2 years experience or buy their online iClass to attempt the exam. As I did not have the required experience I bought the online course. The EC-Council website and how everything works with them is very confusing and I got very confused at times. But thankfully, the customer support answered all my questions and guided me through the buying process and the registration. The course costs $1100 USD in India but I bought the course durin...
1 comment
Read more

OverTheWire Bandit: Level 0-14

Bandit Levels Levels 0-14 Levels 14-25 Levels 25-33 Please use Ctrl+F to find your desired Level. Level 0 Bandit Level 0 Level Goal The goal of this level is for you to log into the game using SSH. The host to which you need to connect is bandit.labs.overthewire.org, on port 2220. The username is bandit0 and the password is bandit0. Once logged in, go to the Level 1 page to find out how to beat Level 1. Commands you may need to solve this level 2/31 ssh kali@kali:~$ ssh bandit0@172.9.9.176 -p 2220 password: bandit0 Level 0 -> Level 1 Level Goal The password for the next level is stored in a file called readme located in the home directory. Use this password to log into bandit1 using SSH. Whenever you find a password for a level, use SSH (on port 2220) to log into that level and continue the game. Commands you may need to solve this level ls, cd, cat, file, du, find Password for next level: boJ9jbbUNNfktd78OOpsqOltutMc3MY1 Level 1 -> Level 2 Level Goal The password for the next le...
Post a Comment
Read more

Best Reddit Subreddits for Cybersecurity and Hacking!

Reddit is a very useful website for discussions about everything. For cybersecurity and hacking too, it has useful subreddits, in which, you will learn a lot of things you previously had no knowledge of. So, I have compiled a list of security related subreddits. 1. Active and Most helpful subreddits: /r/netsec /r/AskNetsec /r/netsecstudents These three are pretty much it. They have very active communities and are very helpful. I, personally use  /r/netsecstudents a lot because I'm still in the process of learning and that subreddit(if you look properly) will tell you how to make a career in every security field. 2. Security Certification Subreddits: r/CompTIA (for Security+) r/ccna (for CCNA and CCNA Security, also r/ccnp for CCNP) r/CEH (for CEH) r/cissp (Certified Information Systems Security Professional) r/oscp (Offensive Security Certified Professional) Really helpful if you're doing any of these Certs. 3. Other...
Post a Comment
Read more