CIS 52

Welcome to the last class!

Cybersecurity career overview

Logistics

Presentations

Detection And Response

• Security Hub
• Microsoft Sentinel
• LimaCharlie

Prowler

• setting up on your AWS account
• running it

Review

• AWS Academy -- Davis, Craig, Rob, Charnnel, Ali, Peter, Frosanda, Andrew, Nolan
• Try Hackme -- Andrew, Craig, Nolan, Frozenda, Rob, Charnnel, Davis, Ali,
• CTFs (3 CTFs) -- Craig, Davis, Rob, Ali(help)
• Classes - Link
• Introduction into core concepts
• Identity and Access Management
• Security Tools
• Monitoring
• Networking
• Detection and Response
• Handshake

AWS Cleanup

Self-explanatory

Keep in touch!

• Add me on LinkedIn, if you want to: https://www.linkedin.com/in/vaibhavb
• Let me know if I can help you with career advice, resume, etc.

​

That’s all, folks!

Security Careers & Certs

Additional Content

Jobs in Cybersecurity are plentiful!

• Cybersecurity field is expanding at impressive rate.
• “In the U.S., there are about 1 million cybersecurity workers, but there were around 715,000 jobs yet to be filled as of November 2021”, according to a report by Lightcast, a market research company.
• Especially after the pandemics (COVID-19) changed our work style, there has never been a better time to launch a career in cybersecurity. Almost every company in the world today needs experts who know how to build and protect systems to mitigate persistent and potentially catastrophic cyber threats.

There are many types of jobs as well

Many paths

• The truth is that there is no real path to cybersecurity as a career; teenage hackers who target Navy intelligence officers with cyberwar backgrounds, political operatives who focus on privacy issues, or even political activists who go on to succeed in cybersecurity careers

From technical perspective..

• If you really want to be a cybersecurity professional who is very good at what S(he) is doing, I can tell, from my experiences that have a piece of knowledge about the fundamentals of programming (preferably Python), computer networks, and Linux is critically necessary.

Networking & Linux

• A cybersecurity professional should know the basics of computer networks such as network devices (ex: Router, Switch, Hub, Bridge, etc.), OSI and TCP/IP models, IPv4, IPv6, MAC address, ports, etc.
• Most machines security sorts within the industry run some form of Linux within the foundation so there’s no getting around much of it. You may discover Linux type commands in switches, firewalls, stack balancers, and everything else beneath the sun
•  Linux plays an inconceivably vital portion within the work of cybersecurity proficient. Specialized Linux disseminations such as Kali Linux are utilized by cybersecurity experts to perform in-depth entrance testing and vulnerability assessments, as well as give measurable investigation after a security breach.

The Three States of Digital Data�

CIA Triad

In analyzing cybersecurity, the first step is to look at the CIA triad, which is a well-known model for the development of cybersecurity.

​

Confidentiality is the ability not to disclose information to unauthorized persons, programs, or processes.

​

Integrity means that protection against improper modification and destruction of information, ensuring that information cannot be changed undetected, and ensuring the integrity of the information.

​

Availability ensures that information is available to those in need that includes timely and reliable access, regardless of the time of day, place of residence, location, or other factors.

​

Being a Hacker vs Being a Bug Bounty Hunter

Hats

Few Vendor-agnostic Certs

• OSCP (Offensive Security Certified Professional); The Offensive Security Certified Professional (OSCP) is the companion certification for our Penetration Testing with Kali Linux training course and is the world’s first completely hands-on offensive information security certification. The OSCP challenges the students to prove they have a clear and practical understanding of the penetration testing process and life-cycle through an arduous twenty-four (24) hour certification exam.
• CISSP (Certified Information Systems Security Professional); The Certified Information Systems Security Professional (CISSP) is an information security certification for security analysts.
• CISA (Certified Information Systems Auditor); The CISA designation is a globally recognized certification for IS audit control, assurance, and security professionals.
• CompTIA Security+; CompTIA Security+ is a global certification that validates the baseline skills you need to perform core security functions and pursue an IT security career.

​

There are �a lot of certs� out there..

What the future holds

• There are two important technologies that are going shape cybersecurity deeply for sure. Blockchain and Artificial Intelligence.
• You should know, at least, the fundamental concept of these technologies and have an idea about how to implement them into cyberspace.
• In my opinion, having knowledge about these technologies will be required for cybersecurity positions in the near future.

What about AWS�specific certs?

Blogs

• https://aws.amazon.com/blogs/security/
• https://krebsonsecurity.com/
• https://www.schneier.com/
• https://danielmiessler.com/
• https://www.troyhunt.com/
• http://www.darkreading.com/
• http://thehackernews.com/
• https://darknetdiaries.com/
• https://isc.sans.edu/podcast.html
• There are hundreds/thousands of good blogs out there

The End