I think these skills are needed for a sysadmin job. Not security. You really should have a lot more 'skills' than just knowing what a 403 means or know what a port scanner is. Understanding of basic protocols is a requirement for a system admin job, knowing whats broken about them and how to fix them is a security "level" of understanding. If you want to just be a bottem feeder, nessus running guy, then follow what you read here. Otherwise you should decide on a security field to focus in.. and do just that. learn to read and write code (espcially C and asm) if you want to do application stuff, or learn networking in depth if you want to do be a network guy. Web security and client application security (ie: web browsers) are where a lot of stuff is going these days, wanna follow the trends ? XSS is a major problem. Good luck.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/464/34926#34926