Meef wrote:
What are the steps to follow to become a computer security professional ?,
to be able to research vulnerabilities ?, code exploits ? What do I have to
learn ? and which learning resources and books would be nice ? I've learned
C programming, C# programming, PHP , SQL and i know how to use Linux and
right now, i'm learning assembly language and linux programming . is it the
right way to go ? should I learn Windows programming as well ?
It's always been my dream.
Waiting for any suggestions ?
Stop dreaming.
Buy an offshore university degree in computer science.
Use the CISSP, CISA, CISM, etc, etc certificate title in your email
signature and start writing in mailing lists.
Go at security conferences to meet people and spread your name and if
you want to be really considered cool organize one yourself.
Write some article on some local magazine by translating (stealing)
articles from securityfocus and other international websites.
Setup a blog stating that you are a master in what you do.
Ok, now you can be considered a computer security professional even if
you know nothing about computer security.
With an investment in marketing and personal promotion for a budget of,
mmmmm about 10.000 USD, you should be able
to became a well valuated computer security professional selling your
activity for a high consultancy daily rate.
Then, don't worry! You can work successfully even if you don't know
anything about security!
Just hire a small consultancy company that provide you serious
professionals at a lower rate than the amount of your invoices and
that's all.
Imho we should think about writing a 'how to became a successful
computer security professional in 30 days' !
-naif
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
