Sunday 21 July 2013

New books, thick and heavy - Plan to read (i swear!)

So about 2-3 weeks ago I ordered some books, not an e-book, a REAL book. Me, ordering a hard copy book would be the last thing I thought I would do. But I have been reading these books on my e-reader and thought "hey, lets try the hard copy, it will look like i am serious too.


Why I chose to order real BOOKS

I am planning to do the OSCP, as such I was recommened to read and learn that information contained in these books, to better prepare myself for it.

I thought that was a great idea, and its where my passion lies. So why not?!!?!?

Ordered the books

So I looked at Amazon and the UK book repsitory. The UK book repository was cheaper for the first 2 books, but Amazon came in just a tiny bit cheaper for 3 books. I wanted them at the same time so I did not bother splitting my order. 

The books were to arrive in August 09ish...

Arrival of my books.

Expecting the books a month later I was surprised when my partner told me a massive bag came with my name on it. Looking at the bag I was like rightio... A massive garbage bag what on earth could this be.
It was my books, not surprisingly, but when you view the pic you will see what I am blogging about it.

-> The bag....... trolololol, what an eye sore!



What books did I order??!?!?!


The Web Applications Hackers Handbook -> HERE
I did read some XSS in this book. It is so fantastic, goes into great depth and I think it has some humor, or maybe that is just me.



Hacking Exposed 7 -> HERE
Sorry have not read

The Art of Human Hacking. -> HERE
I read this in bed, is really great, to see the human side of attacks/exploits is really 'great' to see/read.


I recommended them! (even the one I have not read yet).

Tuesday 9 July 2013

Advice for students/people considering the infosec industry - my experiences and blah blah

Please note: work in progress, will be updated


So a friend put me in contact with his friend, who wants advice on how I got to where I am. Where I am? really, oh shucks! I am just a graduate. But still, I remember how hard it was finding, let alone getting a job during or after University.

Umm where to start. Perhaps my first undergrad that went no where, or my masters, which lead me to where I am, or the professional development I pushed hard to do, or networking and the luck I received.


Master I.T (security Major)

I decided to this Degree after a few years of going from casual job to casual job.
I was eventually fired from a petstore, a casual position... Classy right, how on earth do you get fired from a pet store?!?!?

Well folks, I somehow achieved the un-achievable.

So at the bottom of my run, or at least feeling like I had hit rock bottom, thinking about my future, it just happens Deakin sent me a postgraduate flyer, about (you guessed it) IT. What timing right, I had just lost my job (great job and all >.<) and this flyer comes in. Now in hindsight it was a sign (if you believe in that stuff), or a coincidence, a bloody great opportunity I took advantage of.

Anyhow you will be more interested in what I did during my course, not the course I did (ok maybe some of the course).

During the course:

I was not an A++ student, or HD depending on your terminology (GPA 5 for US?). I was an average grade student, or slightly better than average grade student. Distinction average, 70% there abouts.

So you can see I was an average student. But what I did outside of my grades was what made me stand out. Deakin offers a variety of professional development programs. Internships (the most obvious), Work Integrated Learning Program (the not so obvious). I did both.

The Work integrated Learning Program can be found here .
This I did first, it is a set of modules to help, that's right integrate you into the real working world. These include mock interviews, meetings, stuff like that even on how to wear your suit in Australia (btw do not ever do your bottom button up on your suit jacket).

I found it very important to improve these skills, especially communication skills. Most other students do not do this, so even doing a little of it, puts you above MANY other students. So a big hint there, you can really rush forward to the start of the pack for jobs just by doing the professional development.

To potential employers it also says that you are committed to development and going that extra step, they always want that extra step!

I joined a society, shocker hey! After doing professional development or during, you will meet and network and there should be a society that suits your interests and goals. Mine at the time was an IT and information systems society, we would organize networking events, invite companies to come and present. So I advise to put your hand up and join, you do not necessarily have to be on the board, even helping setup events gets you opportunities to meet people in the KNOW.

My opportunity to meet someone in the KNOW.
I had not joined the society yet, but I volunteered to help organize the event, this event was a presentation about the company (that I actually work for now). I had to get up at 7 or 8am, very early at the time for a university student, I know right!

I met my team and just before entering the elevator to head to the room, I was introduced to the graduate recruiter. BANG, right there, I had become a face instead of another resume. I think this moment was very important. 

Not only was I now a face, I was also able to introduce myself and make hopefully a good impression. A graduate recruite was here in the flesh and I was able to see they are iust human, really they are. Best of all I was able to get first hand advice! 

So long story short it went well. So that is the possibility of helping out with those sorts of events.


This post is becoming ever increasing in size, so I will update each time I add more. Please be patient, I always think of more things to write.



Infosec and Cyber security and Pen Testing

So I am lucky to be in the field of Risk, mainly technology Risk, and even within that the I.T security Team. Further in the security team I do some Pen testing/Ethical Hacking, or at least developing the ability to become one.




Groups to join (that I suggest)

ACS - Australian Computer Society
As a student it has cheap membership.
Has great professional development workshops run by Jill Noble (her link is here, nice to show you who the persona 'actually' is)

Attend her workshops which include speaking, interviews and resumes. Really helped my interaction with prospective employers. Being able to articulate myself that wee bit better did help.

ISACA

AISA

(ISC)2
Is free to join.