Cyber Defense eMagazine December 2019

More documents

Recommendations

Info

57 Learn There are several paths to cybersecurity that one can follow. Research the different paths and learn what the required skill sets are, evaluating all of them to help you decide which ones are of interest. For example, do you want to review data and identify unusual behavior like a cybersecurity analyst? Or would you prefer to use new technology and processes to enhance security capabilities, like a cybersecurity engineer? Perhaps, you would prefer to analyze digital evidence in response to an attack or breach, like those in digital forensics incident response disciplines. The National Initiative for <strong>Cyber</strong>security Careers and Studies presents the NICE <strong>Cyber</strong>security Workforce Framework [2] , published by NIST [3] , that can help you explore the different paths and roles available, along with the required skills and knowledge. Take advantage of this. Once you have identified which paths are of interest to you, learn about that subject matter and continue learning. The nature of our industry necessitates that you be on a continual path of learning. If you don’t have a degree, or are still in school at this point, I highly recommend you pursue a degree in Computer Science, or one of the cybersecurity degrees that many colleges and universities now offer. This is also a great place to network with like-minded people. If you have a degree in another area, but want to make a transition into cybersecurity, I suggest you take information security courses that can provide you with the fundamentals of Information Technology. These days, most community colleges and universities offer courses through their Continuing Education program and many are even available online. To become a security practitioner, one must learn the fundamentals of information systems, operating systems (such as Windows and Linux), and the architecture of network environments. You need to be familiar with how they operate and work together. You can’t protect a system if you don’t know how it works. There are many free and very affordable computer and cybersecurity courses online. These include courses available from CompTIA, Cybrary, Coursera, Udemy, Department of Homeland Security - NICCS, and the Federal Virtual Training Environment (all of which are free to government personnel and veterans). Many vendors also have free online webinars or their own YouTube channel with free training videos. Take advantage of any free and affordable courses, hands-on labs, capture the flag events and cyber challenges, as these will help you narrow down the path where you’re most passionate. You must constantly be filled with curiosity, as it’s the only way you will learn. Buy books, audiobooks, or listen to podcasts while you are in transit, washing dishes, or grilling out. This is one of the main reasons why I love this field, because you truly are always learning something new. It never gets boring! Network Networking is very important, as it helps you to meet others that are as passionate about cybersecurity as you. When you meet others in this field, ask them about their journey and let them know where you stand in yours. Ask for their advice. You will learn that most are more than willing to provide guidance. Read blogs and articles that focus on the areas you are thinking about pursuing. Then follow the authors on social media platforms and learn from them. Leverage social media to connect with others in the
58 industry. Perform online searches for cybersecurity events in your area and try to attend as many as possible. Research authors who have published books in the cybersecurity field. Many of them will be happy to advise and mentor you on your journey. Join associations that focus on the specialized skills of interest to you and connect with their members. Attend conferences, learn as much as possible and network during attendance. Don’t be afraid to ask someone if they’re willing to mentor you, or even if you can shadow them for a day. I have asked this, and it has been asked of me. Ask those you have networked and connected with if internships are available in their company. If not, maybe they can connect you with another company that offers this. Look for cybersecurity meet-up groups in your area. Members of these meet-ups operate in many different fields of cybersecurity and usually happy to share their knowledge and experiences. Even after you become a cybersecurity sleuth, never stop networking! Soft Skills In addition to the necessary technical skills, soft skills are also a must! Response to attacks and incidents are rarely handled by individual people. Rather, it takes a team to handle cyberattacks and you must have the soft skills in order to contribute. Regardless of the role you land, be inquisitive and listen, communicate well, focus on strong team collaboration, develop your problem-solving techniques, and polish your writing skills. You must be attentive to details, able to effectively communicate your findings to the team (technical), management and executives (non-technical). It takes an organized approach, as a team, to help protect the impacted cyber environment. Lastly, in an effort to get into the field, never be afraid to take a lesser job than what you wanted. Sometimes, simply getting a foot in the door is the hardest part. Once inside, you can develop your skills and eventually work your way into the job that really interests you. Once you’re in a cybersecurity role, realize that you will never have all the answers. You will find that you need others, just as much as they need you, to be successful in this field. Adopt this approach and you will become a great cybersecurity sleuth, desired by all. And when you do become a cybersecurity sleuth, remember to pay it forward. Make it a point to guide or mentor someone else on their journey as well. [1] https://cybersecurityventures.com/women-in-cybersecurity/ [2] https://niccs.us-cert.gov/workforce-development/cyber-security-workforce-framework [3] https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800- 181.pdf?trackDocs=NIST.SP.800-181.pdf
Page 1 and 2:
1 8 Most Common Cybersecurity Mista
Page 3 and 4:
2
Page 5 and 6:
4 The Internet Got Safer In 2019: A
Page 7 and 8: @CYBERDEFENSEMAG CYBER DEFENSE eMAG
Page 9 and 10: 8
Page 11 and 12: 10
Page 13 and 14: 12
Page 15 and 16: 14
Page 17 and 18: 16
Page 19 and 20: 18
Page 21 and 22: 20 8 Most Common Cybersecurity Mist
Page 23 and 24: 22 You can prevent (or decrease) th
Page 25 and 26: 24 While it’s not feasible to res
Page 27 and 28: 26 The major difference is the addi
Page 29 and 30: 28 Oh, my! PerCSoft’s Irony By Ch
Page 31 and 32: 30 • Conduct cybersecurity traini
Page 33 and 34: 32 Persistent Cybersecurity Industr
Page 35 and 36: 34 Automation is welcome and seen a
Page 37 and 38: 36 Protecting Against Modern Cybera
Page 39 and 40: 38 Conclusion Unfortunately, no tec
Page 41 and 42: 40 For 2020 The Death of Traditiona
Page 43 and 44: 42 The Next Five Years The End of E
Page 45 and 46: 44 Government Agencies Are Prime Ta
Page 47 and 48: 46 It’s a basic fact of contempor
Page 49 and 50: 48 simpler way to approach these pr
Page 51 and 52: 50 Why Outsmart Cyber Attackers Whe
Page 53 and 54: 52 Depending on how you look at it,
Page 55 and 56: 54 devices. Russian actors can extr
Page 57: 56 How to Become a Cybersecurity Sl
Page 61 and 62: 60 The Security Challenges of Robot
Page 63 and 64: 62 The typical approach in providin
Page 65 and 66: 64 The Blockchain And Wireless Tech
Page 67 and 68: 66 systems. As is quite well-known,
Page 69 and 70: 68 Benefits of Having an SSL Certif
Page 71 and 72: 70 Google has made SSL compulsory s
Page 73 and 74: 72 This year, privacy and security
Page 75 and 76: 74 The Perspectives Of The 5th Indu
Page 77 and 78: 76 The balance between offense and
Page 79 and 80: 78 The Rise of Cybercrime-As-A-Serv
Page 81 and 82: 80 About the Author Mark Belgrove i
Page 83 and 84: 82 the conflict. Practically, it’
Page 85 and 86: 84 fact is something that would see
Page 87 and 88: 86 Furthermore, Tessian in 2019 del
Page 89 and 90: 88 Automatic for The SOC People How
Page 91 and 92: 90 Allows Transparency and Drive Le
Page 93 and 94: 92 Only large enterprises can benef
Page 95 and 96: 94 The Growing Costs of Cyber Attac
Page 97 and 98: 96 After suffering a cyber attack m
Page 99 and 100: 98 Some of the most damaging Inside
Page 101 and 102: 100 Out-Smarting the Cybersecurity
Page 103 and 104: 102 Empower Other Teams Network and
Page 105 and 106: 104 New Security Report Highlights
Page 107 and 108: 106 The Threat Lab team also analyz
Page 109 and 110:
108 Drive, AWS, Office 365, etc. It
Page 111 and 112:
110 former governor, this bill also
Page 113 and 114:
112 I mean, if you want to be able
Page 115 and 116:
114 Is It Safe to Connect to Public
Page 117 and 118:
116 5. Safe Browsing Additional dil
Page 119 and 120:
118 flawed method in which Evernote
Page 121 and 122:
120 Really, Imagine a Day Without W
Page 123 and 124:
122
Page 125 and 126:
124
Page 127 and 128:
126
Page 129 and 130:
128
Page 131 and 132:
130
Page 133 and 134:
132
Page 135 and 136:
134
Page 137 and 138:
136
Page 139 and 140:
138 Meet Our Publisher: Gary S. Mil
Page 141 and 142:
140 Free Monthly Cyber Defense eMag
Page 143 and 144:
142
Page 145 and 146:
144
Page 147 and 148:
146 Nearly 8 Years in The Making…
Page 149 and 150:
148
Page 151:
150
show all

Cyber Defense eMagazine December 2019

Create successful ePaper yourself

Delete template?

Save as template?