Experten aus dem binsec-Universum
Today I was working on a presentation about PCI DSS 3.0. Since a major client of me is an international payment service provider doing credit card transaction, I am quite familiar with PCI DSS 2.0. I have already read the new Standard a few months ago, but today I stumbled about…
As a rule, every company that forwards, stores, or processes credit card data or cardholder data in any other way must comply with PCI DSS. This refers in particular to the full PAN (Personal Account Number), i.e. the…
It took almost two months for my OSCP (Offensive Security Certified Professional) certificate to arrive from Israel.
I was curious about how widespread the different security certifications are. I put together a small statistic using the advanced search in Xing. As search terms I used the abbreviation of the certification (e.g. CISSP) and the keyword “Security”…
The email just arrived: so far, the OSCP has been the only certification (besides CISSP, CISM, CPSSE, DSB-TÜV) with an unmistakable fun factor. But considerably more exhausting, tougher and far more time-consuming than the others. I can only recommend the OSCP from Offensive Security!
Hard, harder, OSCP exam. Yesterday - or rather today - I got the OSCP (Offensive Security Certified Professional) exam behind me. Within a 24-hour window I had to break into several servers (Windows/Linux) and gain privileged rights. A CISSP or CISM exam of a few hours is…
With most of the systems taken over, I wanted to start on the Penetration Test Report for the lab. So far I had kept my documentation in bullet points using Keepnote. I have to admit, I should either have created the documentation in the lab right away in parallel to hacking or…
The CISSP (Certified Information Systems Security Professional) from the Isc² and the CISM (Certified Information Security Manager) from ISACA are among the most widespread and recognized personal certifications for security professionals. In contrast to the German…
It is not just my last blog post about the OSCP course that dates from November 2013, lately I had not done anything for it either. On top of that, my lab access expired in December. Now it is starting again: ordered a 30-day extension for the lab. Goal: OSCP in March!
How do you become an IT security specialist or expert? Primarily through experience and practice! Germany has no dedicated apprenticeship for the field, but by now there are a few degree programs that have taken it on. Where continuing-education…