По поводу сертификации в ИБ существуют разные мнения. Часть людей поощрает сдачу экзамена и получение сертификата. Другие говорят что это бизнес на сертах и "коллекционирование бумажек", а спецом можно быть и без экзамена. Твое мнение?
Anonymous Poll
29%
Сертификация подтверждает скилл, увеличивает спрос на рынке и бустит ЗП к верхней границе
38%
Иметь серт хорошо, доп бонус, но не ключевой фактор в становлении спеца и не приоритетный для работы
4%
Реального толку мало, сливаешь деньги и время, бизнес для прокторов, мало что дает в реальной жизни
10%
Если не за свои деньги (работодатель, спонсор) то можно, а так необоснованная трата личного бюджета
15%
50/50 где то серт это преимущество, а где-то на енго просто забивают и веса он не имеет, on depend
4%
Свой вариант (пиши в чат)
🔥4👍1🤔1
Forwarded from CyberSecBastion
👍5
Forwarded from CyberSecBastion
60 Methods For Cloud Attacks.pdf
3.2 MB
60 Methods For Cloud Attacks PDF Guide
🔥2
Web Security: Learning HTTP Security Headers, Liran Tal, 2023
18 Lessons, 8 Quizzes, 30 Code Snippets, and 19 Illustrations to help you learn
Takeaway Skills
(+) Secure web applications using HTTP security headers
(+) Understand Content Security Policy
(+) Setup Node.js web applications securely
(+) Learn how to test and monitor for security headers and vulnerable JavaScript libraries
(+) Roadmap for future web controls
For each HTTP security header that can enhance your web application security, you'll learn what is the overall risk of not implementing it, and what does a proposed solution help with. Finally, you'll learn how to implement and configure the security header with Helmet, a popular and well-maintained Node.js package on npm.
#book #web #AppSec
18 Lessons, 8 Quizzes, 30 Code Snippets, and 19 Illustrations to help you learn
Takeaway Skills
(+) Secure web applications using HTTP security headers
(+) Understand Content Security Policy
(+) Setup Node.js web applications securely
(+) Learn how to test and monitor for security headers and vulnerable JavaScript libraries
(+) Roadmap for future web controls
For each HTTP security header that can enhance your web application security, you'll learn what is the overall risk of not implementing it, and what does a proposed solution help with. Finally, you'll learn how to implement and configure the security header with Helmet, a popular and well-maintained Node.js package on npm.
#book #web #AppSec
👍5❤1
Web Security Learning HTTP Security Headers (Liran Tal).pdf
5.3 MB
Web Security: Learning HTTP Security Headers, Liran Tal, 2023
🔥7
API Security in Action, Neil Madden, 2020
APIs control data sharing in every service, server, data store, and web client. Modern data-centric designs—including microservices and cloud-native applications—demand a comprehensive, multi-layered approach to security for both private and public-facing APIs.
API Security in Action teaches you how to create secure APIs for any situation. By following this hands-on guide you’ll build a social network API while mastering techniques for flexible multi-user security, cloud key management, and lightweight cryptography. When you’re done, you’ll be able to create APIs that stand up to complex threat models and hostile environments.
What’s inside
• Authentication
• Authorization
• Audit logging
• Rate limiting
• Encryption
#book #AppSec
APIs control data sharing in every service, server, data store, and web client. Modern data-centric designs—including microservices and cloud-native applications—demand a comprehensive, multi-layered approach to security for both private and public-facing APIs.
API Security in Action teaches you how to create secure APIs for any situation. By following this hands-on guide you’ll build a social network API while mastering techniques for flexible multi-user security, cloud key management, and lightweight cryptography. When you’re done, you’ll be able to create APIs that stand up to complex threat models and hostile environments.
What’s inside
• Authentication
• Authorization
• Audit logging
• Rate limiting
• Encryption
#book #AppSec
👍2🔥2
Google Cloud Platform (GCP) Professional Cloud Network Engineer Certification Companion, Dario Cabianca, Apress, 2023
You will waste no time when you use this study companion. It lets you dive in and learn how GCP differs from other public cloud providers (AWS and Microsoft Azure). You will understand GCP's unique ability to allow virtual private clouds (VPCs) that span across multiple regions. You will know how to leverage GCP as a competitive advantage in the IT engineering community. Key concepts covered on the exam are called out and applied in each chapter of this book, giving you both practice and reinforcement, a far more effective learning tool than rote learning or similar approaches typically enlisted in exam preparation.
What You Will Learn:
(+) Architect and design a virtual private cloud
(+) Implement a virtual private cloud
(+) Configure network services
(+) Implement hybrid connectivity
(+) Implement network security
(+) Manage network operations
(+) Optimize network resources
#book #SecDevOps
You will waste no time when you use this study companion. It lets you dive in and learn how GCP differs from other public cloud providers (AWS and Microsoft Azure). You will understand GCP's unique ability to allow virtual private clouds (VPCs) that span across multiple regions. You will know how to leverage GCP as a competitive advantage in the IT engineering community. Key concepts covered on the exam are called out and applied in each chapter of this book, giving you both practice and reinforcement, a far more effective learning tool than rote learning or similar approaches typically enlisted in exam preparation.
What You Will Learn:
(+) Architect and design a virtual private cloud
(+) Implement a virtual private cloud
(+) Configure network services
(+) Implement hybrid connectivity
(+) Implement network security
(+) Manage network operations
(+) Optimize network resources
#book #SecDevOps
👍5