TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Ask HN: How can I learn computer security?

181 pointsby boniface316over 7 years ago
I am taking some data science courses. Is there any link between data science and cyber security? and where can I learn cyber security stuff?

30 comments

artie_effimover 7 years ago
Cyber pro here - 5 years doing IV&amp;V testing, 15 years as Fed, State and Local contractor, now a firewall admin at a major U.S. uni. I got an NSA accredited (<a href="https:&#x2F;&#x2F;www.nsa.gov&#x2F;resources&#x2F;educators&#x2F;centers-academic-excellence&#x2F;cyber-defense&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.nsa.gov&#x2F;resources&#x2F;educators&#x2F;centers-academic-exc...</a>) Master&#x27;s in IT with a specialization in security. While the degree got my foot in the door (I have a BA in Arts - but have been messing around with computers since the early 80&#x27;s - plus a lot of self taught stuff) - I&#x27;ve found that a ton of side reading (anything related to the subject - I spent a lot of time on the RFCs - that stuff I use every day)), looking at PCAPs to understand the protocols and reading case studies are the best way to hone the craft.<p>For a while I was doing Governance, Risk and Compliance (GRC) work, but have always loved being a network security engineer, so I went back to that.<p>Also - I have a CISSP, which opens a lot of doors. I know that it is being knocked a bit nowadays, and there are certainly a some who are test knowledgeable but no hands-on, common sense experience. I still find it valuable enough to maintain.<p>Set up a lab - 2-4 computers and a switch should do (you could virtualize some&#x2F;all of it) and work on all aspects of the TCP&#x2F;IP stack if you&#x27;re interested in netsec.<p>If appsec is your thing, spend a lot of time looking at good and bad code, plus reading on-line of good and bad appsec.<p>IF GRC is up your alley - read NIST 800-53, HIPPA, PCI-DSS, SANS Top 20 and GDPR - to understand the full breadth of controls and risk mitigation.<p>As far as data science python and pandas are all over the industry, R not so much. There is a big push for ML&#x2F;AI work, but it might be snake-oil, time will tell. I use a lot of python and pandas for log and flow analysis.<p>Also - learn Linux CLI; grep, sed and awk can save your butt in most situations. Gray beard stuff will come later.<p>Good luck!<p>&lt;edit - word choice&gt;
评论 #15986996 未加载
评论 #15987552 未加载
评论 #15988043 未加载
评论 #15988096 未加载
santiagobasultoover 7 years ago
Let me tell you one thing, it&#x27;s going to be tough. Cyber security is one of the fields of IT that requires the most deep knowledge of how computers and networks work. So, be aware of that. It&#x27;s like, when someone is asking how to build a game, and the first answer is: learn a lot about Math and Physics. This is the same thing.<p>Recommended path:<p>1. CS Basics (concepts) Conceptually understand how computers work, how interpreters work, compilers etc. You&#x27;re probably past this point.<p>2.Low level programming Basically C, but pay attention to the OS APIs (posix, win32). Make sure you understand the fundamentals of memory management, procedures, threading, etc. You need a lot of C knowledge.<p>3. Networking [0] You basically need to know by heart all the TCP protocol. I have a friend who&#x27;s incredibly successful working in security and he knows each bit in each packet in a TCP connection. He can just recite it. Once you know about networks, start throwing code at them. See if you can push the wrong bits to a switch, or if you can access some other processes network stack, etc.<p>4. Web standards Basically, how the web works. Once you&#x27;re past that: Apache and Nginx. You have to know them in depth.<p>5. Known threats and vunerabilities In this process you&#x27;ll know that there are many exploited issues that have been resolved. But you should study from them. For example, Heartbleed. Would you have the knowledge to find Heartbleed? You should also practice with every other security threat known like XSS, SQL Injection, etc.<p>[0] depending the security field, you might not need so advanced networking knowledge, this is just a general recommendation.<p>This is just my recommendation, I&#x27;m more of a purist, and I have a lot of respect for cybersecurity people.<p>Source: +10 years programming, I have a good friend making A LOT of money as a private security contractor and we speak about this all the time.
评论 #15993688 未加载
评论 #15988074 未加载
altharazover 7 years ago
&quot;Is there any link between data science and cyber security?&quot;<p>Data Science might be useful if you want to work in Security Information Management or in malware analysis: big companies try to identify &quot;weird behavior&quot; in their networks, based on &quot;normal behavior&quot; records.<p>&quot;Where can I learn cyber security stuff?&quot;<p>Well, that depends on the stuff you are interested in...<p>You should focus at first on learning &quot;system administration&quot; and at least a programming language like Python or Ruby. Network protocols would also be a bonus.<p>Then, if you want to learn &quot;offensive techniques&quot; or &quot;penetration testing&quot;, I suggest that you try websites like RootMe <a href="https:&#x2F;&#x2F;www.root-me.org&#x2F;?lang=en" rel="nofollow">https:&#x2F;&#x2F;www.root-me.org&#x2F;?lang=en</a> or Cryptopals cryptopals.com.<p>Once you&#x27;ll have resolved by yourself some of these challenges, you&#x27;ll be able to try the &quot;industrialized approach&quot; of penetration testing. For this, this book is quite cool: <a href="https:&#x2F;&#x2F;www.nostarch.com&#x2F;pentesting" rel="nofollow">https:&#x2F;&#x2F;www.nostarch.com&#x2F;pentesting</a>.<p>If you&#x27;re more interested in &quot;defensive techniques&quot;, you have tons of resources online.<p>For instance:<p>Secure Coding Best Practices: - <a href="https:&#x2F;&#x2F;www.owasp.org&#x2F;index.php&#x2F;OWASP_Secure_Coding_Practices_-_Quick_Reference_Guide" rel="nofollow">https:&#x2F;&#x2F;www.owasp.org&#x2F;index.php&#x2F;OWASP_Secure_Coding_Practice...</a> - <a href="https:&#x2F;&#x2F;security.berkeley.edu&#x2F;secure-coding-practice-guidelines" rel="nofollow">https:&#x2F;&#x2F;security.berkeley.edu&#x2F;secure-coding-practice-guideli...</a><p>=&gt; These documents will help you to understand what are the main risks in your apps<p>For &quot;general&quot; cybersecurity: - ISO27001 standard - The NIST Cybersecurity Framework <a href="https:&#x2F;&#x2F;www.nist.gov&#x2F;cybersecurity-framework" rel="nofollow">https:&#x2F;&#x2F;www.nist.gov&#x2F;cybersecurity-framework</a> - PCI&#x2F;DSS - <a href="https:&#x2F;&#x2F;www.us-cert.gov&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.us-cert.gov&#x2F;</a><p>=&gt; These documents will help you to understand what are the main risks in an organization based on their assets.
indigochillover 7 years ago
Security fundamentally is just &quot;the art and science of how things work&quot;. Breaches in security are caused by malicious actors finding vulnerabilities in trusted systems, such as when Chinese webcams shipped with default credentials which made it trivial for the Mirai botnet to take them over and acquire so many devices that it could DDoS Dyn.<p>Towards that end, just about anything you learn can be applied in some way towards security. The conventional recommendations others have made will get your foot in the door, but ultimately security is a lifestyle of never-ending learning and imaginative reasoning about systems.<p>So to directly answer your questions, yes, there are links between data science and security (others have mentioned its use in things like malware research, but going the other way it&#x27;s also important to store your data securely to prevent theft, destruction, or tampering) and you can learn something about information security pretty much anywhere in-depth information about computers is taught. Which information is relevant to your interests will just depend on which aspect of security is of interest to you.
评论 #16057201 未加载
emiliobumacharover 7 years ago
I highly recommend the online Cybersecurity Specialization of the University of Maryland on Coursera.<p>(disclaimer: I didn&#x27;t pass the Capstone project, and never got around to trying it again)<p>Back then it was free if you didn&#x27;t need a certificate, may still be.<p><a href="https:&#x2F;&#x2F;www.coursera.org&#x2F;specializations&#x2F;cyber-security" rel="nofollow">https:&#x2F;&#x2F;www.coursera.org&#x2F;specializations&#x2F;cyber-security</a>
aknoobover 7 years ago
The very first thing that you need to do is to pick a software stack, ideally opensource and then learn how that software-stack works bottom up. Learning how a linux application works might be a good starting point if you are totally new.<p>There are multiple layers involved here and really understanding each one would take time.<p>Next would come understanding browsers, browser although it is an app, it is a world in itself. How an http request flows through a browser, how an http response is rendered, what are various layers involved. TCP&#x2F;IP stack to physical layer, wifi&#x2F;usb. It is extremely vast and very interesting.<p>And once you have gained enough experience , you will be able to clearly see the similarities and differences between various software stacks, both bottom-up and top-down, right from hardware level to your application&#x27;s code and vice versa. And then reasoning about security of the stack at various layers would become straightforward.<p>In terms of conferences, I find Blackhat(<a href="http:&#x2F;&#x2F;www.blackhat.com&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.blackhat.com&#x2F;</a>) Conference is a very good source of keeping oneself up to date with world of security( including applying Data Science to Security)
stoneridgeover 7 years ago
<a href="http:&#x2F;&#x2F;mooc.fi&#x2F;courses&#x2F;2017&#x2F;cybersecurity" rel="nofollow">http:&#x2F;&#x2F;mooc.fi&#x2F;courses&#x2F;2017&#x2F;cybersecurity</a><p>&quot;Cyber Security Base with F-Secure is a course series by University of Helsinki in collaboration with F‑Secure Cyber Security Academy that focuses on building core knowledge and abilities related to the work of a cyber security professional. The course series is free and open for anyone to attend.&quot;
vogover 7 years ago
If you want to get a really deep understanding, study computer science (e.g. bachelor&#x2F;master) [1], then specialize by taking all security courses that are offered. Not only will you get a deep understanding of the topic, you will build on solid fundamentals, as well as have people (professors, assistants, trainers) who you can ask anything.<p>[1] Of course, you can this only freely in a country that remotely cares about the education of its citizens (e.g. most European countries, where you can go to university for a hew hundred Euros per year). Otherwise, the risk of a huge debt is probably not worth it.
评论 #15987705 未加载
kalimatasover 7 years ago
<a href="https:&#x2F;&#x2F;www.hacksplaining.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.hacksplaining.com&#x2F;</a>
评论 #15987117 未加载
hackermailmanover 7 years ago
This is a good course<p><a href="https:&#x2F;&#x2F;www.cs.cmu.edu&#x2F;~213&#x2F;schedule.html" rel="nofollow">https:&#x2F;&#x2F;www.cs.cmu.edu&#x2F;~213&#x2F;schedule.html</a><p>Buy the 3rd version book (used) and then try the labs as you go through the lecture vids&#x2F;chapters <a href="http:&#x2F;&#x2F;csapp.cs.cmu.edu&#x2F;3e&#x2F;labs.html" rel="nofollow">http:&#x2F;&#x2F;csapp.cs.cmu.edu&#x2F;3e&#x2F;labs.html</a> but avoid the &#x27;global edition&#x27; as it&#x27;s filled with errata, or just know there is mistakes.<p>You will learn assembly&#x2F;C and also Return Oriented Programming, stack protections and how they work, buffer overflow attacks, implicit casting grenades, cache optimization, how the linker works, ect. Then you sign up for that old Matasano CTF <a href="https:&#x2F;&#x2F;microcorruption.com&#x2F;login" rel="nofollow">https:&#x2F;&#x2F;microcorruption.com&#x2F;login</a><p>When you complete it apply to NCC Group who I believe now owns microcorruption. Start at the bottom, work your way into a policy&#x2F;advisory role somewhere else after gaining experience and applying for certs <a href="https:&#x2F;&#x2F;ciso.eccouncil.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;ciso.eccouncil.org&#x2F;</a> Having data science experience is likely helpful since you can produce shiny presentations that board rooms like to see when you become their CISO
trapspringover 7 years ago
If you are a veteran or a federal employee, the Dept. of homeland security offers free online courses in network security. The program is very networking specific and you&#x27;d have to pay for any certification testing yourself, but the courses will help take you a good chunk of the way in terms of prep and learning. <a href="https:&#x2F;&#x2F;fedvte.usalearning.gov&#x2F;" rel="nofollow">https:&#x2F;&#x2F;fedvte.usalearning.gov&#x2F;</a>
cschmidtover 7 years ago
Since no one has mentioned it yet, Capture the Flag contests (CTF&#x27;s) can be a good way to get into security. They are online contests featuring a series of security related puzzles.<p>They are hosted by lots of different groups at different levels. There are CTF&#x27;s aimed from high school through the DEFCON CTF. This is a directory: <a href="https:&#x2F;&#x2F;ctftime.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;ctftime.org&#x2F;</a>
uraharaover 7 years ago
I&#x27;m using Cybrary, it is a free and open source for learning cyber security: <a href="https:&#x2F;&#x2F;www.cybrary.it&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.cybrary.it&#x2F;</a>
twoquestionsover 7 years ago
One question I have along with the very good question from the OP, do larger companies and governments actually <i>care</i> about security, or are they more interested in doing the proper dance and checking the right boxes to not be held responsible when they&#x27;re hacked?<p>It seems irrational to want to learn how to secure systems when their owners don&#x27;t care about it (and won&#x27;t pay to secure them) if the risk can be transferred to other parties. I&#x27;m sure there&#x27;s a few organizations that care if their data are stolen, but by and large it&#x27;s a cost center, and treated accordingly in my experience.
评论 #15988235 未加载
评论 #15988233 未加载
brudgersover 7 years ago
Probably the most serious route to serious cyber-security training is via a military rating. At the state level the stakes and threats are highest.
lrvickover 7 years ago
Get involved in an active community full of security professionals and learn hands-on helping to secure open source projects.<p>There is no replacement for mentorship and getting your hands dirty with real world systems.<p>I will now shamelessly plug the community I learned the most from: <a href="https:&#x2F;&#x2F;hashbang.sh" rel="nofollow">https:&#x2F;&#x2F;hashbang.sh</a>
ajr0over 7 years ago
yes.<p>Data Science can be applied in many different ways, (somewhat) Recently LightCyber was acquired by PANW [0] and I believe that if you are in data science that may be something that tickles your itch.<p>if I may give advice, asking a more specific question to a search engine may also get you ona path with additional information. &#x27;cyber security&#x27; is a pretty large umbrella and much of it may bore you while only a small handful is interesting... so try to be more specific rather than say &#x27;stuff&#x27;<p>[0] <a href="https:&#x2F;&#x2F;www.paloaltonetworks.com&#x2F;products&#x2F;secure-the-network&#x2F;lightcyber-behavioral-analytics.html" rel="nofollow">https:&#x2F;&#x2F;www.paloaltonetworks.com&#x2F;products&#x2F;secure-the-network...</a>
perlgeekover 7 years ago
What do you want to learn? Network security? Application security? Secrets management? Security operations?<p>I&#x27;m sure there are fields where data science is useful, like anomaly detection, malware classification etc.
sectossaccountover 7 years ago
Just created this account so that I could comment, and stay (reasonably) anonymous. I&#x27;m the CTO of a reasonably well known security company, for what it&#x27;s worth - and I&#x27;ve been doing this for a little over two decades in a few countries.<p>This first misnomer, is that there&#x27;s one security thing. There are several. The offensive security folks (penetration testers) are far different than the advisory folks (think PCI, HIPAA). Vulnerability scanning, SOC (Security Operations Centers), secure development, and more - it&#x27;s a wide field. The first thing to ask yourself is &quot;what does security mean to me, and what do I want to do with it&quot;.<p>Give the first part of your question, I&#x27;ll assume you&#x27;re interested in software-based security (development) as opposed to infrastructure (network security, physical security, systems security), or the offensive side.<p>On the other hand, if you just want to &#x27;get into security&#x27; - then learn a little bit about networking, and go find a job as a &#x27;Network Operations Engineer&#x27; or &#x27;Security Operations Specialist&#x27;. These are fairly low-level jobs in the security industry, that can serve as entry points, and help you learn about the other parts of the industry in depth, whilst getting paid.<p>Echoing what @santigobalsuto and others have mentioned.<p>1. CS - Understand how software works, not just how to code, but how things happen on machines. What are CPU registers? Write some assembly - nearly every single week my staff uses assembly to test an exploit. It&#x27;s one hell of a lot easier to make a good developer a decent security professional than the other way around - just trust me on this.<p>2. Take philosophy and propositional logic courses - Good security folks are terrific critical thinkers. They learn to understand what risk means, and how to contextualize it for an organization. In other words the approach to risk and tolerance is completely different for Home Depot than it is for Evernote.<p>3. Learn Software Testing (not Quality Assurance). Combining this with critical thinking means you can start to pick apart software, even networks, from varying vantage points. If you combine this with your CS knowledge, it can really help you understand how to attack an application, or an organization.<p>4. Build lab out of cheap, garbage hardware. For about $300-500 you can get 4 servers on Kijiji that can be used to run OpenStack and VMWare. Get a physical switch, ideally something with a TAP port (but you can replice with VMWare easily enough). Create VMs, play with things like Security Onion, create and destroy networks - use traffic generators... have a great time.<p>5. Read about standards - it helps to understand what NIST is for, what CVEs are, CWEs, OVAL. Explore a few vulnerabilities (CVEs), and understand what they are, why they matter, how they apply. Then grab a copy of Nexpose Community Edition, and scan your lab - play around.<p>6. Rebuild your lab, iterating on what you&#x27;ve learned above.
评论 #15988111 未加载
weppleover 7 years ago
OP: you’ll find you got a lot of very vague, broad, range of answers. I think it might help if you try to find a subset of security that you’re interested in or would like to tackle.<p>It’s very hard these days to be a complete and effective generalist in security, let alone be good at a range of security stuff while also being great at data science.<p>I’d consider focusing on appsec for a year, get a job attacking or defending apps for a year, and then you’ll have a basic understanding of the problem space.
lvhover 7 years ago
That’s a short question with a complicated answer. I’m traveling right now, but you should shoot me an email and I’ll help you get started. Address in HN profile.
video-hostover 7 years ago
Check out <a href="https:&#x2F;&#x2F;pentesterlab.com&#x2F;bootcamp&#x2F;" rel="nofollow">https:&#x2F;&#x2F;pentesterlab.com&#x2F;bootcamp&#x2F;</a>
redsecover 7 years ago
In addition to great ressources people are sharing, Security+ and CSA+ from CompTIA can be great certification (vendor neutral and inexpensive).
grajaganDevover 7 years ago
If you are interested in web pentesting, learn to hack Webgoat and DVWA. From there go after live sites via a bug bounty platform (I like Bugcrowd.)<p>It is hard to overstate the value of the chance to test (and demonstrate) your skills against a live production site.
Fundlabover 7 years ago
<a href="https:&#x2F;&#x2F;www.edx.org&#x2F;micromasters&#x2F;ritx-cybersecurity" rel="nofollow">https:&#x2F;&#x2F;www.edx.org&#x2F;micromasters&#x2F;ritx-cybersecurity</a>
godelmachineover 7 years ago
Would anyone please revert a name of a book that may probably help here?
_spoonmanover 7 years ago
Is the OSCP certification worth it?
评论 #15988175 未加载
vectorEQover 7 years ago
low level programming &#x2F; radio. try not to cry ;)
CodesInChaosover 7 years ago
Start by forgetting the word <i>cyber</i>.
评论 #15987049 未加载
digitalzombieover 7 years ago
&gt; Is there any link between data science and cyber security?<p>There&#x27;s... a company around LA area that does cyber and data science. I would think they apply data science to logs and such to figure out abnormality. Likewise if you count email spam detection as a cyber security thing.<p>For cyber security, take Network+ or just grab a Network+ book. I believe that&#x27;s where you should start first in cyber security.