Download as PDF, PPTX
Uploaded bySanjeev Kumar Jaiswal
Cybersecurity Roadmap for Beginners
The document presents a cybersecurity roadmap for beginners, outlining essential topics such as cybersecurity definitions, key skill sets, job profiles, certifications, and resources for further learning. It targets college students and freshers interested in entering the cybersecurity field, emphasizing both technical and soft skills necessary for success. Various areas within cybersecurity are discussed, including application security, network security, cloud security, and DevSecOps, along with recommended books and online courses.
More Related Content
Similar to Cybersecurity Roadmap for Beginners
Cybersecurity Roadmap for Beginners
- 1. Sanjeev Jaiswal (jassi) Cybersecurity Roadmapfor Beginners This way please 1
- 2. • 12+ yearsof Experience • Application Security and • Cloud Security • Programming: Perl, Python • Areas of Interest: Learning and teaching concepts on DevSecOps, Cloud Security Automation Sanjeev Jaiswal (jassi) 2
- 3. flexmind.co What we willcover • For whom this session is (awareness session) • What is Cybersecurity • Common Skill Sets • What covers under cybersecurity umbrella • Job pro fi le categories • Certi fi cations • Books • Online Courses • What’s Next 3
- 4. flexmind.co Key Audience • CollegeStudents • Freshers (0-2 years) • Want to switch into Cybersecurity • Interested in Cybersecurity • Curious what’s there in Cybersecurity 4
- 5. What is Cybersecurity Computersecurity, cybersecurity, or information technology security is the protection of computer systems and networks from information disclosure, theft of or damage to their hardware, software, or electronic data, as well as from the disruption or misdirection of the services they provide. - Wikipedia In short, Cybersecurity is the practice of protecting(defensive) critical systems and sensitive information from digital attacks (o ff ensive). 5
- 6.
- 7.
- 8. • Attitude todeep dive • Never give up • Understanding of various security concepts • Attention to detail • Adaptive in nature Hacker Mindset 8
- 9. • Email • CommunicationSkills • Negotiation skills • Public speaking • Fill with the knowledge not ego Soft Skills 9
- 10. • Linux OSBasics • File structure and common places like /usr/bin /tmp /opt • Linux Commands • Basic admin commands Linux Basics 10
- 11. • TCP/IP stack •IPv4 and IPv6 • IP ranges • Common ports • SSL/TLS • LAN/WAN • Wireless networks • How browser serves when you type fl exmind.co Computer Network Basics 11
- 12. • Any scriptinglanguage understandings • Comfortable with command line • Understand, debug and run • Python or Go will give you wings to fl y • Understanding JavaScript is important for Pentest Programming Basics 12
- 13. • Save allyour work at one place • Easy to collaborate with others • Keep track of your code, docs… • Backup and lot more • github, gitlab, bitbucket Version Control (git) 13
- 14.
- 15. Web Security/ PenetrationTesting 15 • Understand how di ff erent web services work • Understand request and response (security) headers • Understand authentication and authorization • Cookies, tokens, HSTS, httpOnly • SOP , CORS, CSP • OWASP Top 10 (Testing Guide, Code review guide) • Understand various available encoding i.e. base64 • Comfortable with Burpsuite/OWASP Zap
- 16. Application Security 16 • ThreatModeling • Secure Code design and principles • Secure Code Review • Secure-SDL • Help developers through secure code training • SAST/DAST • API security • git is your friend
- 17. Network Security 17 • Securenetwork architecture • Firewalls • Encryption solutions • Networking commands • Good with nmap and wireshark tools • Know IDS/IPS • DDos prevention • Aware of CDN implementations
- 18. Cloud Security 18 • CloudComputing fundamentals • Security con fi guration • Cloud Networking • Serverless Architecture • Secure API management • Data Security • Encryption at rest, in transit • Logging and Monitoring
- 19. DevSecOps 19 • Think everythingas a Code (Ansible, Terraform) • You understand DevOps culture • People, Process and Technology • Embrace Security Automation • Comfortable with VCS i.e. git • Understand CI/CD well • Well-versed with CI tools i.e. cirlceCI, Travis, Gitlab CI • Know programming (Python, Ruby, Go)
- 20. • AI/ML Security •Hardware Security • System Security • IoT Security • Compliance, Risk and Audit • Data Privacy Many more 20
- 21. flexmind.co Job Profile Categories •Penetration Testers • Bug Bounty Hunters • Information Security Analyst • Application Security Engineer • Cloud Security Engineer • DevSecOps • Data Privacy O ffi cer (DPO) • Risk Analyst • Malware Analyst • Security Program Manager • What not? 21
- 22.
- 23. flexmind.co Books ✴ The CyberE ff ect ✴ Schneier on Security ✴ Cybersecurity for Dummies ✴ Secure By Design ✴ Security Engineering ✴ Thinking Security ✴ The art of invisibility by Kevin Mitnick ✴ Ghost in the wires by Kevin Mitnick 23
- 24.
- 25. flexmind.co Certifications 25 • CompTIA • EC-council •ISC2 • CSA • ISACA • SANS • O ff ensive Security • Cisco/Checkpoint/Juniper • Practical-DevSecOps • Elearn Security
- 26.
- 27. flexmind.co Online Courses • Coursera •Udacity • EdX • Acloud.guru • Cybrary • OpensecurityTraining • Securitytube • YouTube • Flexmind 27
- 28. flexmind.co Networking is thekey • Null chapter • OWASP Chapter • Bsides Chapter • join mailing list i.e. null google group • Attend International events i.e. Defcon, Blackhat, Nullcon, OWASP Seasides • jobs.null.co.in for job search • Meet like minded people i.e. local meetup • Linkedin contacts, groups • Follow people in twitter • Bookmark few security websites 28
- 29.
- 30.
- 31. flexmind.co 31 For furtherqueries, please feel free to contact us at learning@flexmind.co