Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

cybersecurityventures.com

Post reply on HN
Print view View original

61–66 of 66 posts

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#61

Post by wglb »

tr4cefl0w wrote: post #26
lawl wrote: post #13

Well, one role in this might be that a lot of cybersecurity jobs are complete bullshit, and or their certifications are. I won a free certification course as an EC-Council Certified Security Analyst, and it's the biggest joke I've ever seen. It's such a massive fucking joke that I decided to not even renew my certification for free because it would just have been a waste of time. Most of these "cybersecurity" jobs ar…

> I won a free certification course as an EC-Council Certified Security Analyst, and it's the biggest joke I've ever seen. It's such a massive fucking joke that I decided to not even renew my certification for free because it would just have been a waste of time. I've been in the field for a couple of years. I work for a global corporation with 10k+ employees and most of our team members in the security department ar…

Care to explain why you think intrusion detection is bullshit?

See http://cs.unc.edu/~fabian/course_papers/PtacekNewsham98.pdf. IDS is considered a speed bump by sophisticated attackers. Which is where you want to focus your energy.

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#62

Post by wglb »

user5994461 wrote: post #50
lawl wrote: post #47

Earlier quoted context omitted.

> You can assign 100 students to develop a trojan for a week. At the end of the week, more than 90% of the software are detected as generic trojan by the antivirus. Probably because 90 of these 100 students have no idea how AV heuristics work and what the trivial tricks are to completely stomp them.

Some of them quickly realize that the AV is flagging all their binaries and they try to evade it. They will soon discover that it is far from trivial. Don't underestimate the students and don't underestimate the AV. The world is full of surprises.

I had an intern who came to the job with one he had written in his idle time. Nothing detected this, so I am thinking that it is not hard at all.

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#63

Post by user5994461 »

mc32 wrote: post #55
user5994461 wrote: post #51

Earlier quoted context omitted.

>>> One possibility that might develop out of the standoff is customers pushing the liability onto Cloud vendors and washing their hands of the concern. That would be good, the cloud is a lot more secure than everything self hosted or self developed.

Is that always true? If you're doing heavy R&D and you keep things on isolated networks, might not your R&D be at least similarly secure on-premises, if you follow secure practices? How much visibility do you have into your cloud provider's security? For email, sure go with a known cloud provider. Some SaaS services on the back-end can be less than ideally secure.

Security is easier in the cloud. It comes with good access management, audit trails, inventory of active resources and it enforces a lot of good practices.

All companies who don't have cloud tools have to re invent everything, it's hard and a lot of effort so the result is always terrible. Poor UI, poor security, full of bugs, pick any three.

AWS is better for isolated networks, it can manage strict network access rules way beyond anything iptables can achieve. In fact, cloud is the only way to have well isolated networks, unless we're talking about a computer unplugged from any network.

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#64

Post by gspetr »

user5994461 wrote: post #46
tptacek wrote: post #40

Earlier quoted context omitted.

Anomaly detection doesn't do much better than signature systems do. It finds real stuff, but it "finds" so much garbage that the signal is swamped by it.

I don't know about network detection systems but antivirus heuristics used to be terrific. You can assign 100 students to develop a trojan for a week. At the end of the week, more than 90% of the software are detected as generic trojan by the antivirus.

https://krebsonsecurity.com/2014/05/antivirus-is-dead-long-l...

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#65

Post by itronitron »

quotheth wrote: post #36
itronitron wrote: post #25

Earlier quoted context omitted.

I have NEVER heard a useful description by a cybersecurity analyst (i.e. detecting intrusions and exfiltration) on how they do their work, despite being in a position where they should have been able to do so. Usually I just get shrugged shoulders.

I can't tell what this post is implying - that sec analysts are like... a fake job? Can you please elaborate?

Apologies for being unclear, to elaborate ... IMHO cyber-security analysts could do much better in defining how they do their job in order to give people that are interested a path forward in developing the needed skills. To be clear, I'm not talking about the larger cyber-security profession that is mostly focused on setting and enforcing rules.

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#66

Post by yourapostasy »

user5994461 wrote: post #63
mc32 wrote: post #55

Earlier quoted context omitted.

Is that always true? If you're doing heavy R&D and you keep things on isolated networks, might not your R&D be at least similarly secure on-premises, if you follow secure practices? How much visibility do you have into your cloud provider's security? For email, sure go with a known cloud provider. Some SaaS services on the back-end can be less than ideally secure.

Security is easier in the cloud. It comes with good access management, audit trails, inventory of active resources and it enforces a lot of good practices. All companies who don't have cloud tools have to re invent everything, it's hard and a lot of effort so the result is always terrible. Poor UI, poor security, full of bugs, pick any three. AWS is better for isolated networks, it can manage strict network access ru…

There are many stories of AWS users setting their access rules improperly because they weren't given sufficient time or resources to understand how to use them, in some cases leaving S3 containers for example wide open. It isn't just the technology, it's the incentives, people and processes as well.
Post reply on HN