SteveLavoie said: What would you be your goal to write one? To reach GSE?
quogue66 said: I wrote two research papers as part of the MSISE program. I had absolutely no idea what topics to choose. I met with Johannes and he gave me a long list of topics to choose from. In the end I didn't use any of them. I'm not sure if he shares the list with folks outside of the MSISE program.
quogue66 said: I would estimate that I spent around 150-200 hours per research paper. That includes the time spent building systems, conducting the experiments, researching tools, writing the papers, etc. There was a form I had to submit to get approval for my topic. I had to explain the problem that I was trying to solve, the impact it has on the security industry, and a high level overview of my research. As far as the research goes, I looked up a lot of tools online and then tested them out in my lab environment.
JDMurray said: The GSE certification itself is far more valuable than any papers you would write for the SANS Reading Room. If I had the time/money for the GSE, I'd take five SANS courses and get five GIAC certs prior to going for the GSE. My published writings will have more credibility after I have the GSE as a credential rather than before.