Entry criteria iIto Information Security

Suresh_Bhala

Hi

My name is Suresh and i have 4 years of experience of testing in the avionics domain and now i would like to change my interest towards security in the below practices

Application Security,
Information Security
Risk Management
Security Architecture and Design

but am not sure from where to start to enter into this field, i would be more happy:D if any one of you provide a solution so that i can concentrate and walk towards my interests

thanks in advance:)
-suresh

rogue2shadow

I'm not a big shot in anyway lol, but I'd start with the Security+. It goes along with the DoD directive and is offered as a lifetime cert if you get it before January 11th 2011.

lacto17

You can start with Security+ Certification.

If you want to get into Application Security ie., Vulnerability Assessment,Source Code Review, u need to prepare for VA Tools like IBM APPSCAN,FORTIFY,etc. There are a lot of Commercial Tools and Open Source Tools available for Application Security.