CSTA / CSTP and MSc. Computer Security and Forensics

CraggyIslander

Have been getting a few PM's on the CSTA / CSTP courses and the associated MSc. so thought it a good idea to start a new thread instead and summarize my various replies :-)

Over the summer I did the CSTA and CSTP courses at Ashfield and they are easy enough if you know your IP networking (on both windows and linux).
Being comfortable with command line driven programs also helps a lot. With my 10 years experience I got scores of 90%+ on both CSTA and CSTP tests.

Once you've passed the CSTA (or other module) you can enroll with the bedfordshire uni for the masters or a welsh one for a post grad one. Uni costs are around £370 / module and you can start in any semester.

I've completed the CSTA+ module (with A+ result!) and enrolled for the CSTP for this semester. The uni assignments are theoretical (as to be expected) but do have some practical elements. The uni work is all self study, which suits me as I'm self employed and can make hours available to do the work.

Am looking forward to the next course, which will be the Certified Forensic Investigation Practitioner

It's an interesting course and a field that I'd expect to grow, especially the forensics side.

AARRRGH

Thanks for the post!

How realistic are the items taught in the CSTA/CSTP courses? I work for a multi-national and would like to start "hacking" our product. Would these courses give me the required knowledge to do this? Also, are the courses up to date?

Thanks

CraggyIslander

AARRRGH wrote: »

How realistic are the items taught in the CSTA/CSTP courses?

Realistic enough, plenty of hands on practices of attacking web servers, etc.

AARRRGH wrote: »

I work for a multi-national and would like to start "hacking" our product. Would these courses give me the required knowledge to do this?

Depends on your product, be very careful though that you have cleared any 'hacking' attempts with the company first. You wouldnt be the first sys-admin that got fired for running an unauthorised vulnerability scan on their own network and accidentally DoS'ing their own servers.

AARRRGH wrote: »

Also, are the courses up to date?

Pretty much, the CFIP course has been postponed two weeks as the content is being updated. They also include plenty recent examples of vulnerabilities and exploits.

tk123

How much were the courses?

Ger the man

I just got details of the CFIP from Ashfield. Its 1,275 over two full Saturday's, is it worth that. The brochure has the CISSP and SSCP logo's on it?

CraggyIslander

The 1275 is down from 1500 :-) No doubt due to the weak exchange rate of the £ as the courses are 7safe.org (so you could go over to UK and do them)

Not sure how useful the CFIP on it's own is, but should be strong in combination with the Certified Forensic Investigation Analyst (CFIA)

The brochure has the CISSP and SSCP logo's on it?

From the 7safe site:

International Information Systems Security Consortium, Inc (ISC)2 accepts 7Safe Information Security courses as credit toward meeting the Continuing Professional Education requirements to maintain the Certified Information Systems Security Professional (CISSP) and the System Security Certified Practitioner (SSCP) designations.

Ger the man

The chap I spoke to said the CFIP exam is "a doddle" - If it is that easy Im not convinced its worth much?

CraggyIslander

CFIP on it's own is probably not that useful, unless you're in law-enforcement, etc. Or if you're using it as part of the Postgrad or Masters programs.

If it is a "doddle" then in a few weeks I should have more credits towards my MSc... so for me it's worth it

AARRRGH

Hey CraggyIslander

How are you getting on with these courses?

Col_Loki

Would be very interested to hear more as well.

CraggyIslander

Finally did the CFIP course in march, which was quite interesting. Will be taking the exam end of next week and had better pass as I've already completed and passed the uni assignment .

Unfortunately the rumors that 7safe will no longer be using Ashfield to deliver the courses in Ireland are true. However there is another rumor which suggests a different college may start delivering them instead.

The best news is that I'm currently using my CSTA and CSTP qualifications to tender for some security assessment projects.

Col_Loki

Strongly thinking about doing this Msc Course, it looks very interesting. It was such a pity Ashfield Stopped doing the 7Safe courses, hope another training centre takes them back up pretty soon.

Thanks for the update & the info CraggyIslander.

ifah

All - extract from an email below I received from 7Safe CEO - Alan Philips.

Craggy - what type of tenders are you looking into ? e-tenders or private ones ? and how is it going in the security field in general ?

--starts--
Since 7Safe’s contract to provide training courses under licence in Ireland with Ashfield College ended in May 2009 (following a 3 month notice period), I’ve had the opportunity to talk to a number of former Ashfield students who are keen to progress further with the 7Safe education programme.

It’s become clear that while some students are able to continue training by switching to our Cambridge based facility, it is not a solution suited to all and to this end 7Safe is now in talks with a Dublin-based institution with a view to assisting with continuity for students within Ireland.

I will be in Dublin on 29th July (likely with a representative from the University of Bedfordshire) and would be happy to meet you and fellow students between 18:00 and 19:30 at Griffith College, Dublin, for a Q&A session. Please let me know if you’d like to take up this opportunity to meet and discuss the subject and I’ll forward more details to you.
--ends--

CrazySka

Question on this guys, dunno if you have the answer but maybe someone can point me in the right direction,

I have not got a degree but have CCNA, CWNA,CWSP and Net+ along with FETAC awards,

I had been looking into these courses but it looked like they were only available as augmentations to a degree,

Is there any option for doing this course without a degree?

AARRRGH

It seems Ashfield are now offering CSC:A instead...? Has anyone heard of this course?

I've noticed Independent Colleges are now offering the 7Safe courses: http://www.independentcolleges.ie/faculties_and_courses/arts/msc_computer.html

ifah

john_dub wrote: »

Question on this guys, dunno if you have the answer but maybe someone can point me in the right direction,

I have not got a degree but have CCNA, CWNA,CWSP and Net+ along with FETAC awards,

I had been looking into these courses but it looked like they were only available as augmentations to a degree,

Is there any option for doing this course without a degree?

John_dub - You can do all of the Technical courses without any necessity for a degree (same as any other technical training courses). I believe there are situations where the university will allow persons with suitable industry experience but not a primary degree to do the Masters - best to contact them : Anita Smith - Programme Administrator - Uni of Beds.
+44 1582 489 233
anita.smith <at> beds.ac.uk

aarrggh - that independent colleges ad is just a link to Ashfield - it's an old webpage.

tk123

I'm going to mail them and find out about distance learning - I'll report back. I was just finished my last set of certs when the thread was started and then decided it was time for a break. Been dossing for months so its time to hit the books again I think! I didn't realise at the time you could do the course over distance learning - the idea of getting into town after work/having to run out of class when I was on call is etc what put me off the idea of doing the course

Penrose

I am coming up to the end of my Msc, I have complete the full training course from 7safe, its not worth it, if I was to go back and do it again I would have done a proper Masters Course in another college. The content is way way too easy and thats the problem.

ifah

Penrose wrote: »

I am coming up to the end of my Msc, I have complete the full training course from 7safe, its not worth it, if I was to go back and do it again I would have done a proper Masters Course in another college. The content is way way too easy and thats the problem.

Penrose - I'm half way through mine and I would disagree with you. I have found that the content of the 7Safe courses have given me a great foundation in all of the technical aspects of Security/Forensics that you will never get from a taught masters. It has allowed me to do some pen testing and forensics work outside of my normal 9-5.

I've spoken with some people who have done the MSc in Comp Forensics in DCU and they are all in agreement that they would have preferred to do the 7Safe course rather than the DCU one due to the content etc.

tk123

ifah are you doing yours in Ashfield or thru distance learning?

ifah

Thru Ashfield (up until now) for the 7Safe Training side of things - these are hand on technical courses so you can't do that part by Distance education. You can do all the assignment work from Bedfordshirte Uni thru Distance edu.

It looks likely that there will be another college taking over the 7safe side of things shortly.

AARRRGH

Apparently 7Safe are in talks with another training centre to offer their courses in Ireland. There should be an announcement in a few weeks.

Col_Loki

It looks like Ashfield are onboard again doing the 7Safe Courses... http://7safe.wordpress.com/2009/09/29/the-irish-connection/#comments