What should an information security advocate know?

Question

IT education

I am moving on to the 3rd year of a five-year study in the specialty - comprehensive information security of automated systems. Frankly, two years of study was limited only to good grades. I did not immediately get used to the fact that in a university education should be, first of all , independent , to the fact that you need to take the initiative yourself. I ask for advice: what knowledge should I have by the end of the training. Yes, I read the curriculum. Better to be more specific. Where is the best place to get training ? I don’t know where to look for work in order to understand everything faster in practice. What is the best thing to do for self -development ?

Answer 1

It is generally right to say that you must know "how to protect". Those. in the first approximation, it should represent what measures should be taken so that the AIS is not hacked from the outside, and from the inside.
For each AIS, these measures will be different, but general methods (such as storing confidential information in the same hands, encryption, etc.) should be the same everywhere.
Hacking any Wordpress is certainly good, but a little different. You must imagine how an attacker can gain access to confidential information and system functionality, you should not do it yourself. Of course, for training, to feel - it will do, but it takes too much time for this. You need to at least study the source code, imagine what and how, in short, be a full-fledged web programmer.
Those. like this, come to the company and say, guys, your system is full of holes, you won’t succeed. You will have to probe this system from the inside, or only by typing a black box to find out what works and what does not.
A little chaotic. But if in a word:
you must imagine what organizational measures to take to protect IP. Because, without taking them, with any little bit unknown vulnerability, you will still get into a mess.

Answer 2

It seems to me that for self-development, you need to read a little theory, and then go hack sites. You can have your own - put WordPress on your hosting, break it yourself, close the hole yourself, and so on.
Offer Popov's students to hack their site for free.