You're starting a career in cybersecurity. What are the most important skills to learn in internet services?

To become a cybersecurity professional, you first need to gain a deep understanding of networking, basic building blocks, protocols, concepts and standards—a good understanding of what is good and bad traffic from an organisations perspective, and challenge the anything that is not the standard

It’s important to go in to the roots and learn basics before ending up in the mess. This is a chapter and every step means a lot.

Diving headfirst into cybersecurity might seem tempting, but a solid foundation in IT infrastructure is crucial for success. Just like building a house requires a strong base, understanding core IT systems – like networks, hardware, and operating systems – equips you to effectively secure them. This knowledge allows you to identify vulnerabilities, understand how data flows, and implement security measures that truly align with the infrastructure they're protecting. It's like learning the language of IT, enabling you to communicate effectively with other IT professionals and strategize comprehensive security solutions. Mastering the basics of IT infrastructure is your first step on the rewarding path to becoming a cybersecurity expert

While knowing networking basics is the first topic on my list of essential cybersecurity knowledge, in itself it is only helpful for network level security threat mitigation (for example mitigating DDoS attacks) - unless you want to pursue a specialized cybersecurity career in that limited area. For other types of security threats firewalling helps some, but can never be the sole line of defence. Network-level intrusion detection is hard work - but new AI-based tools may help some. Personally I prefer putting much more effort in securing services more directly, at the application level (read on in the other cybersecurity areas).

U can drive a car .but first you should be know what’s car!!!!for cyber security first step you need to learn network how to work.

While web development may not seem directly related to cybersecurity, understanding it is essential. Learn HTML, CSS, JavaScript, and server-side scripting like PHP or Python. Understand web frameworks and databases. This knowledge helps identify and mitigate web vulnerabilities like SQL injection and cross-site scripting, crucial for securing web applications, a common attack vector.

While it is true that understanding the platform and languages used is essential, it is pointless to try to provide an exhaustive list. In the area of web development, get a deep understanding of the HTTP protocol and the web security pricnples mentioned: encryption, authentication, authorization, and input validation (as a good start). This applies to communication from both web clients and mobile apps - and must be implemented on the server side. Focus on one server-side technology, for example NGINX (increasingly popular), Apache or the .NET environment, and learn how to adapt and monitor logs. Learn how to test for common attack vectors like SQL injection and faulty authorization checks. Learn about the HTTPS security procols.

Everything is migrating to the cloud and it brings a different set of responsibilities to keep your infrastructure secure. Migration, however, gives the opportunity to adopt best practices and integrate new tools such as IaC, central server management, and utilization of hardening tools and playbooks

Le cloud computing est en train de se généraliser, il faut avoir je pense une tres bonne connaissance des différents acteurs et de leur fonctionnement. C’est selon moi la prochaine cible des attaques et donc avoir une maitrise parfaite de la sécurité cloud est obligatoire.

Mastering cloud computing is vital in cybersecurity. Learn cloud service models (IaaS, PaaS, SaaS) and deployment models (public, private, hybrid). Understand major providers like AWS, Azure, and Google Cloud. Familiarize with cloud security principles, including identity and access management, data encryption, and secure configuration. Cloud security expertise is critical as more organizations migrate to cloud environments, necessitating robust protection measures.

Considero de utilidad: - conocimiento de Sistemas Operacionales. - entendimiento sobre ataques realizados con éxitos en otros lugares - registro en comunidades de ciberseguridad para mantenerse actualizado sobre lo que pasa en temas de vulnerabilidad - sistemas y soluciones de monitoreo e identificación de ataques/vulnerabilidades - estrategias de encriptacion - estrategias de manejo de llaves de cifrado/encriptacion

Learn scripting languages like Python, PowerShell, or Bash to automate tasks such as log analysis, vulnerability scanning, and incident response. Mastery in scripting enables efficient handling of security operations, enhances productivity, and allows for swift response to cyber threats, making it a cornerstone skill in the field.

Scripting and automation is certainly necessary, but there is hardly a list of "best scripting languages" to provide. Use any programming language that you know well for automating cybersecurity work (scheduled security scans etc). Strangely the initial topic list does not mention backups - ensure that backups are operating, and regularly test that they can be used for restoring data within a timeframe that has been agreed by the organization. Check that the backups are one-way (ransomware-safe).

The first two steps - reconnaissance and scanning are extremely important. Gaining knowledge and skills in Vulnerability identification and management are the key first steps for someone interested in Offensive security. Understanding the Common Vulnerabilities and Exposures (CVEs) and the Common Vulnerability Scoring Scheme (CVSS) scores and how the Vulnerabilities could be exploited out in the wild, will be critical first steps to cover off before venturing into the realm of creating authorized exploits.

Learn techniques to identify and exploit vulnerabilities ethically. Master tools like Metasploit, Nmap, and Burp Suite. Understanding hacker methodologies helps fortify defenses and anticipate cyber threats, making ethical hacking skills indispensable in safeguarding systems and data from malicious attacks.

Unless you understand how someone will try to overcome your defenses, you will focus your energy in the wrong areas and have blind spots without understanding ethical (and unethical) hacking

Ethical hacking is the practice of testing the security of systems and networks by simulating real-world attacks, with the permission of the owners. Ethical hacking can help you identify and fix vulnerabilities, improve your defensive skills, and learn from your adversaries. Ethical hacking skills include learning the phases of ethical hacking (reconnaissance, scanning, gaining access, maintaining access, covering tracks), the tools and techniques of ethical hacking (such as Nmap, Metasploit, Burp Suite, Wireshark), and the legal and ethical aspects of ethical hocking

The most important thing a cybersecurity professional needs to be informed about is the threat landscape. Throughout every step of their career, a cybersecurity professional should be aware of the threat landscape. Development of a critical and creative thinking are also expected from a cybersecurity professional. As the job of a security professional involves checking, detecting, validating, and mitigating threats, whether at a technical, decision-making, or strategic level, the cybersecurity professional also needs to be able to formulate hypotheses about vulnerabilities and compromises in each step of their job. My tip is even if you plan to be a cybersecurity professional, don't be aware of threat Landscape information.

Sensibiliser les personnes de façon générale est vitale. La plus grande partie des attaques visent les personnes directement et peuvent faire des ravages. Les personnes ne se rendant pas forcément compte du risque ont cependant la possibilités d’utiliser des méthodes simples pour se protéger ainsi que les données utilisées. Sans sensibilisation il est impossible d’avoir une défense efficace

Cybersecurity awareness means that we all have a role to play in the maintenance of a sefe environment. We (the people) are the main targets of social engineering attacks, such as spear-phishing and baiting. Knowing how to prevent these attacks, and how to engage other people in doing so, is one of the first steps into creating a cybersecurity awareness culture.

Many solutions are available in the market to enhance safety within your organization. Knowing how to develop safely is a key concept in cybersecurity, but not everything can be achieved through dev-sec-ops. There are different types of equipment that can be used to scan and prevent breaches. The market has the advantage of gathering the best minds and have them thinking on how to inprove our safety - don't be afraid of using them and don't try to build everything in your company from scratch!