Web programming good for security?

[XDroidie626]

Okay so as my career I would like to work in security, and I am looking at languages that can support me, I was thinking maybe web languages, but it seems that the topic of security can be a hard one to research, so what would you recommend?

 

Thanks!

[Guest]

HTML first, which will mean you also learn some Javascript and CSS.

 

Then move on to C++/ C

[Judahnator]

I would dabble in PHP a bit.

 

Create your own site login system. That will give you a good background

[ItsFTP]

LMAO at those others.

1# Search up a book/videos that can teach you how to create your first site

2# do research into how bootstraps work and research how to create or modify your own

3# learn in depth php, sql querys and ruby

4# learn a bit of java or c# to start you coding properly

5# once learn't java or c#, go on to learn c++

[jubjub]

Where exactly in security do you want to work?

Don't learn HTML, don't learn C++ unless you want to exploit open source C++ programs, learn to script in Python or something like it and research security constantly.

Also, learn some computer science and the mindset of programming and patterns.

The way I got into it is by researching different attacks and reading research documents, as well as writing my own algorithms in C# and some sql.

 

Users -> Administrators -> Developers -> Hackers

 

Get yourself through the chain, use something, administrate and manage, develop then hack.

 

Oh and also watch black hat and defcon talks, it helps you get an idea what on earth your doing

[SIGSEGV]

Watch DefCon if you wanna learn about security

[loganryan99]

Start with PHP. Learn about the basics like MySQL Injection, XSS, encryption, etc. and move on from there.

[Guest]

If I understand right, the question is about how to get into computer/internet security.

 

Assuming that you don't want to just be some rube that pushes the buttons to run vulnerability scans, you will need to go to college and get a degree in CS. Security is an advanced field and you need to have a solid understanding of computer science, math, and problem solving skills before you can even get into it. There are of course classes that you can take in college that will prepare you for such a career. Plus, it's hard to get a job these days without a piece of paper.

 

You don't say how old you are; assuming that you're high school age or younger, start hardcore studying math now, especially discrete math, number theory, formal logic type of stuff. Learn how to program obviously; your goal there should be to get a solid understanding of C and probably some functional language in the Lisp family. Once you've learned one language, picking up crap like Javascript or PHP is cake. C because it is a low level language that a lot of things are written in (yes, even web stuff), a functional language because it will improve how to think about programs and algorithms and make you look cool.

[XDroidie626]

If I understand right, the question is about how to get into computer/internet security.

 

Assuming that you don't want to just be some rube that pushes the buttons to run vulnerability scans, you will need to go to college and get a degree in CS. Security is an advanced field and you need to have a solid understanding of computer science, math, and problem solving skills before you can even get into it. There are of course classes that you can take in college that will prepare you for such a career. Plus, it's hard to get a job these days without a piece of paper.

 

You don't say how old you are; assuming that you're high school age or younger, start hardcore studying math now, especially discrete math, number theory, formal logic type of stuff. Learn how to program obviously; your goal there should be to get a solid understanding of C and probably some functional language in the Lisp family. Once you've learned one language, picking up crap like Javascript or PHP is cake. C because it is a low level language that a lot of things are written in (yes, even web stuff), a functional language because it will improve how to think about programs and algorithms and make you look cool.

I have just started a degree in CS, my maths would need a lot of improvement though lol.

Anyways I would ideally like to either deal with digital forensics or incident response, more of the aftermath and finding out things, I enjoy finding things out more than actually knowing first hand.

So which languages would your recommend 

[Guest]

I have just started a degree in CS, my maths would need a lot of improvement though lol.

Anyways I would ideally like to either deal with digital forensics or incident response, more of the aftermath and finding out things, I enjoy finding things out more than actually knowing first hand.

So which languages would your recommend 

 

Doesn't really matter, once you've learned one you can learn em all. Like I said I would at least cover C since it is ripe for insecurity.

[madknight3]

Well now it seems like you're changing the question. First you sounded like you wanted to learn about application security, starting specifically with web application security, and now you say you're interested in computer forensics. Not sure how much of one you'll need to learn for the other. I'm sure there's some overlap but I don't imagine you need to be a security expert. Here's some information on qualifications/job requirements for a computer forensics expert.

 

If you've just start a CS degree, then just learn whatever language they are teaching you.

[XDroidie626]

I apologise for how I wrote it, I wish to learn programming languages to help me in advance.

So the areas I wish to go into is either Incident Handler or Forensics with the police, I find both very interesting.

So I would ideally like programming languages that can help me with either subject 

 

Thanks!

[Guest]

I apologise for how I wrote it, I wish to learn programming languages to help me in advance.

So the areas I wish to go into is either Incident Handler or Forensics with the police, I find both very interesting.

So I would ideally like programming languages that can help me with either subject 

 

Thanks!

 

Based on the job description for the comp hack forensic investigator, maybe bash scripting. It doesn't really seem like knowing a specific language for either job is necessary or even useful.

 

I still think C would be generally useful to at least understand.