By Sandy Ng
Diploma in Network Defense and Forensic Countermeasures
Bachelor of Science (CyberSecurity)
As a Security Operations Center (SOC) Analyst in a financial institution, I monitor networks and analyse alerts to determine a threat in the environment. Before my current role, I was in the building materials industry for 17 years.
For someone new to the cybersecurity industry, a specialised diploma would equip me with the relevant cybersecurity skills and knowledge. I enrolled in the Cybersecurity Diploma in 2019 and currently pursuing my degree with Edith Cowan University. Most of the technical modules in my course of study were applicable to my daily job.
1. Programming Language
The bash script is the first programming language I learned in my Cyber Security Diploma, which provided a good foundation for learning other programming languages. I learned Python and PowerShell on my own after that, and it was easy once you grasp the logic.
My daily job involves analysing activities in the Network, and sometimes it includes looking at scripts to determine if they are malicious. The various programming languages I learned in my course were beneficial.
2. Reverse Engineering
Reverse engineering is applied initially to hardware products; it is now a common sight in software, databases, and even human DNA. In cybersecurity, reverse engineering can be used to identify details of a breach, such as how the attacker entered the system and the steps taken to breach the system.
In my company, we receive and send out multiple files, and these files must be secured. If the signature of a file is not known, reverse engineering is the most efficient way to find out if it is malicious. It effectively detects zero-day malware, not to mention the ability to find all Indicators of Compromise (IoCs) to do preventive measures.
3. Computer Forensics
Computer forensics, though relevant, is less used in my daily work but knowing helps to make critical decisions on response actions when an attack occurs. For example, if the information required can only be found in RAM, we need to ensure users do not shut down their computer and make necessary arrangements to retrieve it.
Understanding what can be recovered makes a difference between closing an investigation timely and wasting time retrieving something that is not physically there.
For me, the cybersecurity diploma is an inexpensive way to get up to 4 EC-Council Certifications together with a diploma. If you are looking to pick up cybersecurity skills, I will definitely recommend PSB Academy.