Re: Advice for someone interested in a security career?

["Dana Epp" <dana () vulscan com>]

Hey Chris,

Have you considered transferring to the University of Cambridge and study
under Ross Anderson? He leads the Computer Security Group
(http://www.cl.cam.ac.uk/Research/Security/) and is an excellent place to
cut your teeth on some really interesting security research.

Ross wrote an excellent book called "Security Engineering" that has been
very popular and is an interesting read. (hey, how many books can go into
detail about security and nuclear command and control centers!!)  I am told
the Security Group has a lot to offer by way of experience that can be
gained, but I must confess I haven't been part of it and do not really know
for sure if this is rumour or fact.

If I had to go back and start over, I would have loved to try this avenue.
Getting to be part of some of those projects would have been enlightening,
and to work and learn from respectable professionals like Ross could only
have helped as I started out.

Whatever you do, good luck!

---
Regards,
Dana M. Epp

----- Original Message ----- 
From: "Chris Rodgerson" <Chris.Rodgerson () oracle com>
To: <security-basics () securityfocus com>
Sent: Friday, September 26, 2003 5:20 AM
Subject: Advice for someone interested in a security career?


> Hi all,
>
> I'm a student nearing the end of my degree course in Computer Science
> (currently on sandwich placement year, hence the @oracle.com email
address),
> and I have decided that computer, and network security in particular, is
the
> career I wish to pursue. I have a few options:
>
> 1) Finish my MEng Computer Science, and try to get a job (without any
> security-specific qualifications, save for a couple of courses completed
as
> part of my degree)  (2 Years more study)
> 2) Finish my degree a year early, qualifying with a BSc Computer Science,
> and then apply for Masters degree in a more specialised Security-related
> topic. (3 years)
> 3) Finish my MEng and then do a PhD in a more specialised Security-related
> topic.(4-5 years)
>
> In your opinions, which would be the better option in furthering my career
> in Security? Would more on-the-job experience be preferable to employers,
or
> would they rather have someone with more (relevant) qualifications? I'm
not
> sure if I would have the patience to complete a PhD, but then again you
may
> think it's worth it.
>
> As a sidenote, I am based in Europe (specifically Ireland), which may or
may
> not influence your answers.
>
> Thanks in advance,
> Chris
>
>
> --------------------------------------------------------------------------
-
> --------------------------------------------------------------------------
--
>


---------------------------------------------------------------------------
----------------------------------------------------------------------------