Unix administration - 1 week encryption/security course?

Author

1 week encryption/security course?

Dave Hinz

2005-07-27, 5:55 pm

I'm finding myself more and more involved with security and encryption
projects lately. Can anyone suggest a 1-week course, somewhere in the
US, which would cover topics such as PGP, SSL, and data interchange
security?

I'm looking for people who've taken or heard of classes, not sales
pitches from training centers. Those I can already find...

Thanks,
Dave Hinz

Jonathan Abbey

2005-07-28, 6:00 pm

In article <3kq7hqFvdbn0U2@individual.net>,
Dave Hinz <DaveHinz@spamcop.net> wrote:
| I'm finding myself more and more involved with security and encryption
| projects lately. Can anyone suggest a 1-week course, somewhere in the
| US, which would cover topics such as PGP, SSL, and data interchange
| security?
|
| I'm looking for people who've taken or heard of classes, not sales
| pitches from training centers. Those I can already find...

Don't know about classes, but the canonical treatment of the subject
for technical laymen is Bruce Schneier's Applied Cryptography. He's
also co-author on something of a sequel, 'Practical Cryptography'.

Both books are published by Wiley.

Jon

| Thanks,
| Dave Hinz

--
-------------------------------------------------------------------------------
Jonathan Abbey jonabbey@arlut.utexas.edu
Applied Research Laboratories The university of Texas at Austin
GPG Key: 71767586 at keyserver pgp.mit.edu, http://www.ganymeta.org/workkey.gpg

Frank Cusack

2005-07-28, 8:48 pm

On Thu, 28 Jul 2005 21:49:05 +0000 (UTC) broccol@csdsun1.arlut.utexas.edu (Jonathan Abbey) wrote:
> In article <3kq7hqFvdbn0U2@individual.net>,
> Dave Hinz <DaveHinz@spamcop.net> wrote:
> | I'm finding myself more and more involved with security and encryption
> | projects lately. Can anyone suggest a 1-week course, somewhere in the
> | US, which would cover topics such as PGP, SSL, and data interchange
> | security?
> |
> | I'm looking for people who've taken or heard of classes, not sales
> | pitches from training centers. Those I can already find...
>
> Don't know about classes, but the canonical treatment of the subject
> for technical laymen is Bruce Schneier's Applied Cryptography.

Not really. That merely talks about cryptography, and is not really a
holistic view.

A better coverage (for the OP) is probably found in _Network Security_
by Kaufman et al. It's quite excellent.

-frank

Robert Melson

2005-07-29, 2:51 am

In article <m2ek9is819.fsf@maguro.local>,
Frank Cusack <fcusack@fcusack.com> writes:
> On Thu, 28 Jul 2005 21:49:05 +0000 (UTC) broccol@csdsun1.arlut.utexas.edu (Jonathan Abbey) wrote:
>
> Not really. That merely talks about cryptography, and is not really a
> holistic view.
>
> A better coverage (for the OP) is probably found in _Network Security_
> by Kaufman et al. It's quite excellent.
>
> -frank

I agree that the Schneier books are a bit, ahhhh, dense for what the OP was
requesting. Interesting, if you're into cryptography, but not all that
relevant to what was asked.

I'd suggest he go to http://www.sans.org for information on various courses
and workshops around the country.

HTH,
Bob Melson
(remember me, Dave? Swell Ol' Bob?)

--
Robert G. Melson | Rio Grande MicroSolutions | El Paso, Texas
-----
"One of the greatest delusions in the world is the hope that the evils in this world are to be cured by legislation." Thomas Reed
-----

Dave Hinz

2005-07-29, 6:01 pm

On Thu, 28 Jul 2005 18:41:38 -0700, Frank Cusack <fcusack@fcusack.com> wrote:
> On Thu, 28 Jul 2005 21:49:05 +0000 (UTC) broccol@csdsun1.arlut.utexas.edu (Jonathan Abbey) wrote:

[vbcol=seagreen]
> Not really. That merely talks about cryptography, and is not really a
> holistic view.

I think that if I could go at his book un-interrupted, that I could get
a lot out of it. But, working in I.T., uninterrupted time only happens
if I leave the office for a week - which is why I'm thinking a class.

> A better coverage (for the OP) is probably found in _Network Security_
> by Kaufman et al. It's quite excellent.

I'll get that on order, thanks.

Dave Hinz

Dave Hinz

2005-07-29, 6:01 pm

On Fri, 29 Jul 2005 05:05:03 GMT, Robert Melson <melsonr@aragorn.rgmhome.net> wrote:

> I agree that the Schneier books are a bit, ahhhh, dense for what the OP was
> requesting. Interesting, if you're into cryptography, but not all that
> relevant to what was asked.

That's probably the word I was looking for, yes.

> I'd suggest he go to http://www.sans.org for information on various courses
> and workshops around the country.

That's looking like the way to go, so far. Their site's graphic
designer, however, needs to be brought out of 1992.

> HTH,
> Bob Melson
> (remember me, Dave? Swell Ol' Bob?)

You bet. This is, what, 7 or 8 groups of overlap now. Thanks for the
pointers to PHPGedView, by the way. Playing with it a bit; very nice.
I need to send in some documentation that I've written for it where it's
a bit thin.

Dave Hinz

Michael Zawrotny

2005-07-29, 6:01 pm

Frank Cusack <fcusack@fcusack.com> wrote:
> broccol@csdsun1.arlut.utexas.edu (Jonathan Abbey) wrote:
>
> Not really. That merely talks about cryptography, and is not really a
> holistic view.
>
> A better coverage (for the OP) is probably found in _Network Security_
> by Kaufman et al. It's quite excellent.

Another excellent book is Ross Anderson's
"Security Engineering: A Guide to Building Dependable Distributed Systems"

One of the (many) things I liked about it is that it analyzes various
systems in a methodical fashion, focusing on the principles involved.
The numerous factors of what is being secured, what threats are
neutralized, what vulnerabilities are still there and how they might
be mitigated are all considered and dissected. The icing on the cake
is that as the title suggests, it looks at the system as a whole,
including how the pieces interact.

Mike

--
Michael Zawrotny
Institute of Molecular Biophysics
Florida State university | email: zawrotny@sb.fsu.edu
Tallahassee, FL 32306-4380 | phone: (850) 644-0069