Information Security

Information Security—also called Cybersecurity, or InfoSec—is arguably the most interesting profession on the planet. It requires some combination of the attacker mentality, a defensive mindset, and the ability to constantly adapt to change. This is why it commands some of the highest salaries in the world.

my information security blog posts

InfoSec is such a big field, however, that it’s useful to break it up into sections. I’ve done this over the 20 years that I’ve been writing about security, and here are some of the topics you might find interesting.

Sales and marketing teams often conflate these definitions, leading to confusion in the industry.

• Offensive Security Testing
  
  
  • Security Assessment Types
  • When to Use Different Types of Security Assessments
  • The Difference Between Pentesting and Red Teaming
  • The difference between Red, Blue, and Purple Teams
  • The Difference Between Threats, Threat Actors, Vulnerabilities, and Risks
  • The Difference Between Events, Alerts, and Incidents

My cybersecurity career guide takes you step by step through the process of building a security career.

• Building a Security Career
  
  
  • Building a Career in Cybersecurity
  • Day-1 Skills Required to Land an Entry-Level Cybersecurity Job
  • Information Security Interview Questions
  • Why Cybersecurity Lacks Entry-level Positions

• Security Tools
  
  
  • Shodan
  • Masscan
  • Nmap
  • Tcpdump
  • Lsof
  • iptables

• Security Team Types
  
  
  • The Difference Between Pentesting and Red Teaming
  • The difference between Red, Blue, and Purple Teams
  • The Definition of a Green Team

• Security Definitions
  
  
  • The Difference Between Threats, Threat Actors, Vulnerabilities, and Risks
  • The Difference Between Events, Alerts, and Incidents

• Security Philosophy
  
  
  • Secrecy is a Valid Security Layer

• Security Concepts
  
  
  • Encryption vs. Encoding vs. Hashing
  • Information Security Definitions