News for hackers. Stuff that matters.
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by tptacek on Wednesday August 15, 2018 @07:14PM (#17770555)
Here's the requirements for GATech's standard Cybersecurity MS:

    Core:
     
    CS 6035	Intro To Info Security	
    PUBP/CS/MGT 6725 Info Security Policies	
    CS/ECE/PUBP 6727 Cyber Sec Practicum	
    Elective (CS/PUBP/ECE 6000-level)	
     
    Tech Specialization:
    CS 6260 Applied Cryptography	
    CS 6238 Secure Computer Systems	
    CS 6262 Network Security	
    CS 6265 Information Security Lab	
    Any 2:
    CS 6210 Adv Operating Systems	
    CS 6250 Computer Networks	
    CS 6255 Network Management	
    CS 6300 Software Dev Process	
    CS 6310 Software Arch & Design	
    CS 6340 Software Analysis & Test	
    CS 6365 Intro Enterprise Comput.	
    CS 6390 Programming Languages	
    CS 6400 DB Sys Concepts& Design	
    CS 6675 Advance Internet Comput	
    CS 7210 Distributed Computing	
    CS 7230 Software Dsgn,Impl& Eval	
    CS 7260 Internet Arch& Protocols	
    CS 7270 Networked Apps&Services	
    CS 7292 Reliable Secure Comparch	
    CS 8803 Mobile Applications and Services
     
    Energy Systems Specialization:	
    ECE 8813 Smart Grids	
    ECE 8813 Introduction to Cyber-Physical Electric Energy Systems	
    ECE 8813 Introduction to Cyber-Physical Systems Security	
    ECE 8803 Computational Aspects of Cyber-Physical Systems	
    And any 2:
    ECE 6550 Linear Sys and Controls	
    ECE 6607 Computer Comm Networks	
    ECE 6615 Sensor Networks	
    ECE 6102 Dependable Distribut Sys	
    ECE 6320 Power Sys Ctrl&Operation	
    ECE 6323 Power System Protection	
    ECE 8813 Advanced Computer Security
    ECE 8813 Network Forensics
     
    Policy Specialization:	
    Select 4 courses:	
    PUBP 6502 IT/Comm/Telecom Policy	
    MGT 6726 Privacy Tech Policy Law	
    PUBP 6111 Internet & Public Policy	
    INTA 6014 Scenario and Path Gaming	
    INTA 8803 Data Analytics and Security
    PUBP 6501 Information Policy & Mgt	
    INTA 8803 Challenge of Terrorism in Democratic Societies
    And any 2: 
    PUBP 6701 Energy Technol & Policy	
    PUBP 6014 Organization Theory	
    PUBP 6401 Sci,Tech & Public Policy	
    INTA 6103 International Security	
    INTA 6015 Technology& Military Org
I'm pretty meh about this. In particular: when we think about the "cybersecurity talent shortage" (I don't believe that one exists, but whatever), we're thinking about what this degree program considers "technical specialization" roles. I don't look at that course list and think of a consistent cohort of people it produces that are especially ready to take on jobs in my field.

I'm also: why do they make Cybersecurity MS candidates take that pointless Applied Cryptography class? I read the lecture slides for it, and, like most university crypto classes, it's "just enough cryptography to make you dangerous, with just enough math notation to make you think you learned something really hard that you didn't really learn".

The MS core classes are an intro to computer security that might be workable as a 100-level class in a serious CS program, a "policies" class that looks just absolutely deadly (1 week on "HIPAA, GLBA, FISMA", then a week on the "NIST cybersecurity framework", then a week on "cybercrime and cyberwar"), and a capstone independent study program.

My advice: get an internship and skip the MS. They'll pay you to learn this stuff.

Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by joshuamorton on Wednesday August 15, 2018 @08:04PM (#17770825)
What makes you think that a 600 level course at a top 10 CS program is equivalent to a 100 level course at a "serious" CS program?

(I graduated from GT but didn't take the undergrad version of intro infosec, which is 400 level and is likely crosslisted with the on campus 6035. I also don't think infosec was the most rigorous of courses from what I heard, but still)

Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by tptacek on Wednesday August 15, 2018 @09:38PM (#17771220)
Because I went to the course site and read the syllabus and the prerequisites.

I agree that Georgia Tech is a top CS program. I don't think this is a top CS degree.

Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by joshuamorton on Wednesday August 15, 2018 @10:21PM (#17771400)
I guess my point is, if you consider GT to be a top CS program, then the fact that undergrad intro infosec is a 400 level course (on the easy side, but 400 level), would imply that infosec isn't a 100 level concept (this makes sense, before you can start to understand secure vs insecure X, you first should just understand X, without security being an implication).
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by tptacek on Wednesday August 15, 2018 @10:46PM (#17771519)
My son just finished UIUC CS 125 (the programming intro class for non-majors) and he'd be fine with all the material I see in 6035. That's I guess how I'd sum it up.
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by nostrebored on Thursday August 16, 2018 @01:27AM (#17772139)
If this is anything like the courses I did at GT, the courses might look simple, the content might not seem deep, but the meat of the learning will be done in the constant onslaught of deep diving practical assignments. Applied Cryptography definitely seems like it will fit the bill here. The Energy Systems Specialization looks like it dives deeper than the other tracks, though.

I agree that the credentialism is the real issue here. I wanted to go into security after graduating and couldn't find anywhere offering jobs with less than 3 years of work experience or a graduate degree, lucky if it was only a MsC requirement.

Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by czbond on Wednesday August 15, 2018 @09:58PM (#17771305)
Not commenting on the class, but the talent shortage. It is definitely real. However, it is actually easier to find security engineers than product managers FOCUSING on security, leaders who are also good at security & can speak "past security" to the business. Security is often a dead end in the C-suite area... because of the personality quirks.
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by jxsonl on Wednesday August 15, 2018 @10:08PM (#17771341)
Can you elaborate more on product managers focusing on security? I just graduated with B.Sc in CS but am in a networking job now there is a lot to learn, am planning to branch into the security field after getting more experience (2-3 years)
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by tptacek on Wednesday August 15, 2018 @10:36PM (#17771470)
I don't believe that it is real, but rather a byproduct of credentialism.
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by ctdonath on Wednesday August 15, 2018 @07:41PM (#17770699)
From this, I can trust that any GA Tech OMS graduate has covered those subjects to the satisfaction of an expert on the subject. Maybe "covered" is kinda thin, yeah, but at least I know they've been covered to at least a sensible minimum.

That vs having to interrogate a candidate on 22 subjects, identifying what constitutes sufficient coverage. I've seen enough self-taught developers who clearly haven't covered the basics to be concerned.

Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by itronitron on Wednesday August 15, 2018 @10:45PM (#17771510)
You should do both, the MS and the internship. Many cybersec practitioners that I have known are particularly poor at communicating their expertise to others.
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by auiya on Thursday August 16, 2018 @10:57AM (#17775149)
Having taken that very Applied Cryptography course twice, I assure you it is not easy. One of the most difficult in the program actually.
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by tptacek on Thursday August 16, 2018 @03:51PM (#17777908)
"Easy" isn't the word I'd use. Dated and not especially useful, maybe. What practical work did they have you do? I'm only going from the course slides.
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by auiya on Friday August 17, 2018 @11:54AM (#17783693)
Practical depends on how you end up using the knowledge right? For people into protocol development/exploitation it was a valuable course which taught many fundamentals of discovering cryptographic operational methods, flaws, procedures, and how to design or fix. The reason you always hear people say "never roll your own crypto" is because this is a difficult subject matter, but is necessary if you're trying to build a properly secure cryptographic schema.
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by csomar on Wednesday August 15, 2018 @07:39PM (#17770686)
Are there courses (in Udacity/Coursera/etc..) you find more relevant? What specialities you think they should teaching instead?
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by rikelmens on Wednesday August 15, 2018 @09:35PM (#17771211)
Thanks for the list. Any chance for sharing the textbooks / recommended readings for each?
Re:Georgia Tech Creates Cybersecurity Master’s Degree Online... by 56chan4 on Wednesday August 15, 2018 @07:35PM (#17770674)
CIA, MI5 offer the best courses, plenty of paid for field work in interesting locations around the world. Just answer strange adverts, like Godolt is not coming, or be observant when out walking.