In Brief

Master Hacker

By Daintry Duffy, CSO Contributor

December 20, 2007CSO

In August, EC-Council University (a sister concern of the International Council of Electronic Commerce Consultants) admitted the first class of students for its new master’s degree program in security science—dubbed the “Hacker’s Master’s.” While the first class contained only six students, Jay Bavisi, president of EC-Council, has grand plans for the program and believes that it addresses some major gaps in the education of aspiring CSOs.“A lot of CSOs are not very technically inclined,” says Bavisi, “and if they don’t understand the technology, they can’t gauge how effective their program is. They risk being slow or listening to incompetent advice. It’s one of the biggest disadvantages organizations face, and the [real] hackers know it.”

The program covers a broad swath of IT-security issues, including computer forensics, penetration testing, disaster recovery and cyberlaw, and is expected to take most students between a year and a half and three years to complete. The program is run entirely online, so students can pursue their degree half-time while working in the security field gaining real-world experience. Prior to graduating, they will defend a thesis before an audience of their peers.

Although the program is not the first to provide security executives with an information security education, Bavisi believes that EC-Council U has some advantages over its competitors. First, it doesn’t use the standard textbooks that are often two to three years old. All of the courseware is designed in-house and is never older than six months, so students can be assured of getting the most current information and opinions on the security challenges they are studying. Second, the EC-Council MSS is not your average survey course. “We’re going 2 inches wide and 10 feet deep rather than the reverse,” says Bavisi.

Of course an MSS will not be enough to prepare aspiring CSOs for the challenges of the future, but Bavisi argues that this kind of degree will be an essential component of any future security executive’s knowledge base. “The new breed of CSO must be technically inclined as well as having the necessary management skills,” says Bavisi. “You can’t have a surgeon performing open-heart surgery unless he’s a doctor first and foremost. It doesn’t matter how his leadership skills are and how he manages a surgical staff. That’s the stand we are taking with no compromise.” 

Other stories by Daintry Duffy

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WHITE PAPER
Maximizing Site Visitor Trust Using Extended Validation SSL

VeriSignNow with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in the free VeriSign white paper.

» Read the Paper

Featured Sponsors
Sponsored Links

E-LOAN Maintains Reputation as a Privacy Leader with Symantec

Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands

Prudential Financial Protects its Brand with Symantec

Managing SSL Security in Multi-Server Environments

CA's IT Security centralizes your identity management to turn security into a proactive, business-building tool

Envision Identity-Based Access Control for the Datacenter

Using Likewise to Comply with PCI Data Security Standard

When Customer Relationship is Everything, Businesses Bank on SSL Solutions

Maximizing Site Visitor Trust Using Extended Validation SSL

Solving Online Credit Fraud Using Device Reputation

Understanding Data Location is Imperative for Data Loss Prevention

Secure your virtual and physical environments with the same software

Manage your IT more effectively

IDC Defines an Identity and Access Management Submarket

IDC Defines an Identity and Access Management Submarket for Managing Privileged User Accounts and Meeting GRC Requirements

Everything Today's CISO Needs to Know About Using SSO to Succeed in the Web 2.0 Era

7 Requirements of Data Loss Prevention

Information Security: Data Drains and How to Prevent Loss

How Are Open Source Development Communities Embracing Security Best Practices?

The Case for Business Software Assurance ~ Securing Your Applications

Efficient - Flexible - Compliant

Digital Identity Protection and Data Security Get Personal

Simplify your data center with Juniper Networks. View the webcast

The Latest Advancements in SSL Technology

How to Offer the Strongest SSL Encryption

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

Get in Compliance With Government Data Regulations

Taking the Botnet Threat Seriously

Any company can promise identity protection. Only Debix can prove it

Welcome to the age of Service-Oriented Security (SOS)

Enabling Compliance with Converged Mainframe Security and Storage

5 Steps to Secure Outsourced Application Development