Offensive Security Certified Professional

Offensive Security Certified Professional

Offensive Security Certified Professional (OSCP) is an Ethical Hacking certification offered by Offensive Security - a training spin off of the BackTrack Penetration Testing distribution[1].[2] The OSCP is a real-life penetration testing certification, requiring holders to successfully attack and penetrate various live machines in a safe lab environment.[3]. It is currently one of the only certifications that requires proof of real-life penetration testing skills.[citation needed]

Contents

OSCP Course

The course leading up to the OSCP Certification was originally called "Offensive Security 101", but was changed to "Pentesting With BackTrack" in December 2008. "Pentesting With BackTrack" covers common attack vectors used during penetration tests and audits, based on the popular Linux penetration testing distribution - BackTrack. This course is offered in two formats, either online or live "instructor led" classes. The online course is a package consisting of videos, a pdf, lab assignments and lab access; the instructor led course is intensive live training covering the same material, also with lab access. The labs are accessible via a high speed internet connection, and contain a variety of operating systems and network devices where the students perform their assignments[4].

OSCP Challenge

Upon completion of the course students become eligible to take the certification challenge.[5] They are given twenty-four (24) hours in an unfamiliar lab to successfully complete the exam requirements. Documentation must include procedures used and proof of successful penetration including special marker files that are changed per exam. Exam results are reviewed by a certification committee and a reply is given within seventy-two (72) hours [6].

Recertification

The OSCP does not require re-certification.

Relations to other security trainings or exams

Completion of "Pentesting with BackTrack" qualifies you for 40 ISC2 CPE Credits

External links

See also

References

  1. ^ Offensive Security http://www.offensive-security.com
  2. ^ http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,1152.0/
  3. ^ Securiteam Blogs http://blogs.securiteam.com/index.php/archives/989
  4. ^ Elwood.net http://www.elwood.net/post/39599202/offensive-security-oscp
  5. ^ Offensive Security Training page http://www.offensive-security.com/information-security-training.php
  6. ^ Xyberpix Blog http://xyberpix.blogspot.com/2007/08/oscp-certification-challenge-most.html
v · d · eInformation security certifications
CompTIA
Cisco Systems
CCNA Security • CCSP • CCIE Security
EC-Council
ENSA • CEH • CHFI • ECSA • LPT • CNDA • ECIH • ECSS • ECVP • EDRP • ECSP • ECSO
GIAC
GSIF • GSEC • GCFW • GCIA • GCIH • GCUX • GCWN • GCED • GPEN • GWAPT • GAWN • GISP • GLSC • GCPM • GLEG • G7799 • GSSP-NET • GSSP-JAVA • GCFE • GCFA • GREM • GSE
ISACA
CISA • CISM • CGEIT • CRISC
(ISC)²
SSCP • CAP • CSSLP • CISSP • ISSAP • ISSEP • ISSMP •
ISECOM
OPST • OPSA • OPSE • OWSE • CTA
Offensive Security
OSCP • OSCE • OSWP
Mile2 Certification
CPTE • CPTC • CISSO • CSLO • CDFE
CERT
CSIH
eLearnSecurity
eCPPT



Wikimedia Foundation. 2010.

Игры ⚽ Поможем решить контрольную работу

Look at other dictionaries:

  • Certified Information Security Manager — (CISM) is a certification for information security managers awarded by ISACA (formerly the Information Systems Audit and Control Association). To gain the certifications, individuals must pass a written examination and have at least five years of …   Wikipedia

  • Certified Information Systems Auditor — [1] Certified Information Systems Auditor (CISA) is a professional certification for Information Technology Audit professionals sponsored by ISACA, formerly the Information Systems Audit and Control Association. Candidates for the certification… …   Wikipedia

  • Certified Information Systems Security Professional — CISSP Logo Certified Information Systems Security Professional (CISSP) is an independent information security certification governed by International Information Systems Security Certification Consortium (ISC)². (ISC)² is a self declared… …   Wikipedia

  • Certified Ethical Hacker — The Certified Ethical Hacker (C|EH) is a professional certification provided by the International Council of E Commerce Consultants (EC Council.) An Ethical Hacker is one name given to a Penetration Tester. An ethical hacker is usually employed… …   Wikipedia

  • Certified Hacking Forensic Investigator — The Computer Hacking Forensic Investigator (C|HFI) is a professional certification provided by the International Council of E Commerce Consultants (EC Council.) and focusing on network security investigations.[1]. The certification was developed… …   Wikipedia

  • Information security professionalism — is the set of knowledge that people working in Information security and similar fields (Information Assurance and Computer security) should have and eventually demonstrate through certifications from well respected organizations. It also… …   Wikipedia

  • Liste der IT-Zertifikate — IT Zertifizierungen sind Nachweise einer Qualifikation in der Branche der Informationstechnik. Sie werden von verschiedenen Organisationen angeboten. Diese Organisationen bescheinigen dem Zertifikatsinhaber Kenntnisse auf einem Gebiet. Die… …   Deutsch Wikipedia

  • EC-Council Network Security Administrator — The EC Council Network Security Administrator (ENSA) is a professional certification provided by the International Council of Electronic Commerce Consultants.The Network Security Administrator is a prerequisite for the EC Council CEH… …   Wikipedia

  • Organizational Systems Security Analyst — The Organizational Systems Security Analyst (OSSA) is a technical vendor neutral Information Security certification programme which is being offered in Asia. This programme consists of a specialized technical information security training and… …   Wikipedia

  • BackTrack — Infobox OS name = BackTrack caption = BackTrack 3.0 (third release) developer = Mati Aharoni, Max Moser, Remote Exploit, jayme family = Linux source model = Free and Open Source Software latest release version = 3.0 latest release date = release… …   Wikipedia

Share the article and excerpts

Direct link
… Do a right-click on the link above
and select “Copy Link”