A centralized repository of InfoSec learning resources.
Information Security (InfoSec) is a wildly exciting, and rapidly growing field. There is no shortage of readily available resources that seek to enrich, inspire, and train budding InfoSec practitioners. However, these resources come in many shapes and sizes - ranging from ~$6,000 USD courses (think SANS), to online platforms operating monthly or annualy subsription models, to completely free. The options also vary by skill and quality.
In its infancy, the aspiring-infosec repo is no more than a single README file. The following sections provide the following:
- A list of resources organized by price point/model
- A brief overview of each resource
| Training Resource | Price ($ - $$$) | Model | Price Example | Quality | Link |
|---|---|---|---|---|---|
| SANS | Expensive ($$$) | Per Course | ~$6,600.00 USD | Excellent | https://www.sans.org |
| eLearnSecurity | Expensive ($$$) | Per Course | ~$1,300.00 USD | Excellent | https://www.elearnsecurity.com |
| Linux Academy | Cheap ($) | Subscription | ~$499.00 per year | Excellent | https://linuxacademy.com |
- Price: *** (expensive)
- Quality: *** (the best)
- Delivery: *** (flexible)
- Certifications: Yes.
The SANS Institute is a global leader in providing InfoSec training. The company has been around for about 30 years, and arguably, was first-to-market in providing high quality security training.
SANS training is predominantly known for two things:
- Being high-quality, extremeley hands-on and immediately applicable
- Being pricy
SANS instructors are contracted employees who typically have several years of real world experience. In fact, most faculty members operate their own consulting firms and are highly regarded figures in the InfoSec space. Students should never walk away from an intense, 6-day SANS course thinking, "Wow, that was extgremely academic. I have no idea how to apply this knowledge."
The bulk of SANS courses are 6 days long, and the courses are delivered through 3 mediums: in-person, OnDemand, or Simulcast (a live class that is streamed).
On point #2 - price. Let's use a real example. Say, you are interested in SANS' Continous Monitoring (SEC 511) course. The list price is $6,610.00 USD. Tack on an additional $769.00 for the certification attempt, and possibly even more if you have to travel to the event site.
Most SANS students do not pay out-of-pocket for SANS. Most folks are afforded the opportunity to attend SANS courses via employer training programs (or reimbursement).
- Price: ** (fairly expensive)
- Quality: *** (excellent)
- Delivery: *** (flexible)
- Certifications: Yes.
eLearnSecurity is an 100% online, paid, training platform that focuses on highly practical InfoSec courses. Originally, the available courses were geared towards students interested in the offensive side of security (the "red team"), with their flagship Penetration Testing Professional course leading the way.
Since, eLearnSecurity now offers up a more diverse cirriculum that is also tailered to the defensive side (the "blue team") - with courses such as Threat Hunting Professional and Practical Web Defense.
- Price * (cheap - affordable)
- Quality *** (excellent)
- Delivery *** (flexible)
- Certifications: No.
Why on Earth would a learning platform that seems so focused on Linux be relevant to our list? Linux aptitude being a fundamental of one's InfoSec journey aside, don't let the Linux Academy name fool you. Linux Academy is a monthly subsciption based learning platform jampacked with high-quality video content, an extensive and interactive lab enviornment, and constantluy new and updated content.
Monthly subscriptions run $49.00 USD, or you can pay $499.00 per year (which everages out to $41.58 USD per month).
Content ranges from Linux basics, to securing Linux, and everything you could possibly imagine relating to cloud and DevOps - containers, orchestration, CI/CD -- and there's a ton of content pertaing to AWS, Azure, and GCP.