01 What is network security
Network security can be classified based on attack and defense perspectives. The “red team” and “penetration testing” we often hear about study attack techniques, while the “blue team”, “security operations” and “security operations and maintenance” study defense. technology.
Regardless of the field such as network, web, mobile, desktop, cloud, etc., there are two sides of attack and defense. For example, web security technology includes both web penetration and web defense technology (WAF). As a qualified network security engineer, you should be both offensive and defensive. After all, only by knowing yourself and the enemy can you be victorious in every battle.
02 How to plan a network security learning route
If you are a newcomer to the security industry, I suggest you start with two directions: network security or web security/penetration testing. One is that the market demand is high, and the other is that it is relatively mature and easy to get started.
It is worth mentioning that to learn network security, you need to learn network first and then learn security; to learn web security, you need to learn web first and then learn security.
Security does not exist independently, but is an upper-layer application technology based on other technologies. Without this foundation, it is easy to turn into talking on paper and "
knowing what is happening but not knowing why." It is also difficult to go far on a safe career path.
If you are originally engaged in network engineering operation and maintenance, you can choose to get started in the network security direction; if you are originally engaged in program development, it is recommended to choose the Web security/penetration testing direction to get started. Of course, after learning to a certain extent or having certain work experience, the coupling of technologies in different directions will become higher and higher, and you need to know a little bit in each direction.
<