Normally I\u2019d be posting something related to the Sony hack and why it doesn\u2019t really matter that is was or was not DPRK and asking why everyone is so focused on the destructive malware versus the fact that Sony made many mistakes in the years prior that ultimately led to what we are witnessing in the media today, but I digress…<\/p>\n
I\u2019ve been doing this teaching thing for quite some time, 7 and a half years to be exact, and recently went back in time and added up all of the students that have had a course with me\u2026which totals out to just over 800 as of last quarter.\u00a0 I started thinking about not only how I got here but also how my advice and teaching style has changed over these years.\u00a0 In thinking back, the one question that inevitably comes up every quarter in class is \u201cwhat does it take to be successful in this field?\u201d to which my answers are always almost the same.\u00a0 I\u2019m not basing my answer to this question solely on what I did or how I got to where I am, my answer is based on a combination my own experiences along with traits I\u2019ve observed from others that I\u2019ve worked with throughout my career who I consider to be great security folks in general.\u00a0 I also think there are traits that need to be shed by some folks in our field as well, which I\u2019m also happy to convey to those who ask.<\/p>\n
So why am I writing this post?\u00a0 Well, when I first started teaching I attempted to cater to everyone in the class and tried not to offend anyone.\u00a0 Perhaps with age, and after many years of trying to make every student happy, I realized I was doing the students a disservice.\u00a0 I wasn\u2019t exactly treating them in a way that would clue them in on the general expectations of those in our field or in a way that would force them to learn traits that would make them successful.\u00a0 However, and NOT to my surprise, I noted some students just don\u2019t like this new method.\u00a0 Some students just don\u2019t like to be told that they are going to have to work hard, some just don\u2019t like the fact that they may have to research something on their own, and some worry more about the grade than what they take away from the course that they can apply in their current roles or in the future.\u00a0 At the end of every quarter the school asks (used to be mandatory) students to provide course evaluations back to the instructor along with comments on strengths, weaknesses, what they liked, didn\u2019t like and so on.\u00a0 And every quarter I\u2019m both thrilled and dismayed after reading the comments.\u00a0 Of course some people really enjoyed the course, some disliked it, and I expect that\u2026but some disliked it for reasons you wouldn\u2019t think.\u00a0 And what is most dismaying is that some of these reasons fly directly in the face of what I think it takes to be successful in our field…and that worries me.<\/p>\n
So what does it take?\u00a0 For me I boiled it down to three main required traits: curiosity, perseverance, being able to learn new things on your own.<\/p>\n
Let me start with curiosity – inquisitiveness, interest, and imagination\u2026all synonyms of curiosity.\u00a0 If you don\u2019t find yourself asking \u201chow or why does this work?\u201d very often then you\u2019re probably not curious by nature.\u00a0\u00a0 Curious people are fascinated by things that generally leads to a burning desire to know why and how things in this world work.\u00a0 Curious people have been known to take things apart (sorry mom) and sort of put them back together.\u00a0 Curious people like to build things as well, because starting with the pieces helps them to understand how it works, then they are likely to take what they just built apart and try to make it better.\u00a0 I pair imaginative with this trait as curious people tend to find themselves thinking of new ways of doing things or finding unique solutions to problems.\u00a0 We often find ourselves needing to ask how something works, or coming up with new or novel solutions in our field…so I put curiosity as one of my top 3.<\/p>\n
The second is perseverance.\u00a0 I feel this is a strong trait of people I see as being successful across many different fields, but also feel it is critical to carry this trait if your field is information security.\u00a0 It is easy to get frustrated in our field just based on the breadth of knowledge it requires.\u00a0 I don\u2019t mean to say you need to know everything, but as my career progressed I found myself leaning on knowledge that wasn\u2019t directly related to security that allowed me to see the bigger picture of things and how what I was doing was going to affect things that I previously wasn\u2019t thinking of.\u00a0 We also need perseverance as we are often beat down and blamed for \u201cIT not working like it should because of security\u201d or being the \u201cteam that says no all the time\u201d.\u00a0 I\u2019m not advocating that you take a strong stance each and every time someone challenges you (being stubborn is not the same as perseverance), you need to pick your battles, and when you do you will need to stand your ground.\u00a0 This trait leads me to the last one\u2026where perseverance is required to not give up on something just because it is hard.<\/p>\n
Learn how you learn, so that you can teach yourself new things in the future.\u00a0 When I was an undergrad I hadn’t yet learned how I learn best, or better yet, how to teach myself.\u00a0 By the time I was a grad student I had figured it out and learning, and courses in general, became much easier and fun which allowed me to focus on how to apply my newly gained knowledge to both past and future problems I would encounter.\u00a0 I find myself learning all the time just to stay current, so if you\u2019re going to stay current in our field then expect to become a lifelong learner.\u00a0 Yes, I know this also applies to other fields as well, but I feel it is critical in our field given the pace of change.\u00a0 I used to think this was a \u201cyoung\u201d student\u2019s problem or a generational issue, but over time I found that to be a misconception on my part.\u00a0 This seems to affect all generations equally based on my observations.\u00a0 My advice is generally pretty simple, if you\u2019re not curious or inquisitive and you can\u2019t stick it out through perseverance it is unlikely that you\u2019ll find yourself\u00a0being a\u00a0lifelong learner.\u00a0 One thing that I get in the evaluations each and every quarter since I\u2019ve changed my style is that \u201cI can\u2019t believe you said that we should use Google to answer our own questions\u201d\u2026which blows my mind.\u00a0 When I started in this field I had Hacking Exposed and IRC\u2026today\u2019s new students of the field have Google, 100\u2019s of published and unpublished security books, and way more educational resources than ever before.\u00a0 So why not use them to your advantage?\u00a0 Why is being asked to learn something on your own such a bad thing?<\/p>\n
To conclude, I realize there are other traits that are required in order to be successful, but I feel that without the three I boiled it down to that the others don\u2019t matter.\u00a0 Finally, I realize that some people who aren’t strong in these three traits will still stay in the field and be satisfied with putting years into the field only to push buttons every day.\u00a0 Which reminds me, I was watching Caddyshack the other day and there\u2019s a line where Ty tells Danny that \u201cthe world needs ditch digger too\u201d\u2026relating that to this post I always make it \u201cthe world needs firewall admins too\u201d in my mind.<\/p>\n","protected":false},"excerpt":{"rendered":"
Normally I\u2019d be posting something related to the Sony hack and why it doesn\u2019t really matter that is was or was not DPRK and asking why everyone is so focused on the destructive malware versus the fact that Sony made many mistakes in the years prior that ultimately led to what we are witnessing in […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1],"tags":[],"class_list":["post-788","post","type-post","status-publish","format-standard","hentry","category-general"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pme9o-cI","jetpack_featured_media_url":"","_links":{"self":[{"href":"http:\/\/www.malos-ojos.com\/index.php?rest_route=\/wp\/v2\/posts\/788","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.malos-ojos.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.malos-ojos.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.malos-ojos.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.malos-ojos.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=788"}],"version-history":[{"count":4,"href":"http:\/\/www.malos-ojos.com\/index.php?rest_route=\/wp\/v2\/posts\/788\/revisions"}],"predecessor-version":[{"id":792,"href":"http:\/\/www.malos-ojos.com\/index.php?rest_route=\/wp\/v2\/posts\/788\/revisions\/792"}],"wp:attachment":[{"href":"http:\/\/www.malos-ojos.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=788"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.malos-ojos.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=788"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.malos-ojos.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=788"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}