Question

9.2.1　认证分类

安全认证分成以下六类，第三、四、六类我们平常接触较多，最近几年第一、二类认证也逐步开始多起来，第五类参与的人比较少。

第一类：Hacking&Pen Testing certifications

主要是与渗透测试有关的认证，包括：

·Mile2 CPTC-Certified Penetration Testing Consultant

·Mile2 CPTE-Certified Penetration Testing Engineer

·CompTIA Security+(Introduction/Beginner)

·ISACA CSX CYBERSECURITY FUNDAMENTALS CERTIFICATE(Introduction/Beginner)

·ISACA CSX PRACTITIONER

·7Safe CSTA-Certified Security Testing Associate(British CEH)

·GIAC/SANS GIAC Penetration Tester(GPEN)

·Offensive Security Certified Professional–OSCP

·Offensive Security Wireless Professional–OSWP

·Offensive Security Certified Expert–OSCE

·Offensive Security Exploitation Expert–OSEE

·EC-Council CEH-Certified Ethical Hacker

·EC-Council ECSA-EC-Council Certified Security Analyst

·IACRB Certified Expert Penetration Tester(CEPT)

·IACRB Certified Penetration Tester(CPT)

·ISFCE Certified Computer Examiner(CCE)

·Logical Operations CyberSec First Responder(CFR)

第二类：Computer Forensics certifications

主要是与计算机取证有关的认证，包括：

·Mile2 CDFE-Certified Digital Forensics Examiner

·Mile2 CNFE-Certified Network Forensics Examiner

·GIAC/SANS GCFA:GIAC Certified Forensic Analyst

·GIAC/SANS GCFE:GIAC Certified Forensic Examiner

·GIAC/SANS GREM:GIAC Reverse Engineering Malware

·GIAC/SANS GNFA:GIAC Network Forensic Analyst

·GIAC/SANS GASF:GIAC Advanced Smartphone Forensics

·ISC2 CCFP-Certified Cyber Forensics Professional

·EC-Council CHFI-Computer Hacking Forensic Investigator

·EnCe:EnCase Certified Examiner.

·IACIS Certified Forensic Computer Examiner(CFCE)

·CyberSecurity Forensic Analyst CSFA

第三类：Management/Others certifications

主要是与信息安全管理有关的认证，包括：

·Mile2 CISSO-Certified Information Systems Security Officer

·Mile2 CIHE-Certified Incident Handling Engineer

·Mile2 CHISSP-Certified Healthcare IS Security Practitioner

·CompTIA CASP CompTIA Advanced Security Practitioner

·GIAC/SANS GSLC:GIAC Security Leadership

·GIAC/SANS GISP:GIAC Information Security Professional

·GIAC/SANS GCPM:GIAC Certified Project Manager

·GIAC/SANS GCIH:GIAC Certified Incident Handler

·ISC2 SSCP-Systems Security Certified Practitioner

·ISC2 CISSP-Certified Information Systems Security Professional

·ISC2 CCSP-Certified Cloud Security Professional

·ISC2 CSSLP-Certified Secure Software Lifecycle Professional

·ISC2 HCISPP-HealthCare Information Security and Privacy Practitioner

·EC-Council CCISO-Certified Cheif Information security Officer

·IACRB Certified SCADA Security Architect(CSSA)

·ISACA Certified in Risk and Information Systems Control ^TM (CRISC ^TM )

·ISACA Certified Information Security Manager ^® (CISM ^® )

·ISACA Certified in the Governance of Enterprise IT ^® (CGEIT ^® )

第四类：Auditing Certifications

主要是与信息安全审计有关的认证，包括：

·Mile2 CISMS-LA-Information Security Management Systems Lead Auditor

·Mile2 CISMS-LI-Information Security Management Systems Lead Implementer

·GIAC/SANS GSNA:GIAC Systems and Network Auditor

·ISACA Certified Information Systems Auditor(CISA)

第五类：Web Applications Security certifications

主要是与 Web 安全有关的认证，包括：

·Mile2 CSWAE-Certified Secure Web Application Engineer

·Offensive Security Web Expert-OSWE

·GIAC/SANS GWEB:GIAC Certified Web Application Defender

第六类：Vendor's certifications

主要是思科、CheckPoint、Juniper 等厂商推出的认证，包括：

·Cisco CCNA Cyber Ops

·Cisco CCNA Security

·Cisco CCNP Security

·Cisco CCIE Security

·Fortinet Network Security Expert(NSE)1 to 8

·Check Point Certified Security Administrator(CCSA)

·Palo Alto Accredited Configuration Engineer(ACE)

·Palo Alto Networks Certified Network Security Engineer(PCNSE)

·Symantec Certified Specialist(SCS)

·Blue Coat X-Series Certified Specialist(BCXCS)

·Blue Coat X-Series Certified Expert(BCXCE)

·Juniper Networks Certified Specialist Security(JNCIS-SEC)

·Juniper Networks Certified Professional Security(JNCIP-SEC)

·Juniper Networks Certified Expert Security(JNCIE-SEC)

9.2.2　认证机构

认证机构主要包括：(ISC)2、CompTIA、Offensive Security、ISACA、GIAC、Mile2、EC-Council 等，认证机构和其推出的认证如表 9-1 所示。

表 9-1　认证机构及其推出的认证