Today I passed the GIAC Certified Intrusion Analyst (GCIA). The blog title refers to a Dilbert strip that I keep on the wall with my certifications. As I recall Certification Man says to Dilbert “Step back from that server, I’m certified!” In the next panel he says, “funny, that’s all I recall from the certification classes”.
The GCIA is the certification associated with the SANS Security 503 course “Intrusion Detection in Depth” that I took in April.
I think getting the certification is something tangible for management to show the training is worthwhile. Other than that, it doesn’t mean much unless you’re looking for another job.
I’ve worked with ISS RealSecure and some Cisco IDSM-2 modules. I was interested in learning a bit about Snort. Also the GCIA is a prerequesite for the GSE.