security_w_640

Coming Soon: GNFA, World’s First Network Forensics Certification

  • By
  • October 31, 2014
0 Comment

giac, gnfa, network forensics, it certification exams, global information assurance certification The incredible development of technology, which we have been witnessing for the past decade has brought a number of new professions and exciting career opportunities. From Certified Ethical Hackers (CEH)  to Digital Forensics, to many of these sound too cool to be true. Yet, they are true. And now digital forensics, more commonly known as Network Forensics, is getting an official certification program. Global Information Assurance Certification (GIAC), a leading provider of security certifications, is releasing a brand new credential: GIAC Network Forensics Analyst, or GNFA.

What is Network Forensics?

With a number of cybercriminals and cyber crimes steadily growing (no surprise as more and more various operations are conducted online), there is little wonder that digital forensics is on the rise. From government and law enforcement agencies to private companies and international corporations, digital security and forensics professionals are highly in demand. If you’re eying this career,  you need to know that network forensics experts should be capable of blocking the majority of system attacks, as well as, more importantly, to implicate the aggressors who manage to penetrate the system, or commit a cybercrime.

Cybercriminals become harder and harder to identify as their get better at hiding their traces, so they are harder to identify. Network forensics collects data from network traffic and analyzes it for threats or intrusions. As a result, a good network forensics expert should have a very solid understanding of how the system is built, as well as possess great analytical skills and understand the trends of how traffic flows.

GNFA Certification

Previously, there has been no certification to validate the skills in network forensics. Recently,GAC has announced the very first credential of such kind, GNFA (GIAC Network Forensics Analyst), which will be available starting this Monday, November 3, 2014.

The GNFA certification was developed for professionals who want to validate their qualification to perform examinations employing network forensic artifact analysis. This requires 100% understanding of the fundamentals of network forensics, normal and abnormal conditions for common network protocols, the process and tools used to examine device and system logs, wireless communication and encrypted protocols.

GNFA Exam Will Cover the Following Topics/Objectives:

  • Common Network Protocols – understanding of the behavior, security risks and controls of common network protocols.
  • Encryption and Encoding – techniques and practices used to encode and encrypt common network traffic and common attacks on these controls.
  • NetFlow Analysis and Attack Visualization – the use of NetFlow data and information sources to identify network attacks.
  • Network Analysis Tools and Usage – open source packet analysis tools and their purpose to effectively filter and rebuild data streams for analysis.
  • Network Architecture – design and deployment of a network employing diverse transmission and collection technologies.
  • Network Protocol Reverse Engineering – the tools and techniques required to analyze diverse protocols and data traversing a network environment.
  • Open Source Network Security Proxies – the architecture, deployment, benefits and weaknesses of network security proxies, common log formats and flow of data in a network environment.
  • Security Event and Incident Logging – various log formats, protocols and the security impact of the event generating processes; configuration and deployment strategies to secure and position logging aggregators and collection devices throughout a network environment.
  • Wireless Network Analysis the process to identify and control the risks associated with wireless technologies, protocols and infrastructure.

GNFA exam and certification are available starting November 3, 2014.

Comments
* The most recent comment are at the top

Interesting posts

The Growing Demand for IT Certifications in the Fintech Industry

The fintech industry is experiencing an unprecedented boom, driven by the relentless pace of technological innovation and the increasing integration of financial services with digital platforms. As the lines between finance and technology blur, the need for highly skilled professionals who can navigate both worlds is greater than ever. One of the most effective ways… Read More »

CompTIA Security+ vs. CEH: Entry-Level Cybersecurity Certifications Compared

In today’s digital world, cybersecurity is no longer just a technical concern; it’s a critical business priority. With cyber threats evolving rapidly, organizations of all sizes are seeking skilled professionals to protect their digital assets. For those looking to break into the cybersecurity field, earning a certification is a great way to validate your skills… Read More »

The Evolving Role of ITIL: What’s New in ITIL 4 Managing Professional Transition Exam?

If you’ve been in the IT service management (ITSM) world for a while, you’ve probably heard of ITIL – the framework that’s been guiding IT professionals in delivering high-quality services for decades. The Information Technology Infrastructure Library (ITIL) has evolved significantly over the years, and its latest iteration, ITIL 4, marks a substantial shift in… Read More »

SASE and Zero Trust: How New Security Architectures are Shaping Cisco’s CyberOps Certification

As cybersecurity threats become increasingly sophisticated and pervasive, traditional security models are proving inadequate for today’s complex digital environments. To address these challenges, modern security frameworks such as SASE (Secure Access Service Edge) and Zero Trust are revolutionizing how organizations protect their networks and data. Recognizing the shift towards these advanced security architectures, Cisco has… Read More »

CompTIA’s CASP+ (CAS-004) Gets Tougher: What’s New in Advanced Security Practitioner Certification?

The cybersecurity landscape is constantly evolving, and with it, the certifications that validate the expertise of security professionals must adapt to address new challenges and technologies. CompTIA’s CASP+ (CompTIA Advanced Security Practitioner) certification has long been a hallmark of advanced knowledge in cybersecurity, distinguishing those who are capable of designing, implementing, and managing enterprise-level security… Read More »

Azure DevOps Engineer Expert Certification: What’s Changed in the New AZ-400 Exam Blueprint?

The cloud landscape is evolving at a breakneck pace, and with it, the certifications that validate an IT professional’s skills. One such certification is the Microsoft Certified: DevOps Engineer Expert, which is validated through the AZ-400 exam. This exam has undergone significant changes to reflect the latest trends, tools, and methodologies in the DevOps world.… Read More »

img