Currently, SANS penetration testing courses are associated with three highly sought-after GIAC certifications: GCIH, GPEN, and GWAPT. Each of these certifications indicates a holder processes the technical expertise and has mastered the process components vital to implementation and execution of information security best practices.
GIAC Certified Incident Handler (GCIH)
Incident handlers manage security incidents by understanding common attack techniques, vectors and tools as well as defending against and/or responding to such attacks when they occur. The GCIH certification focuses on detecting, responding, and resolving computer security incidents. Read More
GIAC Penetration Tester (GPEN)
The GPEN certification is for security personnel whose job duties involve assessing target networks and systems to find security vulnerabilities. Certification objectives include penetration-testing methodologies, the legal issues surrounding penetration testing and how to properly conduct a penetration test as well as best practice technical and non-technical techniques specific to conduct a penetration test. Read More
GIAC Web Application Penetration Tester (GWAPT)
Web applications one of the most significant points of vulnerability in organizations today. Most organizations have them (both web applications and the vulnerabilities associated with them). Web app holes have resulted in the theft of millions of credit cards, major financial loss, and damaged reputations for hundreds of enterprises. The number of computers compromised by visiting web sites altered by attackers is too high to count. This certification measures and individuals understanding of web application exploits and penetration testing methodology. Check your web applications for holes before the bad guys do. Read More
GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
Security personnel whose job duties involve assessing target networks, systems and applications to find vulnerabilities. The GXPN certifies that candidates have the knowledge, skills, and ability to conduct advanced penetration tests, how to model the abilities of an advanced attacker to find significant security flaws in systems, and demonstrate the business risk associated with these flaws. Read More
