GIAC releases new IT security certifications

BETHESDA: Global Information Assurance Certification (GIAC) has announced the release of two new IT security certifications - the GIAC Web Application Defender certification (GWEB) and the GIAC Exploit Researcher and Advanced Penetration Tester (GXPN).

GWEB is an application security certification and validates that a recipient has thorough knowledge of how to detect and remediate common web-based application security flaws and configuration errors. In addition to the GWEB, GIAC also features a certification for the offensive side of application security, the GIAC Web Application Penetration Tester (GWAPT)

The GWAPT is growing in popularity and was a finalist for the 2012 SC Magazine Best Certification award, a press release said.

The new GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) credential validates a professional's ability to conduct advanced penetration tests, to model the abilities of an advanced attacker to find significant security flaws in systems, and to recommend remediation strategies associated with these flaws. Penetration testing is a highly sought after skill. The GXPN certification joins GIAC's other credentials that reflect the range of skills and specializations common within the penetration testing field, the GIAC Penetration Tester (GPEN) and the GIAC Web Application.