เริ่มต้นเรียน Network Security / Cybersecurity ที่ไหนดี?
ไม่มี "ที่เดียวที่ดีที่สุด" แต่มี เส้นทาง (Pathway) ที่พิสูจน์แล้ว ขึ้นอยู่กับ: พื้นฐาน, เป้าหมาย, งบประมาณ, เวลา, และ Learning Style
ขั้นตอนที่ 1: ประเมินตัวเอง (Self-Assessment)
- Background: IT/CS/Engineering? หรือ Non-tech (Business, Liberal Arts, Other)?
- Strengths: ชอบ Coding? Networking? Analysis? Policy? Hardware? People?
- Goal: SOC Analyst? Pen Tester? Cloud Sec? GRC? CISO? Research?
- Constraints: Full-time Study? Part-time? Self-paced? Budget? Location?
ขั้นตอนที่ 2: สร้างพื้นฐาน (Foundation - ฟรี/ถูก)
| หัวข้อ | แหล่งเรียนรู้ฟรี/คุ้มค่า | เวลาประมาณ |
|---|
| Networking (TCP/IP, DNS, HTTP, TLS, Routing) | Computer Networking: A Top-Down Approach (Kurose/Ross), Cisco NetAcad (Free), Professor Messer (YouTube), NetworkChuck | 40-60 hrs |
| Linux Fundamentals (CLI, FS, Permissions, Services, Bash) | Linux Journey, OverTheWire Bandit, Linux Foundation Free Courses, edX Linux Basics | 30-50 hrs |
| Windows Fundamentals (AD, PowerShell, Registry, Event Logs) | Microsoft Learn (Free), 13Cubed (YouTube), Active Directory Labs | 30-40 hrs |
| Programming (Python - Required for All Paths) | Automate the Boring Stuff (Free), Python.org Tutorial, Corey Schafer (YouTube), Boot.dev | 40-60 hrs |
| Security Basics (CIA, Threats, Vulns, Risk, Controls) | CompTIA Security+ SY0-701 Course (Professor Messer Free), NIST CSF, OWASP Top 10 | 40-60 hrs |
| Cloud Basics (AWS/Azure/GCP Free Tier) | AWS Skill Builder, Microsoft Learn, Google Cloud Skills Boost (Free Tier Labs) | 20-40 hrs |
ขั้นตอนที่ 3: เลือกเส้นทางเฉพาะเจาะจง (Specialization Paths)
🛡️ Path A: Blue Team / SOC / Defensive Operations (Entry Level เยอะที่สุด)
- Certs: Security+ → CySA+ → GCIH/GCFA → CISSP
- Skills: SIEM (Splunk/Elastic/Sentinel), EDR, Threat Hunting, Incident Response, Detection Engineering (Sigma, KQL)
- Labs: Blue Team Labs Online, LetsDefend, TryHackMe (SOC Path), RangeForce, CyberDefenders
🎯 Path B: Red Team / Penetration Testing / Offensive Security
- Certs: Security+ → eJPT → OSCP → OSEP/OSED/OSWE
- Skills: AD Attack, AV/EDR Evasion, C2, Pivoting, Exploit Dev, Web App, API, Cloud
- Labs: Hack The Box (Pro), TryHackMe (Offensive), Proving Grounds, VulnHub, PG Practice
☁️ Path C: Cloud Security (High Demand, High Pay)
- Certs: Security+ → Cloud Fundamentals (AWS/Azure/GCP) → CCSP / Vendor Specialty
- Skills: IAM, Network, Data, Compute, Container/K8s Security, IaC Security, CSPM, CIEM
- Labs: CloudGoat, Stratus Red Team, ScoutSuite, Prowler, CloudSploit, HackTheBox Cloud
🏗️ Path D: Application Security / DevSecOps
- Certs: Security+ → GWAPT/OSWE → CSSLP
- Skills: SAST/DAST/SCA/IAST, Secure Code Review, Threat Modeling, CI/CD Pipeline Security, Shift Left
- Labs: PortSwigger Web Security Academy (Free), OWASP Juice Shop, DevSecOps Labs
📋 Path E: GRC / Risk / Compliance / Policy (Less Technical, High Impact)
- Certs: Security+ → CISM → CISSP / CRISC / CISA
- Skills: Risk Assessment, Policy Writing, Audit, Compliance (NIST, ISO, PCI, GDPR, PDPA), Vendor Risk
- Background: Law, Business, Audit, Accounting, Public Policy เหมาะมาก
🔬 Path F: Specialized Niches (High Value, Less Competition)
- IoT/Embedded/OT/ICS Security: Hardware, Firmware, Radio (SDR), PLC/SCADA, IEC 62443
- Malware Analysis / Reverse Engineering: Assembly, Ghidra/IDA, Volatility, YARA, GREM
- Cryptography / Applied Crypto: Math, Protocol Design, Post-Quantum, ZKP
- AI/ML Security: Adversarial ML, Model Extraction, Data Poisoning, LLM Security
- Digital Forensics / DFIR: Disk, Memory, Mobile, Cloud Forensics, GCFA/GNFA
แพลตฟอร์มเรียนรู้แนะนำ (Learning Platforms)
| Platform | ราคา | จุดเด่น | เหมาะสำหรับ |
|---|
| TryHackMe | $10-14/เดือน | Guided, Gamified, Learning Paths, Beginner Friendly | Beginner, Structured Learning |
| Hack The Box | $14/เดือน (VIP) | Realistic, Retired Machines, Pro Labs, CTF, University | Intermediate/Advanced, OSCP Prep |
| INE / eLearnSecurity | $50-90/เดือน | Deep Dive Courses, Cert Prep (eJPT, eCPPT, eWPT) | Cert-focused, Structured Curriculum |
| OffSec (OSCP) | $1499 (PWK+Exam) | Gold Standard Pentest Cert, Hard, Hands-on | Serious Pentester |
| SANS / GIAC | $8000-9000/Course | Elite Training, Gold Standard Certs, Work Study Program | Employer-sponsored, Career Acceleration |
| Coursera / edX | $49-79/เดือน หรือ Audit Free | University Courses (Google, IBM, Meta, UColorado, UMD) | Academic Credential, Flexible |
| Cybrary / Pluralsight / A Cloud Guru | $29-50/เดือน | Video Courses, Skill Assessments, Labs, Cert Prep | Video Learner, Cert Prep |
| YouTube (Free) | Free | Professor Messer, NetworkChuck, David Bombal, John Hammond, LiveOverflow, IppSec, The Cyber Mentor | Supplemental, Specific Topics |
การศึกษาอย่างเป็นทางการ (Formal Education)
- Associate Degree (2 ปี): Community College - Network Security, Cybersecurity (Transferable to Bachelor's)
- Bachelor's Degree (4 ปี): CS, Cybersecurity, IT, InfoSec - CAE-CD/CAE-R Designated Schools (NSA/DHS)
- Master's Degree (1-2 ปี): MS Cybersecurity, MS Information Security, MBA Cybersecurity - Online Options (Georgia Tech OMSCS ~$10K, UT Austin, Georgia Tech, Boston University, NYU)
- Bootcamps (3-6 เดือน): Fullstack, Flatiron, Springboard, Level Effect, Evolve Security - Career Services, Job Guarantee (บางค่าย)
Home Lab (ห้องปฏิบัติการที่บ้าน) - สำคัญที่สุดสำหรับ Hands-on
- Minimum: Laptop 16GB RAM + VMware Workstation/VirtualBox + Kali Linux + Target VMs (Metasploitable, DVWA, VulnHub)
- Recommended: Mini PC / Old Enterprise Server (Dell R720, HP DL380) + Proxmox/ESXi + PfSense/OPNsense + AD Lab + SIEM (Wazuh/Elastic) + K8s Cluster (k3s/Talos)
- Cloud Lab: AWS/Azure/GCP Free Tier + Terraform + CloudGoat + Stratus Red Team
- Network Gear: MikroTik, Ubiquiti, Cisco (Lab), Aruba Instant On (Cheap Managed Switch/AP)
Community & Networking (สำคัญไม่แพ้ Skill)
- Discord: THM, HTB, OSCP, Blue Team, Red Team, Cloud Sec, Local Communities (ThaiSec, Bangkok Cyber)
- Reddit: r/netsec, r/securityCTF, r/AskNetsec, r/cybersecurity, r/OSCP, r/blueteamsec
- Conferences (Thailand): THCON, Code Blue, BSides Bangkok, RootTheBox, OWASP Thailand, Nullcon
- Certifications Study Groups: Discord/Telegram สำหรับแต่ละ Cert
- Mentorship: ค้นหา Mentor ผ่าน LinkedIn, Community, Women in CyberSecurity (WiCyS), Minority Groups
Roadmap 6 เดือนแรก (ตัวอย่าง Beginner → Junior SOC Analyst)
| เดือน | Focus | Action Items | Milestone |
|---|
| 1 | Networking + Linux + Python Basics | NetAcad CCNA1, Linux Journey, Python Basics, TryHackMe Pre-Security | เข้าใจ Packet Flow, Linux CLI, Python Script |
| 2 | Security+ Prep + Windows/AD Basics | Prof Messer Security+ (Free), Microsoft Learn AD, TryHackMe Complete Beginner | Security+ Ready, AD Concepts |
| 3 | Security+ Exam + SOC Basics | Schedul Exam, TryHackMe SOC Level 1, Splunk Fundamentals (Free) | Pass Security+, Basic Splunk |
| 4 | Blue Team Labs + Detection | LetsDefend/Blue Team Labs, Sigma Rules, KQL, MITRE ATT&CK | Write 3 Detections, Investigate 5 Alerts |
| 5 | Cloud + Project | AWS/GCP Free Tier, CloudGoat, Build Detection Lab (GitHub) | Cloud Basics, Portfolio Project |
| 6 | Job Hunt Prep | Resume, LinkedIn, Mock Interview, Apply 20+/week, CTF/Writeups | Interviews → Offer |
สรุป
เริ่มที่: Foundation (Net, Linux, Python, Security+) ฟรี/ถูก → เลือก Path ตามเป้าหมาย → เรียนบน Platform ที่เข้ากันได้ → สร้าง Home Lab → เข้าร่วม Community → สอบ Cert ที่เกี่ยวข้อง → สร้าง Portfolio (GitHub, Blog, Writeups) → Apply Job ไม่มีทางลัด แต่มีเส้นทางที่พิสูจน์แล้ว
