| Industry
Library
Provided by: Core
Competence & Mactivity, Inc |
||
|
||
| Incident Response & Advisory Centers | ||
Cert(sm) Coordination Center CERT studies Internet security vulnerabilities, provides incident response services, publishes security alerts, researches security and survivability, and develops information to help you improve security at your site.
Common
Vulnerabilities & Exposures Web Page Computer
Incident Advisory Capability COAST
Homepage Defense
Information Systems Agency Center for Automated System Security Incident
Support Team (ASSIST, for DoD sites) Federal
Bureau of Investigation National Infrastructure Protection Center Federal
Computer Incident Response Capability (FedCIRC) Forum
of Incident Response and Security Teams (FIRST) Hacker
Emergency Response Team The
Information Warfare Site The
National Security Association (NSA) The
WildList Organization Virtual
Private Network Consortium VPNC |
||
| Portals, Info Sites & Publications | ||
2600 offers security related news and subscriptions to this well-known magazine.
Crypto-gram, a monthly email newsletter on cryptography from Bruce Schneier, discusses current issues in cryptography. Fyodor's Good Reading List is an intersting and eclectic collection of security related resources. The Hacker News Network provides daily updated information security news and commentary. InfoSysSec is a comprehensive computer and network security resource on the Internet for Information System Security Professionals--and they maintain the news crawler at the right... The Internet Protocol Journal, published by Cisco Systems. serves as an informational and educational resource for engineering professionals involved in the design, development, and operation of public and private internets and intranets. InteractiveInfoSec is a very good place for novices to security. The "see a hacker", "Be a Hacker" and "Stop a Hacker" are very good instructionals for those who want to Know the Enemy (thank you, Lance Spitzner). The Journal of Internet Security provides a DeLiberation Extranet to inform professionals and support discussions of electronic banking and commerce issues. NewOrder, a resource for people to help avoid being hacked, security and exploiting related files and links. Rik Farrow's Network Defense columns, from Network Magazines, are archived here. Packet Storm claims to be the largest and most up to date library of information security information in the world. Packet Storm is a security resource that provides the mechanism for both the underground and the corporate communities to converge and direct their efforts towards sharing security information. TechTarget's SearchSecurity.com offers a comprehensive Security specific search engine. Phrack is an unusual, unique, and remarkable collection of security research, articles, and, well lots of kewl stuff. SecuriTeam.com is a security news web site containing all the newest security information from various mailing lists, hacker channels and our own tools and knowledge. Windows & .NET Magazine's Security Administrator section of discusses NT/W2K/XP security issues, tips, and new products. It's a good source for learning the latest NT security breaches and corresponding hot fixes. SecurityPortal.com summarizes breaking security news and provides a launch point for Security Alerts, Products, Tools and other security resources. SecurityPortal also operates many informative mailgroups, including PEN-TEST and BUGTRAQ. SecurityFocus.com is designed to facilitate discussion on security related topics, create security awareness, and to provide the Internet's largest and most comprehensive database of security knowledge and resources to the public. offersThis portal has an oustanding collection of free tools. SecurityNews.org professes to provide Security News for Security Professionals. In addition to news stories, you'll find links to other security related material. TALISKER'S NETWORK SECURITY TOOLS PAGE offers a plethora of security tools and software, a MUST SEE! TechnoTronic is a hard-core security information site. Find postings of recent exploits and newly released security patches and hot fixes from all major OS and security vendors. You'll also find programs to test vulnerabilities, scan, and audit systems and networks. The ftp archives there are extensive. The TruSecure white paper library offers a variety of technical, strategic, and non-technical papers on information security. VPNlabs
is an open community for researching, reviewing, and discussing Virtual
Private Networks. |
||
| Security (Overview, General, Opinion) | ||
|
_______________________________________
Information
Risk Assessment: Practices of Leading Organizations
United States General Accounting Office |
||
| Authentication, PKI, Cryptography | ||
|
_______________________________________
Biometrics:
Threat or Menace?
by Stephen Kent |
||
| Intrusion Detection, Sniffing, & Anti-Hacking | ||
|
_______________________________________
A
TCP/UDP Ports database in an /etc/services format by Kurt Seifried |
||
| Virtual Private Networking, Secure Remote Access | ||
Virtual Private Networks (Primer) by Lee Chae Dial VPNs: Revenue Opportunity or Headache? by Lisa Phifer Firewalls and Virtual Private Networks by Fred Avolio How to stay in front of VPN management by Tim Greene Multi-Vendor VPNs: The Quest for Interoperability by Lisa Phifer Protocols for Remote Access VPN Services by Lisa Phifer The Core Competence VPN FAQ Page The Two Sides Of NAT by Pete Loshin The Trouble with NAT by Lisa Phifer Twelve Steps to Secure Remote Access Using IPsec by Lisa Phifer & Dave Piscitello Unlocking Virtual Private Networks by Mike Fratto VPN Client Administration by Lisa Phifer VPN Insider an archive of VPN articles, product reviews VPN Services: The Real Deal on Costs by Daniel M. Gasparro What is a VPN? by Dennis Ferguson VPNs: Virtually Anything? by Lisa Phifer VPNs: Low-Cost Solution For Remote Dial-Up Access by Lisa Phifer and David Piscitello _______________________________________
SSH:
From Secure Administration to Virtual Private Networking by Lisa
Phifer _______________________________________
_______________________________________
_______________________________________
|
||
| Firewalls | ||
|
|
||
| Application Stream Hacking & Security | ||
|
|
||
| Secure Electronic Mail | ||
|
|
||
| Security and the DNS | ||
|
|
||
| E-Commerce, Privacy | ||
|
|
||
| Broadband Local Access & Security | ||
|
|
||
| Client, Desktop and Stored File Security, Security Cards | ||
|
|
||
| Security & Programming | ||
|
|
||
| Operating System Security | ||
|
_______________________________________
A
Complete List of Windows Event Identifiers
|
||
| Third Party Host Scanners | ||
|
|
||
| Denial of Service (DOS) Attacks | ||
|
|