Computer Security Information

Spring 2003

• Presentations

  • Database Security in an Enterprise Environment (PPT)

• Books

  • List of Computer Security Books (Word)

• Links

  • Mainstream Public/Government Security Organizations/Sites

    • CERT/CC (SEI/Carnegie Mellon)
    • Computer Security Research Center (federal government)
    • CERIAS - Center for Education and Research in Information Assurance and Security - Purdue
    • InfoSysSec
    • SANS (Sysadmin, Audit, Network, Security Institute - information, security certification)

  • Interesting Security Articles

    • Top 20 Vulnerabilities List (SANS & FBI)

  • Other Security Organizations/Sites

    • Insecure.org (top 50 tools, bugtraq list)
    • C4I - Computer Security and Intelligence
    • attrition.org (security information, web site defacement lists)
    • SecurityFocus
    • Open Web Application Security Project
    • Packet Storm (large archive)
    • The Honeynet Project
    • Attack Portals
    • Penetration Testing
    • netcraft.com
    • incidents.org
    • Gibson Research - notices and tools

  • Commercial Security Companies

    • Neohapsis
    • Black Hat
    • Counterpane Security
    • SAIC

  • Networking

    • Protocols.com (network/communication protocol information)
    • Network Protocols Chart
    • Networking Basics (from Cisco)
    • General Networking Terms (from Cisco)

  • Intrusion Detection Systems

    • Distributed Intrusion Detection Systems

  • Buffer Overflows

    • MIPS Buffer Overflow Paper (Andy Phillips/Jack Tan)
    • MIPS Buffer Overflow Slides (Andy Phillips/Jack Tan)
    • Intel Buffer Overflow Slides (D. Paul Benjamin, Pace University)

  • Passwords

    • Random Password Generator