Security Related Links

Security Related Links

Table of Contents

Resources and Sites of Interest
Security and Best Practices Checklists
Survivability and Resiliency
Incident Management
- Incident Handling and Response
- Forensics
Operating Systems
- Unix Security
- Windows Security
Firewalls, IDS and Other Defense Mechanisms
Applications and Protocols
- WWW Security
- DNS
- NTP
- TCP/IP
- Mail Relay
- Secure Programming
Internet Standards
- RFCs
- Internet Drafts
Malicious Code and other Attacks

Resources and Sites of Interest

SSAC Reports and Advisories, ICANN
The Twenty Most Critical Internet Security Vulnerabilities (Updated) -- The Experts' Consensus, SANS Institute
Know Your Enemy: The Tools and Methodologies of the Script Kiddie, The Honeynet Project
Botnets as a Vehicle for Online Crime, CERT
Improving Computer Security through Network Design, AusCERT
Talisker Security Wizardry Portal
SANS Institute
COAST Hotlist: Computer Security, Law and Privacy, CERIAS, Purdue University
Internet Storm Center, SANS Institute
SecurityFocus

Security and Best Practices Checklists

UNIX and Linux Security Checklist v3.0, AusCERT
Práticas de Segurança para Administradores de Redes Internet -- Checklist, CERT.br
Checklist para Usuários Finais: Cartilha de Segurança para Internet, CERT.br
Windows Intruder Detection Checklist, CERT
Secure Unix Programming Checklist, AusCERT

Survivability and Resiliency

Incident Handling and Response

Forensics

First Responders Guide to Computer Forensics, CERT
First Responders Guide to Computer Forensics: Advanced Topics, CERT
Computer Forensics Analysis Class -- Class handouts from the full-day class on UNIX computer forensics analysis given by Dan Farmer and Wietse Venema on August 6th, 1999.
The Coroner's Toolkit (TCT) -- collection of programs by Dan Farmer and Wietse Venema for a post-mortem analysis of a UNIX system after break-in.
The Sleuth Kit (TSK) -- a collection of UNIX-based command line tools that allow you to investigate a computer.
The Autopsy Forensic Browser -- a graphical interface to the command line digital investigation tools in The Sleuth Kit.

Unix Security

Windows Security

Windows NT Configuration Guidelines, AusCERT
Microsoft Security
WinDump: tcpdump for Windows
Windows Intruder Detection Checklist, CERT

Egress Filtering

Firewalls

Intrusion Detection

Honeynets and Honeypots

Honeypots e Honeynets: Definições e Aplicações, CERT.br
The Honeynet Project
Honeynet.BR Project
Brazilian Honeypots Alliance -- Distributed Honeypots Project
Honeypots: Definitions and Value, Lance Spitzner
Books:
- Know Your Enemy, 2nd Edition, The Honeynet Project
- Honeypots: Tracking Hackers, Lance Spitzner
- Virtual Honeypots: From Botnet Tracking to Intrusion detection., Niels Provos, Thorsten Holz

Crypto

WWW Security

The World Wide Web Security FAQ
Writing secure CGI scripts
Secure Programming in PHP, Thomas Oertli
PHP Security Tips
8 Defensive Programming Best Practices to Prevent Breaking Your Sites, Manuel Lemos
PHP Security
- Part 1
- Part 2
- Part 3
On the Security of PHP
- Part 1
- Part 2
Ten Security Checks for PHP
- Part 1
- Part 2
Top ten security vulnerabilities in web applications, OWASP
PHP and the Top ten security vulnerabilities in web applications
Cross-site scripting, IBM
Cross Site Scripting Info, Apache
Results of the Security in ActiveX Workshop, CERT
CERT Advisory CA-2000-02 Malicious HTML Tags Embedded in Client Web Requests, CERT

DNS

The Measurement Factory -- DNS Expertise
DNSReport - See if there are problems with your DNS
DNS Stuff
Securing an Internet Name Server, CERT
DNS Security Basics, DNS Stuff
DNSstuff's Resource Center
Security and Stability Advisory Committee (SSAC) Reading List
DNS Amplification Attacks:

NTP

TCP/IP

Mail Relay

Anti-Relay: Stop Third-Party Mail Relay

Secure Programming

Secure Coding Initiative, CERT
Build Security In -- best practices, tools, guidelines, rules, principles, and other resources for software developers, US-CERT
SANS Software Security Institute
Secure Programming for Linux and Unix HOWTO
Secure Unix Programming Checklist, AusCERT
Secure UNIX Programming FAQ
Writing secure CGI scripts
The Software Security Project
Splint - Secure Programming Lint
Secure Programming in PHP, Thomas Oertli
Selected Articles on Secure Programming
Books, papers and articles -- from the appendix of the book "Secure Coding: Principles and Practices"

RFCs

Best Current Practices (BCP)

Standards

Informational

Experimental

Internet Drafts

Denial of Service

Denial of Service (DoS) Attack Resources
Managing the Threat of Denial of Service Attacks, CERT
Distributed Denial of Service (DDoS) Attacks/tools, Washington University
Consensus Roadmap for Defeating Distributed Denial of Service Attacks, SANS Institute
Help Defeat Distributed Denial of Service Attacks: Step-by-Step, SANS Institute
Defining Strategies to Protect Against TCP SYN Denial of Service Attacks, CISCO
Trends in Denial of Service Attack Technology, CERT
DNS Amplification Attacks:

Social Engineering

Social Engineering Fundamentals, Part I: Hacker Tactics, SecurityFocus
Social Engineering Fundamentals, Part II: Combat Strategies, SecurityFocus

Spam

Hoaxes and Virus

CIAC HoaxBusters, CIAC
Internet Chain Letters, CIAC
comp.virus Newsgroup FAQs, faqs.org
Computer Virus Myths
Symantec Security Response, Symantec
McAfee Virus Information, McAfee
F-Secure Virus Description Database, F-Secure
Sophos Security Information: Viruses, Spam, Trojans, Hoaxes, Spyware and Adware, Sophos
CERT Coordination Center Computer Virus Resources, CERT