Sans InternetStormCenter

dshield Geographic Port Probe Distribution

General Security Resources 

Title

URL

Spafford's Security Links

www.cs.purdue.edu/homes/spaf/hotlists/csec.html 

Internet Attacks 

www.clark.net/pub/mjr/pubs/attck/index.htm 

Attack and Defense related details of NetBIOS and CIFS resource-sharing networks 

avian.org/avian/papers/cifs.txt 

Basic Flaws in Internet Security and Commerce 

http.cs.berkeley.edu/~gauthier/endpoint-security.html 

Securing Internet information servers

ciac.llnl.gov//ciac/documents/ciac2308.html 

CERT Advisories

ftp://info.cert.org/pub/cert_advisories/ 

Federal Criteria for Information Technology Security, Volume 1 (PostScript) 

www.alw.nih.gov/Security/FIRST/papers/criteria/fcvol1.ps 

Federal Criteria for Information Technology Security, Volume 2 (PostScript) 

www.alw.nih.gov/Security/FIRST/papers/criteria/fcvol2.ps 

Bugtraq list in hypermail

www.eecs.nwu.edu/~jmyers/bugtraq/index.html 

The RISKS Forum

catless.ncl.ac.uk/Risks 

Firewalls mailing list

www.greatcircle.com/firewalls 

2600 Magazine

www.2600.com 

Journal of Computer Security

www.jcompsec.mews.org/ 

Back issues ofComputer and Communications Security Reviews 

www.cl.cam.ac.uk:80/users/rja14/#SR 

Journal of Internet Security

www.csci.ca/jisec/ 

Site Security Handbook

ftp://nic.merit.edu/documents/fyi/fyi8.txt 

GAO reports on computer security

ftp://nic.merit.edu/cise/ 

FIRST Archive of Security Papers

www.alw.nih.gov/Security/first-papers.html 

Netpassword - changing passwords safely across the net 

http1.brunel.ac.uk:8080/depts/cc/Papers/netpassword-paper/paper.html 

Firewalls Are Not Enough!

www.tis.com/docs/products/gauntlet/FirewallsNotEnough.html 

JavaScript Problems I've Reported

www.osf.org/~loverso/javascript/index.html 

Internet Insecurity Survey

www.trouble.org/survey/ 

Hackers Catalog

www.hackerscatalog.com 

Internet Security Systems, Inc.

www.iss.net/ 

ZONEOFTRUST.COM

199.107.171.3/html/mass.cfm 

How to choose passwords

www.cs.purdue.edu/homes/spaf/hotlists/www.encryption.com/pphrase.htm 

AT&T Papers - Internet Security

ftp://research.att.com/dist/internet_security/ 

Oxford Security Papers

ftp://ftp.ox.ac.uk/pub/comp/security/doc/ 

BugNet

bugnet.com/ 

The Üebercracker's Security Web

underground.org/ 

Computer Operations, Audit, and Security Technology (COAST): 

www.cs.purdue.edu/coast/coast.html

Computer Research and Technology, National Institutes of Health Security World Wide Web (WWW) Sites 

www.alw.nih.gov/Security/security-www.html

Computer Security Information (a good overall list) 

www.alw.nih.gov/Security/security.html

Computer Security Institute (a must see site)

www.gocsi.com/

Cybertek Archives (interesting and unusual stuff)

l0pht.com/~oblivion/cybertek/cybertek.html

EFF "Privacy, Security, Crypto, & Surveillance" Archive

www.eff.org/pub/Privacy/

FIRST security papers

www-itg.lbl.gov/ITG/KDTF/docs/www.alw.nih.gov-FIRST.Security.Papers.html

Information Security Institute at George Mason University

www.isse.gmu.edu/~csis/

Information Warfare

www.rain.org/~lonestar/security.htm

LSE Computer Security Research Centre

csrc.lse.ac.uk/csrc/gtway2.htm

NCSA Hotlinks Directory

www.ncsa.com/hotlinks/

NCSA Web Site Certification

www.ncsa.com/webcert/wcfg.html

Raptor Systems' Security Library (Very Extensive!)

www.raptor.com/lib/index.html

Ron Rivest’s Cryptography and Security site (recommended)

theory.lcs.mit.edu/~rivest/crypto-security.html

RSA Data Security Systems

www.rsa.com

Rutger’s WWW Security References

www-ns.rutgers.edu/www-security/reference.html

Telstra’s Security Papers and Documents

www.telstra.com.au/pub/docs/security/

U.S. Department of Energy Computer Incident Advisory Capability (CIAC)

ciac.llnl.gov

University of Auckland’s Security and Encryption-related Resources and Links

www.cs.auckland.ac.nz/~pgut001/links.html

W3C Security Resources

www.w3.org/pub/WWW/Security/Overview.html

Windows NT Security FAQ 

www.it.kth.se/~rom/ntsec.html

WWW Security FAQ

www.w3.org/Security/Faq/