Computer Security References

This is a list of Computer Security links that I have found useful and want to be able to find at any time.

Organizations

• SANS Institute Online
  • Model Security Policies
  • The 7 Top Management Errors that Lead to Computer Security Vulnerabilities
  • Mistakes People Make that Lead to Security Breaches
  • NSA Glossary of Terms Used in Security and Intrusion Detection
  • Intrusion Detection FAQ
• CIAC Bulletins
• Internet Software Consortium
• (ISC)², Inc.
• CERT (Computer Emergency Response Team)
• The Risks Forum
• Forum of Incident Response and Security Teams (FIRST)
• NIH Computer Security Informations
• Computer Operations, Audit, and Security Technology
• Home page for BUGTRAQ
• Packet Storm

Techniques/Tools

• Intrusion Detection
  • IDS FAQ
  • A Survey of IDS and log management tools
• Bastille Linux (I need to look at this)
• KnownGoods Database

General Reference

• Kurt Seifried Information Security
• Netsurfer Focus: Computer and Network Security
• RFC2196: Site Security Handbook
• SuSE Security Announcements
• The Secure Programming FAQ
• Linux Security
• Common Vulnerabilities and Exposures (CVE)
• Network Security Library

Essays on Security

• Cyber Hygiene, Not Cyber Fortress Protects Our Networks
• The National Strategy to Secure Cyberspace: a Sober Cyberassessment
• Cyber-security: Uncle Sam Needs You