Security

comp.security Newsgroup FAQs comp.security Newsgroup FAQs- Security related FAQ covering a variety of subjects. Ronald L. Rivest's Cryptography and Security Ronald L. Rivest's Cryptography and Security- Provides links to cryptography and security sites. Packet Storm Packet Storm- Security information portal. Offers database of advisories, exploits, tools, papers and security news. Alexander Geschonneck's Security Site Alexander Geschonneck's Security Site- Collection of links to security resources, includes links to Lotus Domino and SAP R/3 security information. SecureRoot SecureRoot- Hacking and security related links. Also offers discussion forums. Itzalist Itzalist- Computer resources offering antivirus software, current virus news, antivirus patches, online protection, security software and other information about computer security. Data Analysis for CyberSecurity Data Analysis for CyberSecurity- Workshop supported by the Heilbronn Institute for Mathematical Research, University of Bristol. 25-26 March 2013. Registration, timetable. SecTor SecTor- Inspired by BlackHat, SecTor is taking a deeply technical look at threats with well known speakers and Canadian perspective. Venue and presentation details, call for speak… FIRST Conference FIRST Conference- Annual international conference focused on handling computer security incidents. Location varies. AusCERT AusCERT- International conference focusing on IT security. Held near Brisbane, Australia. VP4S-06: Video Processing for Security VP4S-06: Video Processing for Security- Conference focused on processing video data from security devices. June 7-9, 2006, Quebec City, Canada. Network and Distributed System Security Symposium Network and Distributed System Security Symposium- Annual event aimed at fostering information exchange among research scientists and practitioners of network and distributed syst… International Computer Security Audit and Control Symposium International Computer Security Audit and Control Symposium- This annual conference held in Ireland is for I.T. security professionals. LayerOne LayerOne- LayerOne is a technology conference and social event that is held in Los Angeles. They cover various aspects of computer security. SafeComp SafeComp- Yearly international conference on computer safety, reliability and security, held in September. Includes proceedings of past conferences, conference journals, links, sc… Security Decisions Conference and Seminar Security Decisions Conference and Seminar- A vendor neutral security conference for enterprise security managers and senior IT professionals. Tech Support Guy Security Forums Tech Support Guy Security Forums- Since 1996, Tech Support Guy has been providing free technical support to computer users of all experience levels. GFi Forums GFi Forums- Online discussion of security and messaging software. Security and Privacy Forums Security and Privacy Forums- Forums for discussing securing the home and SOHO users. Gladiator Security Forum Gladiator Security Forum- A forum to discuss general security matters. Wilders Security Forums Wilders Security Forums- Security forums covering a wide array of topics including spyware, viruses and privacy software. Security Forums Dot Com Security Forums Dot Com- Offers support forums on a selection of IT security topics including firewalls, encryption and malicious software. Based in UK. Bioidentification Bioidentification- FAQ covering basic information, performance, implementation, and security. AMAG Technology, Inc. AMAG Technology, Inc.- Manufacturer of card and biometric access control systems, with distribution worldwide. Includes articles and descriptions of products. Open Systems Management Open Systems Management- Password synchronization and role based access control across UNIX, Windows NT and resident applications. Site contains FAQs. Liberty Alliance Project Liberty Alliance Project- Standards organization with a global membership that provides a holistic approach to identity through open technical specifications. Specifications, init… The Open Group: Identity Management Forum The Open Group: Identity Management Forum- Consortium promoting open standards-based identity management. Includes downloadable white papers and information on current projects. Finally Software Finally Software- Enterprise security solutions based on PKI and Kerberos. Also offer a secure terminal emulator for connecting to Unix servers from Windows. Product information a… NMA, Inc. NMA, Inc.- ZSentry two-factor authentication solution. Product information, white papers and contact details. M-Tech Information Technology, Inc. M-Tech Information Technology, Inc.- ID-Synch, identity management software for managing user administration processes. Product information, customers, press releases and contact … Password Management Password Management- Paper by M. Bishop, 1991. Discusses problems of password selection and password management, and identifies relevant techniques. A Proactive Password Checker A Proactive Password Checker- Paper by M. Bishop, 1991. The author describes a technique, and a mechanism, to allow users to select passwords which to them are easy to remember bu… iisPROTECT iisPROTECT- Functions with Internet Information Server to secure web sites. Includes live demo. IIS User Authentication Tutorial IIS User Authentication Tutorial- Information on various methods for WWW password protection using Internet Information Server (IIS). Text-based tutorial with some screenshots. Vasco Vasco- Makers of both software and hardware systems. Demos, case studies and product information. Unisys Unisys- Makers of several related products. Includes rationale as well as usage information. Secure Remote Passwords Secure Remote Passwords- Software integrates into existing networked applications. Secure telnet and FTP available. Open source. User and technical documentation as well as source… Intertrust Technologies Corporation Intertrust Technologies Corporation- Develops general purpose digital rights management platform which serves as foundation for providers of digital information, technology and co… Apache HTTP Server Vulnerability Lists Apache HTTP Server Vulnerability Lists- Lists of security problems fixed in released versions of the Apache HTTP Server. SANS Internet Storm Center SANS Internet Storm Center- Cooperative cyber threat monitor and alert system. Features daily handler diaries that summarize and analyze new threats and events. Open Source Vulnerability Database Open Source Vulnerability Database- Searchable database of vulnerabilities. Offers data for download in XML format as well as via website. Details of how to submit new vulnerabili… SecurityFocus: Bugtraq SecurityFocus: Bugtraq- Full disclosure computer security vulnerabilities feed. Patch Management Forum Patch Management Forum- Mailing list facilitates networking and information exchange related to patch management: announcements, testing, verification, operations processes, and v… US-CERT US-CERT- Established in 2003 to protect the nation's Internet infrastructure, US-CERT coordinates defense against and responses to cyber attacks across the nation. Secunia Secunia- Provides security advisories and information about patches, and provides software for vulnerability management. PatchAdvisor PatchAdvisor- Fee based patch alert service. Bugtraq Bugtraq- Independent source for security vulnerabilities, alerts, and threats. AusCERT AusCERT- Australian Computer Emergency Response Team. Advisories and tools. PatchManagement.org PatchManagement.org- Mailing list dedicated to the discussion of patch management. CERIAS CERIAS- Center for Education and Research in Information Assurance and Security. University center for multidisciplinary research and education in areas of information security.