NGO in a Box - Security Edition
RESOURCES AND LINKS
Introductory and General:
References & others:
- On-line Privacy Tools: http://www.privacy.gov.au/internet/tools/ 5 steps to better on-line privacy - set of links to various tools: Firewall, Cookie Remover, Web Bug Remover, Anonymous Web Browsing, Encrypted Email, Advertising Filters, Anti-Spam Tools, Anti-Spyware Tools,
- “Secure Computing and Online Communications" - This document points to materials which will be of use to those new to online security and privacy issues, as well as resources for more advanced users.
- Online Resources for Readers of the Book "Internet Privacy for Dummies"- /www.internetprivacyfordummies.com
- Neil F. Johnson's Encryption links page
- Godzilla crypto tutorial - Totalling 704 slides tutorial on cryptography history, technical aspects, policy and politics. (see localy: HTML).
- “Anonymity Loves Company: Usability and the Network Effect"
Passwords:
Files destruction:
Backup:
Encryption:
Internet & communications:
Firewall:
Virus cleaners:
Recommended Security Lists:
- Bugtraq -- Arguably the most important Internet security list. Vulnerabilities are often announced here first, so check frequently! | Previous month | Archived posts | About list
- Full Disclosure -- An unmoderated high-traffic forum for disclosure of security information. Fresh vulnerabilities sometimes hit this list many hours before they pass through the Bugtraq moderation queue. The relaxed atmosphere of this quirky list provides some comic relief and certain industry gossip. Unfortunately 80% of the posts are worthless drivel, so finding the gems takes patience. | Current month | Archived posts | About list
- Penetration Testing -- While this list is intended for "professionals", participants frequenly disclose techniques and strategies that would be useful to anyone with a practical interest in security and network auditing. | Previous month | Archived posts | About list
- Vulnerability Development -- A moderated list for discussing possible security issues and devising exploits for them. | Previous month | Archived posts | About list
- Security Basics -- A high-volume list which permits people to ask "stupid questions" without being derided as "n00bs". I would recommend this list to network security newbies, but be sure to read bugtraq and other lists as well. | Previous month | Archived posts | About list
- Firewall Wizards -- Tips and tricks for firewall administrators | Previous month | Archived posts | About list
- VulnWatch -- A non-discussion, non-patch, all-vulnerability annoucement list supported and run by a community of volunteer moderators distributed around the world. | Current quarter | Archived posts | About list
- VulnDiscuss -- This sister-list of VulnWatch allows for discussions about new vulnerabilities. | Previous month | Archived posts | About list
- Incidents -- Lightly moderated list for dicussing actual security incidents (unexplained probes, breakins, etc). Topics include information about new rootkits, backdoors, trojans, virii, and worms. | Current month | Archived posts | About list
- Info Security News -- Carries news items (generally from mainstream sources) that relate to security. | Previous month | Archived posts | About list
- Security Jobs -- A popular list for advertising or finding jobs in the security field. Employers post openings and job seekers post resumes (run by SecurityFocus) | Previous month | Archived posts | About list
- IDS Focus -- Technical discussion about Intrusion Detection Systems. You can also read the archives of a previous IDS list | Current month | Archived posts | About list
- Web App Security -- Provides insights on the unique challenges which make web applications notoriously hard to secure. | Current quarter | Archived posts | About list
- MS Sec Notification -- Beware that MS often uses these security bulletins as marketing propaganda to downplay serious vulnerabilities in their products -- note how most have a prominant and often-misleading "mitigating factors" section. | Current quarter | Archived posts | About list
- Honeypots -- Discussions about tracking attackers by setting up decoy honeypots or entire honeynet networks. | Current quarter | Archived posts | About list
More Quality Lists
These may not all be directly security related, but I couldn't resist including them.
- The RISKS Forum -- Peter G. Neumann moderates this regular digest of current events which demonstrate risks to the public in computers and related systems. Security risks are often discussed. | Archived posts | About list
- Politech -- Journalist Declan McCullagh's list of news updates relating to politics and technology | Previous month | Archived posts | About list
References to the Tools:
Back to the Index