Home > External Links > Network Security Resources

Rex Global Network Security Resources

Access Control List Resources (Cisco)

• Access Lists: Tricks of the Trade - Certification Zone's White Paper on configuring and deploying Cisco ACLs

• The Cost of Security on Cisco Routers - A Network Computing Tutorial on how implementing access control lists can impact Cisco routers

• Demystifying Cisco Access Control Lists - Network Computing Workshop on using Cisco ACL's

• Increasing Security on IP Networks - Cisco's Guide to network security using their products

Attack, Hacking, and Exploit Information

• AntiOnline - News and information on network security and hacking

• Bindview's RAZOR - A team of researches that produce news and information on network security and system vulnerabilities

• Cult of the Dead Cow - Home of information on BackOrifice

• Fyodor's Playhouse - Lot's of information on known exploits

• Gibson Research - Steve Gibson's collection of security tools, testers, and exploit information

• interhack - Information on network security issues

• NT Bugtraq - NTBugtraq is a mailing list for the discussion of security exploits and security bugs in Windows NT and its related applications

• NT Security - Information on Windows NT security and exploits

• Packet Defense - Information on InfoSec, exploits, and more

• Ping Of Death Page - Information on a flaw in many TCP/IP stacks that can allow a remote user to crash a system with a simple ping

• PPTP Crack - Information on the crack of Microsoft's Point-to-Point Tunneling Protocol

• SATAN Guide - A short paper on using SATAN, includes links to additional resources

• Security Administer's Tool for Analyzing Networks (SATAN) - Information and download sources for SATAN

• Security Administrator's Integrated Network Tool (SAINT) - Tool for performing security assessments

• Security Focus - Enormous collection of security resources and forums and home of bugtraq mailing lists

• Security Tracker - Their purpose in life is to report on computer security vulnerabilities

• TCP Loopback DoS Attack (land.c) and Cisco Devices - From Cisco's Web Site

DNS Security

• DNS Security - SANS Institute paper on DNS security

Denial of Service (DoS)

• Consensus Roadmap for Defeating Distributed Denial of Service Attacks - SANS institute document that outlines key trends and other factors related to DoS attacks and their prevention

• Denial of Service Attacks - White paper on DoS attacks. By IBM Global Services

• Denial of Service Attacks - White paper on detecting and preventing DoS attacks.  By Concord Communications

• DoShelp.com - Provides a wealth of information and resources on Denial of Service attacks

Firewall Information & Software

• Auditing Your Firewall Setup - A guide to auditing your firewall implementation and rulebase

• Audit My PC - Web-based tool for auditing your firewall vulnerability

• Building a Firewall with LINUX - Informative article by Arthur Donkers

• Cisco SAFE: A security blueprint for enterprise networks - Cisco's best practice information on designing and implementing secure networks

• COAST Internet Firewalls Resources - Large collection of links to firewall information

• Firewall and Proxy Server HOWTO - Mark Grennan's basic guide to setting up a filtering and proxy firewall using LINUX

• Freefire Project - Information and support for freeware firewall users and developers

• Internet Firewalls FAQ  - Guide to firewall and network security basics. A must read!

• Linux Security Administrator's Guide - Guide to Linux security and pointers to additional resources

• Public Domain Firewall Software Listing - A fairly complete listing of PD firewall software

Glossaries

• The Information Security Glossary - A comprehensive glossary of information security terms and phrases

• National Information Systems Security (INFOSEC) Glossary - From the National Security Telecommunications and Information Systems Security Instruction (NSTISSI)

• RFC 2828: Internet Security Glossary - From the Internet Society

Government Agencies and Security Organizations

• Computer Emergency Response Team (CERT) - U.S.-funded entity to study Internet security vulnerabilities, handle computer security incidents, publish security alerts, research long-term changes in networked systems, and develop information and training to help network improve security 

• Computer Incident Advisory Capability (CIAC) - U.S. Department of Energy response center for computer security incidents and threats

• Computer Security Institute (CSI) - Computer professional's organization that provides information on protecting network-based systems against attacks

• Forum of Incident Response and Secuirty Teams (FIRST) - Promotes coordination among various incident reponse teams

• International Computer Security Association (ICSA) - Provides security news and information as well as system certification information

• National Infrastructure Protection Center (NIPC) - U.S. based agency that serves as a national critical infrastructure threat assessment, warning, vulnerability, and law enforcement investigation and response entity.

• National Institute of Standards and Technology (NIST) - Computer Security Resource Clearinghouse

• System Administration, Networking, and Security (SANS)  Institute - cooperative research and education organization for sharing network security related information

Intrusion Detection

• Bro - A system for detection network intruders in real-time - a high-performance network intrusion detection system written by Vern Paxson of the Lawrence Berkeley National Laboratory's Network Research Group and of ACIRI

• FAQ: Network Intrusion Detection Systems - A detailed FAQ covering NIDS history, capabilities, and products

• Inferring Internet Denial-of-Service Activity - A white paper on using intrusion detection to detect DoS attacks

• Intrusion Detection FAQ - Everything you ever wanted to know about intrusion detection

• Snort: The Open Source Network Intrusion Detection System - Snort is a lightweight network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks

• Talisker's Intrusion Detection Systems - This independent site lists every known commercial Intrusion Detection System, plus a few other seasoned campaigners

Mailing Lists

• FireTower - Maintains Raptor firewall mailing list and archives

• Firewall Wizard Mailing List - A moderated list for the discussion of network firewall and security issues

Misc. Security Sites

• COAST Library - Several papers on various aspects of network security

• Computer Security Information - Links to general information about computer security including documents, faqs, and newsletters

• Computer Security Institute - Association for training of computer security professionals

• Firewall.cx - Contains a wealth of security and networking resources including guides to firewall topologies and architectures, networking guides, and networking and security downloads

• Fred Cohen and Associates - Huge collection of security related information from security guru Fred Cohen

• FreeRADIUS.org - An open source implementation of Radius

• GFI - Offers Freeware scanning and monitoring software for Windows NT/2000

• Idea Hamster- Home site for the open source security testing methodology manual, which has the distinction of trying to be an open standard for Internet security testing

• InfoSysSec - The Security Portal For Information System and Security Professionals

• Infowar.com - Security related information site sponsored by several network security organizations

• ISO17799, ISO 27001 and BS7799 - Probably the most complete information security standard portal

• IWS - The Information Warfare Site - News, discussions and mailing lists focusing on information security, information operations and e-commerce

• OPSEC: Open Platform For Security - Check Point's partnership effort to create end-to-end Internet Security 

• RobertGraham.Com - Various network security publications and FAQ's

• Security Dogs - Information on VPN's, Firewalls, NAT, and QoS

• Security ISO 27000 & ISO 27001 - Provides information on the wider ISO security standards, the 27000 series

• Security Search Engine - Looking for info on network security, you'll find it here

• SecWiz - A web collection of documents helping to solve your network security problems in system-specific detail

• Security Policies - Information security policies to download and evaluate

• Things that go bump in the Net - Security White Paper, By IBM

• TNO-FEL's URLography on Security Information - Links to many security resources

• Trinux - Linux Security Toolkit - A Linux security package that can run on 2-3 floppies

• WindowsSecurity - Tons of news and information resources for Microsoft Windows security

• WWW Security FAQ - Frequently asked questions on web site security

Virus Information

• Computer Virus Myths home page - Great source of info about viruses and hoaxes

• McAfee Anti-Virus Center - Information on viruses and virus hoaxes.  Also support for McAfee anti-virus products

• Symantec Anti-Virus Center - Up to the minute information on viruses and exploits