 Computers at Risk: Safe Computing in the Information Age - http://www.nap.edu/catalog/1581.html Complete text of the book by the System Security Study Committee, National Research Council, U.S., that presents an agenda for developing nationwide policies and practices for computer security. |
 CERT Coordination Center Vulnerability Database - http://www.kb.cert.org/vuls Vulnerability Notes published by the CERT Coordination Center. |
 ACM Crossroads Student Magazine - http://www.acm.org/crossroads/columns/onpatrol/november00.html Column: Security for Wide-Area Internet Routing. Nick Feamster. |
 ACM Crossroads Security feature articles - http://www.acm.org/crossroads/doc/indices/features.html#Security ACM Crossroads is the student magazine of the Association for Computing Machinery. Crossroads has published several articles about computer security, as listed in this index. |
 The ISO 17799 Security Standard - http://17799.macassistant.com Publication of ISO 17799 provided a milestone in the evolution of information security. This site provides background, information and resources on this important standard. |
 Introduction to Network Security - http://www.interhack.net/pubs/network-security/ A gentle introduction to the complex topic of network security. Geared especially toward those new to security, including end users and management. |
 CSOinformer - http://reavis.org/informer.shtml Monthly newsletter targeted at people who need a strategic, multi-year view of the information security industry. |
 Crypto-Gram - http://www.schneier.com/crypto-gram.html Monthly e-mail newsletter written by Bruce Schneier. Back issues available on site. |
 Crypto-Gram - http://www.schneier.com/crypto-gram-rss.xml Monthly computer security newsletter written by Bruce Schneier. |
 SC Magazine - Online - http://www.scmagazine.com/ Online counterpart to Secure Computing monthly magazine. Provides product reviews, solutions and articles for the systems security professional. |
 The Orange Book Site - http://www.dynamoo.com/orange Includes a summary of the DoD's "Trusted Computer System Evaluation Criteria" (Orange Book) - if you've ever wondered what a C2 security rating is, this is the place to find out. |
 Infosecurity Today Magazine - http://www.infosecurity-magazine.com Focuses on the practical experiences of IT security professionals, provides analysis of current tends, and independent reporting. |
 CSO (Chief Security Officer) Magazine - http://www.csoonline.com/ Provides information security executives with high-level information, best practices and strategic insight. |
 Lenny Zeltser - http://www.zeltser.com/malicious-agents/ Article examining the evolution of malicious agents by analyzing features and limitations of popular viruses, worms, and trojans, detailing the possibility of a new breed of malicious agents currently being developed on the Internet. |
 Network Security Library - http://secinf.net/ Windows, Unix, netware, WWW, firewalls, intrusion detection systems, security policy, books, papers, and articles. |
 Information Systems Security Journal - http://www.infosectoday.com/ Monthly print magazine for information security managers and others responsible for the daily, efficient operation of security policies, procedures, standards, and practices. |
 Cipher - http://www.ieee-security.org/cipher.html the Electronic Newsletter of the IEEE Computer Society Technical Committee on Security and Privacy. |
 Selected Papers in Anonymity - http://www.freehaven.net/anonbib/ A compilation of bibliographic references and links to influential papers relating to anonymity. Sorted by topic, date, and author. |
 NIST Computer Security Resource Clearinghouse - http://csrc.ncsl.nist.gov The Computer Security Resource Clearinghouse (CSRC) is designed to collect and disseminate computer security information and resources to help users, systems administrators, managers, and security professionals better protect their data and systems. |