Up

What is the Web?

Privacy & Disclaimer

Visitors Since
Aug - 2004

Security Sites and Links

CERT Coordination Center

The CERT Coordination Center is located at the Software Engineering Institute of Carnegie Mellon University. Our activities are a component of the SEI Survivable Systems Initiative. Frequently Asked Questions at the CERT Coordination Center.

Microsoft Security Advisor

Known Security Issues and Solutions

Computer Incident Advisory Capability (CIAC)- U.S. Department of Energy

CIAC is the U.S. Department of Energy's Computer Incident Advisory Capability. Established in 1989, CIAC provides computer security services to employees and contractors of the United States Department of Energy. CIAC signs its bulletins and notes with a PGP encryption key. You may use this key to validate CIAC publications received via e-mail.

The Federal Computer Incident Response Capability (FedCIRC)

FedCIRC is a new initiative undertaken by the National Institute of Standards and Technology (NIST), the Department of Energy's Computer Incident Advisory Capability (CIAC), and the Carnegie Mellon, Software Engineering Institute's CERT/CC. These established computer security organizations have banded together to offer the Federal civilian community assistance and guidance in handling computer security related incidents. Review the FedCIAC resources list.

Computer and Network Security Reference Index

Various links to other security sites, including many commercial security product vendors.

NIST Computer Security Resource Clearinghouse

Forum of Incident Response and Security Teams - http://www.first.org

Includes information about security alerts, computer security conferences and events, security software tools, etc.

Audit Resource List

A list of mailing lists and pointers to Web sites dealing with internal auditing, including computer security auditing.

Coast Security Archive

Many security software tools and other security links and info.

Rutgers Web Security Site

Info about Web related security issues.

Yahoo Computer Security Business Page

List of Computer Security related businesses.

World Wide Web Security FAQ

Excellent source of information about practical Web security issues.

Hack Microsoft Site

Sponsers a contest for finding holes in Microsoft systems, promises to publish results. Certainly a dubious title for a site. However, the policy of users publishing information about security holes in operating systems is definitely the right one. Experience has shown that there is no other effective way to force vendors to fix these problems in a timely manner, nor to alert responsible users of the dangers they face.

Hostile Java Applets

Interesting site containing hostile Java applets that will crash Netscape and/or cause other problems. Contains source code and pointers to other sites which discuss problems with Java and applets.