TABLE OF CONTENTS Web sites to visit to keep up to date on security matters
There are two major Web sites that monitor system cracker activity across the Internet:
http://www.cert.org: CERT (located in the Carnegie Mellon Software Engineering Institute) is a federally funded security research and development center. The CERT site posts security alerts, papers on the result of security research, and security tips for end users. Documents on the site identify threats, describe how they work, and suggest remedies. CERT also offers professional training courses.
http://isc.sans.org: SANS is a training institute that also monitors Internet security threats. Its Internet Storm Center site also presents an analysis of various threats over the recent past.
Other professional sites include:
http://www.auscert.org.au/render.html?cid=1: The Australian Computer Emergency Response Team.
http://ciac.llnl.gov/cgi-bin/index/bulletins: Computer Incident Advisory Capability (CIAC) from the U.S. Department of Energy.
http://www.secureroot.com/: A wide variety of links to descriptions of types of attacks, current security advisories, forums, exploits categories by platform, and so on.
http://www.antiphishing.org: The site of the Anti-Phishing Working Group, an organization the monitors phishing attempts and provides advice on how to avoid being trapped by them.
http://www.staysafeonline.info/: The National Cyber Security Alliance provides security tips for small business and home end users. The information there may be useful as part of a user education program.
http://securityresponse.symantec.com/: Symantec, a developer of security software, provides updates on the most recent viruses to emerge.
