Information Security
General
- "; $listOff = "
- ";
my $tableClose = "
"; &PRINT($titles); $s++ } &PRINT($tableClose); } else { foreach my $items (@{$rss->{'items'}}) { next unless defined($items->{'title'}) && defined($items->{'link'}) && ($s <= $num); my $titles = "
#!/usr/bin/perl -Tw ############################################################################## # rss2si.pl # # This program writes out a html table or list that can be placed into a # normal html page for displaying RSS feed on the web. The progam is a # modified version of rss2js.pl by Nik Jewell (see below). Modification # done by Kåre Presttun, kare(at)presttun.org 07th March 2004. # # The modification makes the program suitable for being run from SSI. # Typical usage is like this: # # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # ############################################################################## ############################################################################## # rss2js.pl # # # # This program writes out an RSS file to JavaScript for remote display # # # # by Nik Jewell. v0.2 20th May 2002 # # # # Configuration of the visual display characteristics can be carried out # # with the accompanying rssconfig.pl script # # # # Please contact L.N.Jewell@leeds.ac.uk with bugfixes, suggested # # improvments or for assistance # # # # Copyright (C) 2002 PRS-LTSN # # # # This program is free software; you can redistribute it and/or # # modify it under the terms of the GNU General Public License # # as published by the Free Software Foundation; either version 2 # # of the License, or (at your option) any later version. # # # # This program is distributed in the hope that it will be useful, # # but WITHOUT ANY WARRANTY; without even the implied warranty of # # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # # GNU General Public License for more details. # # # # You should have received a copy of the GNU General Public License # # along with this program; if not, write to the Free Software # # Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA # ############################################################################## # Modules use strict; use CGI; use LWP::Simple; use XML::RSS; # Declare global variables my ($width,$height,$listOn,$listOff); # Create an instance of CGI my $query = new CGI; ##################################################################### # Collect the query data my $remote = $query->param('remote'); my $name = $query->param('name'); my $nameDesc = $query->param('nameDesc'); my $image = $query->param('image'); my $desc = $query->param('desc'); my $num = $query->param('num'); my $box = $query->param('box'); my $copyr = $query->param('copyr'); my $date = $query->param('date'); my $list = $query->param('list'); my $wid = $query->param('wid'); ##################################################################### # Create an instance of XML::RSS my $rss = new XML::RSS; # Fetch the remote file my $xml = get($remote); # Parse the retrieved file $rss->parse($xml); # Create the html table &OUTPUT($rss); ##################################################################### # Main display sub OUTPUT { if (not defined $wid) { $wid = '200' } # Display news items as list items? if (defined($list)) { $listOn = "
- "; $listOff = "
- ";
my $tableClose = "
"; &PRINT($titles); $s++ } &PRINT($tableClose); } else { foreach my $items (@{$rss->{'items'}}) { next unless defined($items->{'title'}) && defined($items->{'link'}) && ($s <= $num); my $titles = "
ISO/IEC 27000 series
Management and Audit
Firewalls
- Firewall Product Overview originally by Catherine Fulmer
- Firewall and Proxy Server HOWTO by Mark Grennan
- Linux Firewall and Security Site
- Internet Firewalls: Frequently Asked Questions by Matt Curtin and Marcus J. Ranum
- Port Knowledgebase from ISS
- Port Numbers from IANA
- The PortsDB Project
Benchmarks / Guides
Common Criteria
- Common Criteria Portal
- NIAP - National Information Assurance Partnership (US)
- SERTIT - sertifiseringsmyndigheten for IT sikkerhet (NO)
- Common Criteria - Wikipedia
Web Security
- The World Wide Web Security FAQ
- OWASP - Open Web Application Security Project
- WASC - Web Application Security Consortium
- Cgisecurity.com: Web Security
- Nikto - web server scanner
- WHArsenal - web application security productivity tool
(D)DoS
Many (Distributed) Denial of Service (DoS) attacks work because ISPs (Internet Service Providers) does not do their job. When you are at the end of a link and are under a DoS attack there is not very much you can do. ISPs on the other hand can do a lot to prevent attacks from reaching their customers and to prevent attacks being launched from their networks. Unfortunately very few of them do it.
- Denial of Service attack against GRC.COM by Steve Gibson
- Distributed-Systems Intruder Tools Workshop by CERT/CC
- Distributed Denial of Service (DDoS) Attacks/tools by Dave Dittrich
- Network Ingress Filtering: rfc 2827/BCP 38
- Bogon List by Rob Thomas. Get it via BGP
- Reverse Path Forwarding by Cisco and Juniper
IDS (Intrusion Detection Systems)
- Snort and SnortCenter - NIDS - SnortSnarf - Oinkmaster
- PureSecure - Free for home users (Snort management)
- Prelude - Hybrid IDS
- Firestorm - NIDS
- Hank - NIDS
- BENIDS - NIDS
- Tamandua - NIDS
- SANS IDS FAQ
- Talisker: IDS overview
- SANS: Anti-IDS Tools and Tactics
- HogWash - Intrusion Prevention System (IPS)
- "Receive only" sniffing cable - for NIDS - RJ-45 Pinouts
Scanners | Testing
- Nessus - remote security scanner
- Nikto - web server scanner
- Nmap - network exploration or security auditing
- dsniff - network auditing and penetration testing
- fragroute - testing of NIDS, firewalls, and basic TCP/IP stack behaviour
- Talisker: Vulnerability Scanners Overview
Honeypots
- Honeypots: Tracking Hackers
- The Bait and Switch Honeypot
- Intrusion Detection Systems, Honeypots, and Incident Handling
Other Tools
- @stake - tools, Netcat among others
- Foundstone - Free Tools
- SecurityFocus Tools Archive
- Packet Storm - tools, info etc.
Tempest
Link pages
Libraries etc.
- NIST CSRC Website - a goldmine - NIST FIPS - NIST Special Publications
- Rainbow Series Library
Books
- Innocent Code by Sverre H. Huseby
- Hacking Exposed
- Hacking Linux Exposed
- Hacking Exposed: Windows 2000
- Hacking Exposed: Web Applications
- Hacking Exposed: J2EE & Java
- Ross Anderson: Security Engineering - the book is online
- Hack Proofing Your Network
- Building Internet Firewalls by Elizabeth D. Zwicky, Simon Cooper, D. Brent Chapman
- William R. Cheswick and Steven M. Bellovin: Firewalls and Internet Security: Repelling the Wily Hacker - the book is online