Security Advisories

• CERT Coordination Center (US CERT) Advisories
  • Vendor Initiated Bulletins
  • Summaries
• AUSCERT Advisories
• DFN-CERT (Germany) Security Bulletins
  • Information Bulletins (In German)
• CIAC (US Department of Energy) Advisories
  • CIAC Notes
• IBM ERS Advisories
  • IBM ERS Security Vulnerability Alerts
  • IBM ERS Outside Advisory Redistribution
• Caldera Security Advisories (Caldera Network Desktop only)
• Debian/GNU Linux

"White" Papers

• Bach's /pub/Papers
• Security Papers at John Hopkins
• NIST: An Introduction to Computer Security: NIST Handbook
• Selecting Good Passwords
• The Cryptography Project
• FIRST Security Papers
• Raptor Systems Security Library
• Securing NIS
• An Architectural Overview of UNIX Network Security"

Organizations/Research Groups

• Center for Secure Information Systems, George Manson University
• AUSCERT
• CERT Coordination Center (US CERT)
• Computer Incident Advisory Capability (US Dep of Energy)
• DFN CERT
• National Computer Security Association
• Forum of Incident Response and Security Teams
• Computer Security Research @ UC Davis - The Team of Matt Bishop
• COAST
• National Institute of Standards and Technology Computer Security Resource
• 8LGM
• Purdue Computer Emergency Response Team - PCERT
• NASA Automated Systems Incident Response Capability - NASIRC
• NAVCIRT - Naval Computer Incident Response Team
• Computer Security Resource Clearing House

Companies and Commercial Products

• Harris Computer Systems Corporation: Trusted Systems Division
• BellCore's Security Related Products
• Science Applications International Corporation Security Library
• DEC's security Index
• Internet Security Systems
• En Garde Systems
• CheckPoint Software Technologies Ltd
• SRI International: Computer Science Laboratory
• Cygnus Network Security
• Raptor Systems

Security Archives/References (usually there you can find everything)

• Firewall Product Overview
• TelStra Corporation: Computer and Network Security Index
• Henry W. Farkas's reference list
• Dartmouth Security Tools (the old Matt Bishop's home)
• Computer Underground Digest Archive
• Science Applications International -- Programs
• IP Spoofing References
• ftp.win.tue.nl
• bsy's Security Related Net-pointers
• Computer Systems Consulting - Local Security Docs
• YAHOO's Kerberos Stuff
• Experimental Reference Center on Cryptographical Data Protection at FER, Zagreb
• U.N.C.L.E
• A list of public-domain security related programs
• Information Security/Trusted Information Processing

Projects

• SKIP - Simple Key Management for Internet protocols
• Project Athena
• Computer Security @ chalmers.se
• Szymon Sokol's Security Site
• Unix Security @ Advanced Laboratory Workstation System Division of Computer Research and Technology, NIH

Security Mailing Lists

• Intrusion Detection Systems (IDS)
• Security Mailing List FAQ
• BUGTRAQ Archive
• Firewalls Mailing List Archive
• RISKS Forum Archive
• CIAC Bulletins

Sites of "bad guys"

• Phrack Magazine Homepage
• 2600 Homepage
• KloN Underground Page