Help Net Security - Book chapters

NEWS

Spam served as visual poetry

IT security spending on the rise

Aladdin Knowledge Systems acquires SafeWord product line

Secure Computing to acquire Securify

The RFID Security Alliance (RFIDSA) formed

ARTICLES

Discovery and Fuzzing for SQL injections with Web 2.0 Applications

Rootkit Evolution

Application Security Matters: Deploying Enterprise Software Securely

Security Risks for Mobile Computing on Public WLANs: Hotspot Registration

Reverse Engineering: Smashing the Signature

THE WIRE

CIA, FBI push 'Facebook for spies'

Minimizing Directory Service audit event noise

Whitepaper - Best practices for securing Exchange email

Bruce Schneier: How to create the perfect fake identity

Discovery and fuzzing for SQL injections with Web 2.0 applications

Reverse Engineer's Swiss Army Knife

REVIEWS

Security Power Tools

Network Warrior

Google Apps Hacks

Crimeware: Understanding New Attacks and Defenses

Big Book of Windows Hacks

MALWARE

Computers increasingly being infected by fake antivirus products

The state of malware - August 2008 edition

Weekly malware report: keylogger, autorun worm and exchanger trojan

More malware blocked in July 2008 than in the whole of 2007

Malware of the week: AIM worm, spammer trojan and fake p2p apps

ADVISORIES

Mandriva Linux Security Update Advisory - python (MDVSA-2008:186)

Gentoo Linux Security Advisory - MySQL: Privilege bypass (GLSA 200809-04)

Gentoo Linux Security Advisory - RealPlayer: Buffer overflow (GLSA 200809-03)

VULNERABILITIES

vBulletin "$newpm[title]" Parameter Cross-Site Scripting

NOAH Unspecified Cross-Site Scripting

GPicView Multiple Local Security Vulnerabilities

Book Chapters

In this section you can download sample chapters from a variety of books.

Browse

or

Cisco ASA, PIX, and FWSM Firewall Handbook, 2nd Edition

Cisco NAC Appliance: Enforcing Host Security with Clean Access

End-to-End Network Security: Defense-in-Depth

Fuzzing: Brute Force Vulnerability Discovery

Secure Programming with Static Analysis

Securing VoIP Networks: Threats, Vulnerabilities, and Countermeasures

Security Metrics: Replacing Fear, Uncertainty, and Doubt

Security Monitoring with Cisco Security MARS

Security Power Tools

Virtual Honeypots: From Botnet Tracking to Intrusion Detection

1-10 | 11-20 | 21-30 | 31-40 | 41-50 | 51-60 | 61-70 | 71-80 | 81-90 | 91-100 | 101-110 | 111-120 | 121-130 | 131-140 | 141-149

Qualys: This free security guide describes the scanning requirements for PCI-DSS and provides a quick-reference requirements matrix for both Merchants and Service Providers of all levels.

Vulnerability Scanning

Network Vulnerabilities

Event Log Security