 |
Vanstechelman.eu | |
|
|
Navigation
My posts on Twitter
- lvanstechelman: For Better Password Policies: OWASP Passfault http://t.co/Tyzk2z6V
- lvanstechelman: XSS attack vector: Eval a url http://t.co/XbbtbivM
- lvanstechelman: New Product: Google Drive http://t.co/OlfyF4oO
- lvanstechelman: @ZIONSECURITY According to http://t.co/i073PUwc the attribute must case-insensitively match the string "HttpOnly"
- lvanstechelman: @ZIONSECURITY My logs contain requests containing the GET parameters like requested by the end-user e.g. /user/login?destination=node%2F1
Security Links
- National Vulnerability Database
http://nvd.nist.gov/ - US-CERT Vulnerability Notes Database
http://www.kb.cert.org/vuls/ - Qualys security alerts
http://www.qualys.com/research/alerts/ - Symantec Security Response
http://www.symantec.com/business/security_response/index.jsp - Cisco SAFE Reference Guide
http://www.cisco.com/en/US/docs/solutions/Enterprise/Security/SAFE_RG/SA...
This guide discusses the Cisco SAFE best practices, designs and configurations, and provides network and security engineers with the necessary information to help them succeed in designing, implementing, and operating secure network infrastructures based on Cisco products and technologies. - Browser Security Handbook
http://code.google.com/p/browsersec/wiki/Main
This document is meant to provide web application developers, browser engineers, and information security researchers with a one-stop reference to key security properties of contemporary web browsers. Insufficient understanding of these often poorly-documented characteristics is a major contributing factor to the prevalence of several classes of security vulnerabilities.Although all browsers implement roughly the same set of baseline features, there is relatively little standardization - or conformance to standards - when it comes to many of the less apparent implementation details. Furthermore, vendors routinely introduce proprietary tweaks or improvements that may interfere with existing features in non-obvious ways, and seldom provide a detailed discussion of potential problems.
- http://www.nsa.gov/ia/guidance/security_configuration_guides/operating_s...
- http://www.unixguide.net/unixguide.shtml
- OWASP Projects
http://www.owasp.org/index.php/Category:OWASP_Project - Incident Management: Computer Security Incident Response Team Handbook: http://www.cert.org/archive/pdf/csirthandbook.pdf
- Open Directory Project: Security policies
http://www.dmoz.org/Computers/Security/Policy/Sample_Policies/ - http://zeltser.com/cheat-sheets/
- Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines.
https://www.virustotal.com/ - VISA: Data Security Alerts, Bulletins & Webinars
Visa is committed to helping all payment system participants better understand their responsibilities related to securing cardholder data. As part of this commitment, Visa issues security alerts when vulnerabilities are detected in the marketplace.
http://usa.visa.com/merchants/risk_management/cisp_alerts.html