books on security?

[denolth2]

Just got a new assignment to look into good books on security for the internet/networks/broadband access. Since this is THE place for a lot of cool info, anybody can give me a hand in listing some info on the above?
thanks in advance,

den2

[JANDOENT]

Hey Denolth,
Sorry that I haven't got back to you. I have so many security sites that I honestly don't know where to begin on a topic such as this. My general security folder is very unorganized now and bulging at the seems with all kinds of info that is hard to classify...other than general security.
I need to go out for a while and do some errands, when I return I will shoot you 1000 links and let you sort them out!!!heheheeheh
Go get lunch and bring back dinner with you, you will sorting sites for a week!!!heeheheh

------------------
Inquiring minds want to know...

[denolth2]

1000 links? That all you have after all this time? http://www.speedguide.net/ubb/smile.gif
I was expecting something like the 50 volumes of cryptic lore found on some distant island where Cthulhu slumbers....
I don't mind wading through links to get the info....been doing it so far, so dunno why I should stop now....
any info would be cool, though.... http://www.speedguide.net/ubb/smile.gif

[keeper]

denolth2; Can see your dilemma. Went to 4 puter stores yesterday, couldn't find even ONE decent book on puter 'security'.

Lots of progs but not ONE book.

Seems to be a BIG gap in the market there.

Opportunity knockin for someone with some security savvy?? + some business exp??

Perhaps someone who has collected a 'LOT' of info on the subject.

[JANDOENT]

and out of date! Here goes, remember, YOU ASKED for IT!!!! In no order, or topic, just misc security......I haven't had the oportunity to read most of these so let me know which ones are worth reading!!! hehehehe
http://users.rcn.com/rms2000/privacy/index.htm
http://www.ealaddin.com/
http://cexx.org/
http://grc.com/support.htm
http://www.hackyourself.com:4000/
http://www.voiceofthepublic.com/intro.html
http://www.voiceofthepublic.com/IsYourFreewareSpyware.html
http://www.practicallynetworked.com/sharing/securitythreats.htm
http://grc.com/optout.htm
http://accs-net.com/smallfish/oande.htm
http://catless.ncl.ac.uk/Risks/
http://www.robertgraham.com/
http://davidovv2.homestead.com/security.html
http://www.securityfocus.com/
http://www.alphalink.com.au/~johnf/spyware.html
http://navasgrp.home.att.net/
http://sysopt.earthweb.com/articles/cabdslsec-part1/
http://grc.com/su-hackers.htm
http://www.infoworld.com/researchtools/subject_index/security.html
http://grc.com/downloaders.htm
http://www.zdnet.com/pcmag/stories/solutions/0,8224,2586415,00.html
http://www.hackyourself.com/
http://grc.com/np/np.htm
http://www.progenic.com/?id=092500114249-news&full=1
http://home.tiscalinet.be/bchicken/index2.html
http://www.thawte.com/
http://cbc.ca/news/indepth/hackers/
http://www.techtv.com/callforhelp/howto/story/0,3650,3008520,00.html
http://users.rcn.com/rms2000/privacy/index.htm
http://www.byte.com/features/1999/03/win98priv.html
http://www.microsoft.com/info/PICWhyRegister.htm
http://www.heise.de/ct/english/
http://whitehats.com/aboutus.html
http://urbanlegends.about.com/science/urbanlegends/gi/dynamic/offsite.htm?site=http://www.scambusters.org/809Scam.html
http://www.cybersoft.com/
http://www.ramnet.net/
http://www.eeye.com/html/Products/index.html
http://standards.ieee.org/catalog/olis/index.html
http://www.privacyfoundation.org/
http://www.eff.org/papers/hacker_crackdown/crack.html
http://www.nohack.net/usefulinfo.html
http://davidovv2.homestead.com/referallpage.html
http://www.simovits.com/nyheter9902.html
http://www1.sky.com/news/technology/story5.htm
This should get you started, more to come...




------------------
Inquiring minds want to know...

[JANDOENT]

http://www.eeye.com/html/Databases/Software/nmapnt.html
http://www.sans.org/y2k/062700-1200.htm
http://www.privacyrights.org/
http://packetstorm.securify.com/whatsnew50.html
http://www.sans.org/y2k/123199-945.htm
http://www.securityportal.com/
http://www.secure-me.net/front/security/english/sec027.htm#otps
http://www.silicondefense.com/spice/
http://www.startext.net/news/doc/1047/1:COMP34/1:COMP340912100.html
http://www.symantec.com/securitycheck/
http://www.speedcorp.net/ubb/Forum15/HTML/000117.html
http://www.consumer.gov/idtheft/

[JANDOENT]

http://www.coremetrics.com/
http://www.voiceofthepublic.com/
http://federalcourts.com/
http://www.interhack.net/projects/privacy/
http://www.interhack.net/pubs/netscape-doubleclick/
http://accs-net.com/smallfish/prox.htm
http://www.interhack.net/news/cm-tracking.html
http://www.epic.org/
http://epic.org/privacy/
http://www.nls.net/
http://www.securityfocus.com/
http://www.speedguide.net/ubb/Forum6/HTML/000389.html
http://netsecurity.about.com/compute/netsecurity/gi/dynamic/offsite.htm?site=http%3A%2F%2Fwww.iinet.net.au%2F%257Eheath%2Fcrypto.html%2F
http://www.zdnet.com/feeds/cgi/framer/hud0001400/www.zdnet.com/zdhelp/filters/subfilter/0,7212,6002480,00.html?rURL=http://chkpt.zdnet.com/chkpt/hud00014rlns/www.zdnet.com/feeds/cg i/framer/hud0001400/www.zdnet.com/zdhelp/filters/subfilter/0,7212,6002480,00.ht
http://www.wired.com/news/business/0,1367,37949,00.html
http://cexx.org/creative.htm
http://slashdot.org/yro/00/06/15/0419201.shtml
http://sebsauvage.free.fr/noaura/
http://cexx.org/cydoor.htm
http://users.rcn.com/rms2000/privacy/realjb.htm
http://www.wired.com/news/technology/0,1282,32250,00.html
http://users.rcn.com/rms2000/privacy/alexa.htm
http://home.tiscalinet.be/bchicken/index2.html
http://www.zdnet.com/anchordesk/story/story_4050.html
http://www.wired.com/news/politics/0,1283,32459,00.html
http://accs-net.com/smallfish/cydoor01.htm
http://accs-net.com/smallfish/bonzi.htm
http://accs-net.com/smallfish/radiate.htm
http://wickedweasel.com/images/soli/so00.html
http://accs-net.com/smallfish/web3000.htm
http://accs-net.com/smallfish/gohip.htm
http://accs-net.com/smallfish/flyswat.htm
http://accs-net.com/smallfish/comet.htm
http://cexx.org/aim.htm
http://www.wired.com/news/politics/0,1283,39240,00.html?tw=wn20001004
http://www.bigfix.com/
http://www.winmag.com/columns/explorer/2000/02.htm
http://www.winmag.com/columns/explorer/2000/25.htm
http://www.winmag.com/columns/explorer/2000/03.htm

[keeper]

Great post. Think 'Bigfix' is a bad one, tho.

Put stuff like this in a soft cover with a bunch of explanations, and you have a Best-Seller. $19.95 X a million??

[denolth2]

I suppose all the decent info is just on the web, since it can be updated a lot more cheaply than in hard copy format....but that's what sucks about computer books...they're all so expensive...like buying college text books....by the time you finished with them, they aren't worth the paper printed on them....

[JANDOENT]

Hey Keeper, As I mentioned at the beginning of the thread, with exception of a few of these that I use for news, I haven't had a chance to really read or review these. Denolth had been asking me for a couple of weeks to post some links he needs to do some research for work. Most of my outlined topics are organized, unfortunately, so many topics fall under either broad categories or merely general security. With my eye problems, I can't read and review as fast as I could before, so my general security folder keeps growing larger.

Any help with reviewing and investigating these links are much appreciated. http://www.speedguide.net/ubb/smile.gif Your comments are welcomed. I do not like to post links that I can not back up as good bonafide info, but, he needs to finish his work, so I had little choice.

If it is possible, on any links you review, please give me your opinions and some reasons why. Thanks again for your help.
Ken


------------------
Inquiring minds want to know...

[Blitz]

Hey JANDOENT....I don't want to be nosey...but just outta curiousity, what do u do for a living? I'm assuming you're in the "comp security" field...? I guess I'm asking cuz I'm just amazed @ the amount of info/knowledge u got on comp security...

Thx so much for all these links!

[JANDOENT]

I own a couple of businesses, none are puter related. I had a trojan rewrite some of my proggies once and it mad me angry, so I said never again!! hehehhhehehe

------------------
Inquiring minds want to know...

[keeper]

Talk about 'copping an attitude'...lol

[bug]

Network Site Security
-
http://www.freedrive.com/ASP/PostFolderShortcut.asp?fsc=18504541

[denolth2]

Heh hee hee....guess you weren't kidding about them links, Jandoent....hmm....I guess I need to start going through them links....
After I finish compiling the ones most useful to my work and to me, I'll send you and the rest here a list of what I've found...of course, if any others want to do the same, then that's fine... http://www.speedguide.net/ubb/smile.gif
time get to work...

[JANDOENT]

Dude, Get to Work! http://www.speedguide.net/ubb/smile.gif That isn't 1/4 of the sites I have on general security. I haven't even started with the specialized areas! http://www.speedguide.net/ubb/wink.gif http://www.speedguide.net/ubb/tongue.gif

------------------
Inquiring minds want to know...

[This message has been edited by JANDOENT (edited 01-16-2001).]

[denolth2]

Only a quarter? Huh....and I thought you were just trying to keep me busy for a few minutes.... http://www.speedguide.net/ubb/smile.gif
Hmm....I guess you'll keep me off the streets at night....too cold out there at night anyways.... :0

[denolth2]

Nice sites, but I must also go back to my original question. Are there any good "books" that go into security issues? Like hardbound or softbound, but hard copy volumes that any of you can recommend?
den2 http://www.speedguide.net/ubb/smile.gif

[denolth2]

I can see how this site you put in, Jandoent, had you thinking security....
http://wickedweasel.com/images/soli/so00.html
heh heh heh....oops! http://www.speedguide.net/ubb/smile.gif

[JANDOENT]

Sorry Denolth, i knew that you had asked for for the above info a couple of weeks ago. I will see what books I can find that has recent info... http://www.speedguide.net/ubb/redface.gif Ohhh, how did that link get in there??? Hmmm..... http://www.speedguide.net/ubb/confused.gif heheeheh
------------------
Inquiring minds want to know...

[This message has been edited by JANDOENT (edited 01-17-2001).]

[denolth2]

OK, here's the list I've come up with based upon the sites Jandoent had, plus a few I've found myself on the side. I've eliminated all the redundant links, and the ones that really didn't offer much in the way of solid information. Some links, for example, just pointed to other links rather than have anything really new to say. I'm sure there are others, but just to keep my word, the compiled list of sites is listed below....

den2

Now, to get back to the original question of getting a list of books that deal on the security subject... http://www.speedguide.net/ubb/smile.gif

http://advice.networkice.com/advice/default.htm
http://www.antionline.com/
http://www.auscert.org.au/index.html
http://www.securityfocus.com/bugtraq/archive
http://www.cert.org/index.html
http://www.cookiecentral.com/cm002.htm
http://www.denialinfo.com/
http://www.deja.com/bg.xp?level=comp.security
http://acorn.he.net/~cablemdm/
http://www.firewall.com/
http://grc.com/default.htm
http://grc.com/discussions.htm
http://www.hackernews.com/
http://www.hackerwhacker.com/
http://e-services.hp.com/technologies/internet/security.html
http://www.hp.com/security/home.html
http://www.informit.com/
http://www.infosyssec.org/
http://netsecurity.about.com/compute/netsecurity/mlibrary.htm
http://www.insecure.org/
http://www.l0pht.com/
http://whitehats.com/
http://www.ntbugtraq.com/
http://www.sans.org/newlook/home.htm
http://www.securelab.com/
http://www.speedcorp.net/ubb/Forum15/HTML/000117-2.html
http://www.securityportal.com/topnews/
http://www.virusmd.com/antivirus/news.html
http://users.rcn.com/rms2000/security/crashes/index.htm
http://users.rcn.com/rms2000/
http://www.eeye.com/html/index.html
http://www.cotse.com/iptools.html
http://www.insecure.org/tools.html
https://onlinescanner.iss.net/howtostaysafe.html
http://www.microsoft.com/technet/security/current.asp
http://www.moosoft.com/index.php
http://www.opensec.net/
http://packetstorm.securify.com/defense.html
http://www.silicondefense.com/spice/
http://www.simovits.com/sve/nyhetsarkiv/1999/nyheter9902.html
http://www.cybercrime.gov/
http://csrc.nist.gov/index.html
https://www.ifccfbi.gov/
http://www.lavasoft.de/aaw/index.html
http://arstechnica.com/
http://home.tiscalinet.be/bchicken/index2.html
http://cbc.ca/news/indepth/hackers/
http://www.dslreports.com/tools
http://www.epic.org/
http://www.hackology.com/enter.asp
http://www.robertgraham.com/
http://www.nohack.net/nukes.html
http://www.privacyfoundation.org/index.cfm
http://accs-net.com/smallfish/index.htm
http://www.privacyrights.org/index.htm
http://davidovv2.homestead.com/freetoolsservices.html
http://rootshell.com/beta/news.html
http://www.secure-me.net/front/security/english/inh
http://www.speedguide.net/cgi-bin/Ultimate.cgi
http://www.infoforce.qc.ca/spyware/enknownlistfrm.html
http://www.techtv.com/cybercrime/
http://cexx.org/tsadbot.htm
http://www.zonelabs.com/

[Scoot]

<font face="Verdana, Arial" size="2">Originally posted by denolth2:
Hell, just spotted a typo!

http://packetstorm.securify.com/defense.html should be:
http://packetstorm.security.com/defense.html

I had misspelled security as "securify"
that don't work... http://www.speedguide.net/ubb/frown.gif</font>

The misspelled one is the one that works http://www.speedguide.net/ubb/biggrin.gif



------------------
Quest for Knowledge
http://w1.511.telia.com/~u51102888/anims/computer/hackanm.gif

[denolth2]

I hate it when that happens!!! http://www.speedguide.net/ubb/frown.gif

[denolth2]

Hell, just spotted a typo!

http://packetstorm.securify.com/defense.html should be:
http://packetstorm.security.com/defense.html

I had misspelled security as "securify"
that don't work... http://www.speedguide.net/ubb/frown.gif

[JANDOENT]

Denolth,
This site has some security books...

http://www.commodon.com/threat/frame.htm



------------------
Inquiring minds want to know...

[denolth2]

Thanks, Jandoent!!!! http://www.speedguide.net/ubb/smile.gif

[Scoot]

Check out here (http://shop.barnesandnoble.com/booksearch/results.asp?WRD=computer+security&userid=4CMVN8Z4WV)
A fine link page exists here (http://www.psycom.net/iwar.1.html)
Gotta keep adding to the list ya know http://www.speedguide.net/ubb/wink.gif

------------------
Quest for Knowledge
http://w1.511.telia.com/~u51102888/anims/computer/hackanm.gif

[Scoot]

<font face="Verdana, Arial" size="2">Originally posted by denolth2:
U da man, Scoot!
U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!</font>


http://www.speedguide.net/ubb/biggrin.gif


------------------
Quest for Knowledge
http://w1.511.telia.com/~u51102888/anims/computer/hackanm.gif

[denolth2]

U da Man, Scoot! U da man! U da man! U da man! U da man! U da man! U da man! U da man! U da man! U da man! U da man! U da man! U da man! U da man! U da man!
thanks!

[denolth2]

U da man, Scoot!
U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!U da man!

[denolth2]

Anybody know of any good sites for NT/win2k vulnerabilities? Looking for good books/links on these now.... any recommendations?
den2 :p

[species8549]

I noticed a very good security site missing from the lists of sites.
http://www.counterpane.com

The author, Bruce Schneier, has written a book called "Secrets & Lies - Digital Security in a Networked World", currently on the bookshelfs in most major book stores. It is an eye-opener on computer security. I highly recommend it for the newbie and professional alike. I am somewhere in the middle.

I like what I've seen and read here and will be back. I'm a geek at heart.

[denolth2]

pretty impressive page. :cool: :p

[keeper]

Denolth2; Just saw a huge book on PC Security by Microsoft. I believe it was at Circuit City. Is a big hardcover.

Is the only book I have seen on the subject.

Title is 'PC Security'. Think was about $40.

At least, found that one Does exist.

Hope this helps some.

[denolth2]

Every little bit helps, Keeper. :D
Although I'm not very fond of Circuit City, since they came up with the "original" Divx format that bombed badly, if they have something decent on security, then I may change my mind...although I'm sure there should be books available elsewhere besides that franchise....used to buy multipacks of video tapes from them, before joining costco....thanks again! ;)
den2 :eek:

[keeper]

denolth2; Found another book.

Is 'WIN2K Security', 'Technical Reference'.
Published by 'Microsoft'.

Is a good size Hard-cover. $37.50 [same place]. Was only one copy in store.

But they are certainly not exclusive distributors of these books.

Seems MS publishes various books on security, you should be able to track them down now that you have Title & Publisher.

Hope this helps.

Also, I use the University Library whenever I need a specific book. If they don't have it, they can check every Library in state to locate it thru database. Good resource there.

[denolth2]

Dude, Get to Work! That isn't 1/4 of the sites I have on general security. I haven't even started with the specialized areas!
------------------
Inquiring minds want to know...

[This message has been edited by JANDOENT (edited 01-16-2001).]


Ok, Ken....where are the specialized sites? :) :eek: :) ;) :D :p

How you doing anyway? And congrats on becoming one of the Elders of this Forum... :)

[keeper]

denolth2; found same MS hardcover books at CompUSA. They seem to only have one copy of each.

Really have to search the racks, if you want the big hardcopy books by Microsoft, but they are there, or they can get them.

Seems MS has one for each OS.

They would make an excellent reference.

Of course, these Hardcopies would not exclude the need for 'updated' info from online sources.

[denolth2]

Seems like all the books are pretty much out of date once they hit the stands....aside from the basic issues regarding security... :p
You're right, though, about having to keep updated online...too bad not all the sites listed earlier are updated regularly....hmmm....I guess I'll have to put the sites into a "usefulness" category, too, to show which ones are active or not....

[denolth2]

Just found a new book: Hacking Exposed second edition.
What's cool is that this book also has a complementary site that keeps the reader up to date, which is necessary, since most hard copy books do go out of date so quickly in this rapidly evolving security industry... :D :cool: :) :p
Just thought you folks should know and be kept up to date.... :D
den2