Academic | Companies & Organisations | Others | Government | Mailing Lists

Academic

UK

Information Security Group at the Department of Mathematics, Royal Holloway, University of London. 'This Group offers an active research environment with ten established academic posts and a large number of research students, making it one of the largest academic security groups in the world.'

USA

The following 14 research centres have been designated by the NSA as Centers of Excellence in Information Assurance under the Centers of Excellence Program:

• Carnegie Mellon University (2000)

• Florida State University (2000)

• George Mason University (1999)

• Idaho State University (1999)

• Information Resources Management College of the National Defense University (2000)

• Iowa State University (1999)

• James Madison University (1999)

• Naval Postgraduate School Center for InfoSec Studies and Research (2000) 'World's foremost center for military research and education in information assurance, defensive information warfare, and computer & network security.'

• Purdue University (1999) 'The Center for Education and Research in Information Assurance and Security, or CERIAS, is the world's foremost University center for multidisciplinary research and education in areas of information security. Our areas of research include computer, network, and communications security as well as information assurance'
  

• Stanford University (2000)

• University of California at Davis (1999)

• University of Idaho (1999)

• University of Illinois at Urbana-Champaigne (2000)

• University of Tulsa (2000)

Companies & Organisations

7Pillars Partners is a professional military and intelligence advisory firm. It focuses on Intelligence services: outsourcing, briefings, training Information security and assurance: defensive strategies and tactics, design methods, implementation services Information operations and IWAR: defensive and offensive information and infrastructural operations.

CERT® Coordination Center 'The CERT® Coordination Center (CERT/CC) is a center of Internet security expertise. It is located at the Software Engineering Institute, a federally funded research and development center operated by Carnegie Mellon University.'

Computer Crime Consultants 'Computer Crime Consultants Ltd. (CCC), as the name suggests, is a firm of specialists who offer services in IT security and in combating computer crime. CCC is an independent company and has no commercial agreements with suppliers of either software or hardware products. It derives its income from the supply of confidential consultancy services in the areas of IT Security, Investigations and Information Services.'

CyberSoft, Inc. a computer security software manufacturer which products are sold to governments and large international corporations...

Computer Security Institute '(CSI) is the world's leading membership organization specifically dedicated to serving and training the information, computer and network security professional. Since 1974, CSI has been providing education and aggressively advocating the critical importance of protecting information assets.'

Forum of Incident Response and Security Teams (FIRST)

Fred Cohen & Associates 'Innovation, insight, and objectivity have been the hallmarks of Fred Cohen & Associates over the last 20 years. From education, to research, to consulting, they bring their clients the highest quality, the most advanced thinking, and the best strategic analysis available today.'

Gamma Secure Systems Limited 'is a leading Information Security consultancy, famous for its innovative information security solutions. We helped to write the ITSEC and ISO/IEC 17799 (formerly BS7799), and have helped our clients to develop a greater understanding of security policy, risk analysis and trust. We are now engaged in helping our clients to project the trustworthiness of their own services to their respective markets.'


Navmar Applied Sciences Corporation 'Professional Engineering Services firm, has assisted clients over the past 20 years in meeting the challenges of an ever changing national/international environment.'

Others

General

Argus Revolution 'Open Security Discussion, Free B1 Trusted Operating System for non-commercial use. The Revolution is about providing a forum for open discussion of security issues.'

=CALEB15= 'Security for Windows and Linux'

cgisecurity.com 'A site that looks into the risks that port 80 can bring. We will be dealing with such aspects as Web Server security, cgi, asp, and various other scripting languages.'

Cyberdefenders 'provides free internet security tips and techniques aimed at the small office and home office.'

Dutch Security Information Network

Hacker Emergency Response Team  'is an international non-profit organization based in France. Exactly like CERT, the US counterpart, the first goal is to provide accurate information about computer security vulnerabilities, provide incident response services to sites that have been the victims of attacks, publish security alerts and find new vulnerabilities.'

Help Net Security 'has been online since 1998. The content of the site is the following: security news, vulnerabilities, press releases, a large download section, articles, a well-stocked bookstore, an extensive viruses section, a weekly newsletter, and much more. The site is also WAP enabled.'

Info.sec.radio broadcast 'This week's Info.sec.radio broadcast features the latest news from the world of computer and information security and the latest vulnerabilities'

IT Security Cookbook 'This book is intended as a 'self help' guide to computer & network security, primarily for security managers, programmers and system administrators.'

Infowarrior.org The web site of the authors of the Art of Information Warfare

The Information Technology Professional's Resource Center 'ITPRC was created in March of 1999 to provide a one-stop-shop for IT professionals to find technical information relating to data networking. In addition to providing links to a vast collection of networking related information available on the Internet, the ITPRC provides links to career management information and forums for IT professionals to interact.'

Lucid Empires an Australian website 'designed to inform and educate people in Australia that have a particular interest in privacy, security and freedom of speech.'.

Nightbird a French InfoSecurity Site: 'Base de donnees d'exploits traduits en francais. News, outils et documentations sur la securite. Mise a jour quotidienne. '

Packet Storm 'Packet Storm Security is the worlds largest collection of open source security tools, advisories, exploits, scanners, and new security information.'

Radiusnet 'Radiusnet is a site that deals mainly with Cryptology, we have the largest known archive. We also carry all the infamous RFC ducuments along with the infamous Rainbow Books in 4 different formats.'

The Rijndael Page The homepage of Vincent Rijmen, the designer of the rijndael block cipher:

Sam Nitzberg's Security and Home Page 'This is the web page of Sam Nitzberg, an American computer security expert who has published and chaired panels internationally on the subjects of various aspects of computer security, as well as computer ethics and information warfare. The conferences he has presented in have included venues focusing on Technology and Society, Computers and Ethics, Hacker Interests, and Military Informatics. Present on this web site are Sam Nitzberg's published works, andother items of both general and security interest.'

secureroot

Secured: the trojan removal help site 'dedicated to helping those that have been infected and hacked by trojan hackers . We have detailed information on over 150 remote access trojans , plus a huge files archives full of protection programs . This is New Zealands largest net security site.'

SecurityFocus 'SecurityFocus.com is designed to facilitate discussion on security related topics, create security awareness, and to provide the Internet's largest and most comprehensive database of security knowledge and resources to the public. It also hosts the BUGTRAQ mailing list.'

SecurityPortal ' currently serves as the voice of security with its widely distributed e-newsletter and website with thousands of pages of security information.'

Talisker's Intrusion Detection Systems 'This independent site lists every known commercial Intrusion Detection System, plus a few other seasoned campaigners, it is aimed at those within the fascinating IDS field, allowing them to scope the extensive product range available to them.'

TECS: The Encyclopedia of Computer Security 'comprising full News coverage, a comprehensive Product database, a detailed Glossary, a wide-ranging Links library, an extensive Whitepapers archive and much more - all updated daily."

Vmyths.com 'formerly the Computer Virus Myths home page Learn about computer virus myths, hoaxes, urban legends, and the implications if you believe in them. You can also search a list of computer virus hoaxes from A to Z.'

X Corps Security a site devoted to Computer Security

Italian Resources

Securityinfos 'la prima risorsa italiana di Computer Security'

GardaWeb - Security Advisor


Government

Canada | Japan | United Kingdom | United States

Canada

Communications Security Establishment '(CSE) is a federal government lead agency that delivers Information Technology Security (ITS) solutions to the government of Canada.'


Japan

Information-Technology Security Center (ISEC) 'is the center for promoting information security in Japan. It was established on January 1, 1997 as a department of the IPA. The IPA is an affiliated organization of the Ministry of International Trade and Industry (MITI). '


United Kingdom

Communications-Electronics Security Group 'CESG is the Communications-Electronics Security Group, part of the United Kingdom Civil Service, tasked with looking after the technical aspects of keeping official IT and communications systems safe from compromise.'


ITSEC Scheme 'Under the UK ITSEC scheme, the security features of IT systems and products are tested independently of suppliers to identify logical vulnerabilities. This type of testing is known as security evaluation and it is carried out against standardised criteria to a formalised methodology.'


United States

Computer Incident Advisory Capability 'provides on-call technical assistance and information to Department of Energy (DOE) sites faced with computer security incidents. This central incident handling capability is one component of all encompassing service provided to the DOE community. The other services CIAC provides are: awareness, training, and education; trend, threat, vulnerability data collection and analysis; and technology watch.'

Computer Security Resource Center This site contains information about a variety of computer security issues, products, and research of concern to Federal agencies, industry, and users. This site is operated and maintained by NIST's Computer Security Division as a service to the computer security and IT community

The Federal Computer Incident Response Center (FedCIRC) 'is the central coordination and analysis facility dealing with computer security related issues affecting the civilian agencies and departments of the Federal Government.'