IT/IS Vulnerabilities Reference Materials

1. Information Systems- the source of the vulnerabilities that can be exploited

2. Cyber Crimes- the threats created by those who want to exploit the vulnerabilities

3. Risk Management- the strategies and tactics used by an organization to manage the risks created by the combination of vulnerabilities and threats

4. Incident Investigations- the "response" mode in the risk management strategy in which investigations are conducted and prosecution is pursued.

How Do Computers Work?

• How Stuff Works- information about almost every component & process

  ---

How Do Networks Work?

• TCI/IP & OSI Stacks- a clear and concise explanation

• Protocols.com- discussions about TCP/IP, wireless, VoIP, and more

• Well Known TCP/IP Ports- a short list of the ports and the related services

What Are the Vulnerabilities?

• CERT/CC Vulnerabilities Notes Database

• Common Vulnerabilities and Exposures

• Open Source Vulnerabilities Data Base

• OS Security Weaknesses- includes discussion about alternative data streams

• SANS/FBI Top 20 List

Testing Your Computer and Network- Security

• PC Flank- several tests, many tools, and a lot of useful information

• Shields Up & Port Probe- tests and lots of interesting information by Gibson Research Corporation

• MS Baseline Security Analyzer- by Microsoft to test Windows-based configurations