Security, Privacy and Cryptology Collection

Penn State Administrative Information Services  and  Academic Services and Emerging Technologies

Collected and Organized by
(retired)  and 
25 May 2006

                           Security General Topics

@Stake Security information

Ace American Alarm

Advanced Encryption Standard (AES)

Ana's  Archival Strong Encryption Software

AntiOnline security information

AntiSniff- L0pht

Anti-Spam Desktop Solution - Matador

Anti-Spam Server Solution - MailFrontier Enterprise Gateway

Apache - Securing it Step by Step

AttritionOrganization

Auditing Web Site Authentication

Blowfish Encryption - Bruce Schneier's web pages

Blowfish Encryption - Free utility Programs

Blowfish Encryption - Wekipedia

Blowfish Encryption - WinEncrypt

Bruce Schneier's Crypto-Gram pages

Bunk Stops Here - All Kinds of Hoaxes Debunked

U.S. CERT  List of Publications

CERT®Coordination Center

CERT - Network Security Modules - a series of practices and implementations

(CCIPS)- Computer Crime and Intellectual Property Section

Center for Democracy and Technology - CDT

Center for Education and Research in Information Assurance and Security (CERIAS)

Center for Internet Security

Cipher- Newsletter of the IEEE CS TC on Security and Privacy

Computer Incident Advisory Capability (CIAC)

Computer Professionals For Social Responsibility - CPSR

Computer Security Resource Center (CSRC)

DRAFT Computer Security Incident Handling Guide

CookieViewer (software)

CounterpaneComputerSecurity

CSRC Computer Security

CryptArchiver by WinEncrypt

Cryptlib, extensive work by Peter Gutmann

Crypto-GramNewsletter

Cryptographic Standards

Crypto-Gram Newsletter by Bruce Schneier

Cryptology Overview by Gary Kessler

Data Disposal (Secure Data Disposal by IBM)

• Data(Disk) Recovery
• Data Encryption Standard, The New One
• Datamation Security, PrivateFirewall, etc.
Data Recovery and Conversion Services:
• Action Front Data Recovery
• Data recovery services by Adroit Data Recovery Centre
• CBL Data Recovery Services
• Data Clinic
• Data Recovery Net - Fixed Disk Recovery for Most Systems
• Data Revovery and Undelete Utilities
• Data Recovery Services, Inc.
• DoctorByte
• DTI Data Recovery Software
• Eco Data Recovery
• eMag Solutions
• File Recover(free)
• File Recovery - LC Technology International
• Final Data Recovery Utilities
• Flashback Data Recovery, Conversions, Forensics
• Midwest Data Recovery Services
• Microsoft Access - Recovery
• Nortek Data Recovery Services
• OnTrack Easy Recovery
• Stellar Phoenix Data Recovery Software
• Trinity Rescue Kit
• Undelete Files on FAT, FAT32 and NTFS Drives from DOS Startup Disk: ttp://www.uneraser.com/undelete.htm
• Vital Data Recovery
• Windows Win32 NTFS and FAT file system Recovery
• Windows/Linux Data Recovery


Security General Topics (continued)

•  Disaster Recovery Group (Disk recovery for Windows and Unix)
• DistributedDenial of Service Attacks
• Distributed Intrusion Detection System (DShield)
• DESCracker Project
• Educause Computer and Network Security
• eEyeDigital Security
• EFFweb- The Electronic Frontier Foundation
• Electronic Privacy Center
• Emergency Email (Weather and various disasters)
• Encrypting File System (Microsoft)  - Transparent Public Key Encryption:  http://e-comm.webopedia.com/TERM/E/EFS.html
• Encryption Plus - Windows Folder Protection Software
• Encryption Tools - Proprietary- DVD Encryption
• Encryption Package - Cyperix strong encryption (free)
• Evidence/Local Activity Eliminator
• Extremetech Top Tips
• Epic Online Guide to Practical Privacy Tools
• FederalComputer Incident Response Center (Fed CIRC)

 

 
 
 
 
 

Firewall

• Datamation PrivateFirewall
• Firewall Approach To Internet Security
• Firewall Guide
• Firewall.com (portal site includes over 100 firewall vendors)
• Firewall Paper (CISCO)
• Information for Penn State faculty/staff firewall users ONLY
• Penn State Firwall Service


Security General Topics (continued)

•  FormatSecure by East-Tec
• FraudBureau - Web Fraud and Web Scams Complaint Centre providing Information on internet scams and internet fraud.
• FTP Active and Passive Modes and Firewalls Explained
• TheNational Fraud Information Center
• Glossary Security Terms
• More Security Terms
•  HACK FAQ
• HackerNews Network - HNN
• Help Net Security (HNS} Articles, Guidelines, etc.
• Hidden Trojans by LockDown Corporation
• Hoaxbusters
• Hoaxes Portal

 

 
 
 
 
 

Home and Office Computer Security

• Astro Security Suites (All in one Firewall, VPN, Antivirus, etc.)
• Home Computer Security (CERT)
• Router for under $80 that supports V.90 Dialup connection and Cable/DSL and has a good firewall
• Router for under $60 that supports Cable/DSL and has a good firewall
• Also see the Spyware Section below
• HoneyNet Project
• How To Stay Safe Online if You Use High-Speed Internet Access
• How to Stay Safe Online if you Use Dialup Internet Access
• How Not To Deal With Security (and other good stuff)
• HowTo Eliminate The Ten Most Critical Internet Security Threats (a SANS Resource)
• ICSA2000 : WE SECURE THE WEB !
• Identity Related White Papers by Digital World
• InformationDesign Assurance Red Team (IDART)
• Information Security Services by IQ Networks
• Information Warfare Site
Identity Theft
• Bibliography of Federal, State, Consumer and News Resources
• Fraud Alert - Learn How to Put a Flag on Your Credit File
• ID-CPR
• Identity Theft by Educause
• Identity Theft Information - U.S. Government Web Site
• Identity Theft Information by the Federal Trade Commission
• Identity Theft (File a Complaint Form; also call 1-877-IDTHEFT):  http://www.ftc.gov/
• Identity Theft -  Privacy Rights Clearinghouse Resources
• Identity Theft Money Central
• Identity Theft - NASA
• Identity Theft Prevention and Phishing
• Identity Theft PREVENTION
• Identity Theft and your Social Security Number
• Preventing and Responding to Identity Theft


Security General Topics (continued)

•  Information Security Management Concepts and Tutorials
• Infosec Technologies - Cryptographic / Anti-Virus Countermeasures / Anti-Hacker Tools
• International Information Systems Security Certification Consortium (ISC2)
• Internet Security, Applications, Authentication and Cryptography (ISAAC)
• Internet Security Systems (ISS):  http://www.iss.net/
• Internet Storm Center (Analysis of Breakin Methods, Trojans, Zombies, etc.)
• Insecure.org Security Pages
• Institute for Information Infrastructure Protection
• Journal of Electronic Crime Management
• James Madison University Security/Integrity Pages
• Key Loggers
• Library Computer and Network Security
• Long-term Retention of Digital Research Materials
• McAfee Threat Center
• MicrosoftSecurity Advisor Program
• MITInformation Security Office
• Mobil Product Security
• National Do Not Call Registration
• Do Not Call: Complaint Checklist
• Do Not Call: Complaint Information Flyer
•  National Software Testing Labs (NSTL)
• National Computer Vulnerability Data Base
• nCipherHome Page
• Neohapsis Archives
• NIPC- National Infrastructure Protection Clinic
• NIST Computer Security Resources
• NIST Computer Security Research Center Publications
• NIST Incident Response Guidelines
• NIST (National Institute of Standards Technolog)  Security Self-Assessment Guide for Information Technology Systems
• NSA Security Recommendation Guides for various Windows Systems: http://www.nsa.gov/snac/
• NTSecurity- Frequently Asked Questions version
• On-Line Web Security Tests (free) (Also see Shields UP )
• Open Source Vulnerability Database
• Open Web Application Security Project (OWASP) - Top Vulnerabilities in Web Applications
Password Recovery
• Googling Up Passwords by Scott Granneman
• Password - How to Recover an IE Content Advisor Password
• PasswordRecovery, Registry Tracer
• Passwordsrecovery page- Home
• PasswordCrackers, Inc. home page for password recovery services
• Password Safe by Counterpane Labs
• Password Resetter (offline) for Windows NT/2000/XP
• RockXP - Passworsd and Product Key recovery for Windows XP
• Protected Storage PassView - Passwords recovery for Windows: XP
• Password - IBM Thinkpad Password Removal


Security General Topics (continued)

 PCGuardian: encryption software, data security & anti-theft devices

PCSnooper (software)

Penn State Security Operations and Services

PersonalFirewalls

Personal Firewall Day Organization

Pest Patrol Software Anti-hacker tools, spyware, adware, and other non-viral malicious software

• Pishing (Anti-Pishing)
PGP - Pretty Good Privacy
• PGP.COM
• PGP - International Versions
• PGP - Where to Get Various Versions
• PGP Latest Versions
• PGP - Data Integrity Caution
•    How PGP Works (non-mathematical)
•        http://ftp.aset.psu.edu/pub/ger/documents/pgpmail.html
•        http://www.cren.net/crenca/onepagers/pgp2.html
•        http://www.geocities.com/BourbonStreet/9584/pgppage.html
• Precautions When Selling, Trading, or Sending a PC to Salvage or to a Repair Shop


Privacy

• Penn State Protect Your Privacy
• HIPAA Security Rule: what it is & how to comply with it by Steven Weil
• HIPAA - Health Insurance Portability and Accountability Act of 1996
• Personal Privacy Solutions
• PrivacyAnalysis of your Internet Connection
• Privacy Forum
• Privacy Foundation
• Privacy Guide for Consumers
• Privacy Keeper for Internet Explorer
• Privacy and Human Rights 2003 - An International Survey of Privacy Laws
• Privacy/Network Tools on the Net
• Privacy Org
• Privacy Protection by US-CERT - a practical HowTo article
• Privacy Related Software by Privacy Net
• Privacy Rights Clearing House
• Privacy Tips by Michael Hyatt
• Privacy - Understanding Privacy
• Privacy - Electronic Frontier Foundation (EFF) Top 12 Ways to Protect Your Online Privacy
• Trusted Computing FAQ


Security General Topics (continued)

•  QuickenOnline Backup - Welcome!
• Quick Reference To Internet Message Headers
• TheProcess of Security by Bruce Schneier
• Read Only Fixed Disk
• RISKS-LIST:RISKS-FORUMDigest
• Road Runner Security Web Pages
• RonRivest's paper on Confidentiality without Encyption
• RSASecurity
• RSAData Security, Inc.
• RSALabs FAQ - Section 3.1: RSA
• RSALaboratories Challenges
• Safe Blueprint for LAN's, Wireless, Private Networks by CISCO
• Safe Computing Tips by PA Emergency Management Agency
• Safetynet'sSecurityand Anti-Virus Cafe'
• SafeHex - Safe Computing Tips
• Sam Spade Security Organization, Software, and Services
• SANSResources - Universal SSH Status Report
• SANS' Information Security Reading Room
• SANS Institute Intrusion Detection FAQ
• SANS Twenty Most Critical Internet Security Vulnerabilities
• Secretsand Lies: Digital Security in a Networked World
• SSHCommunications Security
• Afree award winning e-zine: Internet ScamBusters
• SecureComputing Corporation - Home Page - Firewalls, Encryption, Authentication, Identification, Web Filtering
• Secure Deletion of Data from Magnetic and Solid-State Memory
• Secure Sanitizing/Wiping of Fixed Disks by Skip Knoble
• Securing Public Web Servers
• Security Check List by Ken Cutler
• Security Practices Guide - Effective by Educause
• SecurityWeb Site
• SecurityFocus
• SecurityMagazine
• SecurityPortal
• Security Supersite - News and Resources for the Security Profrssional
• Security Tips by Stay Safe Online
• ServerWatch.com
• ShieldsUp
• SkydeskOnline Backup
• Software - Privacy/Security Software List
• Synergetic Pop-up and Browser Privacy Defender

 

 
 
 
 
 

SPAM

• Email Headers for known email clients
• FCC Information on Junk Faxes
• Reducing SPAM for the Long Haul by Skip Knoble
• SPAM Archives (SpamArchive.org)
• SpamCop
• Spam Discussion List Archives
• SPAM Glossary and Technology
• Spamhaus - Register of Known Spam Operations
• SPAM Law Worldwide
• SpamLinks
• SPAM Management - Mail Washer
• Spam - 10 Things You can Do About it
• Spam - A Plan for Spam by Paul Graham
• Spam and Email Filtering via Risk Digest
• Penn State ITS - Email Filters and SPAM
• Spam - Whew.COM Spam Stopping
• Why Am I getting All This SPAM
• Composite Blocking List (CBL) for Spam
• SpinRite Privacy
SPYWARE
• Keyloggers Maleware Descriptions
• Microsoft Windows AntiSpyware
• Web Scan for Spyware/Addware, and other references  (use Internet Explorer)
• Spyware Explained by Jonathan Read
• Spyware Guide
• 11 Signs of Spyware
• Spyware(software)
• Pest Patrol (software)
• LavaSoft (free software)
• Spybot  Search and Destroy(free software)
• Spy Sweeper (software)
• Spyware List
• Spyware Info
• Spyware Information and Removal


Security General Topics (continued)

• Standards for Security Categorization of Federal Information and Information Systems
• Stay Safe Online - Tips and Security Education
•  Take Control - Take five steps to protect your computer - PSU)
• TamoSoft Security and Network Monitoring Software
• TechnotronicSecurity Information
• The Ten Immutable Laws of Security
• Top 10 Web services security requirements By Gunjan Samtani
• TruSecure - ICA Labs - Vulnerability Management
• Trusted Email Open Standard
• Virgina Alliance for Secure Computing and Networking
• Virus Terms Glossary
• More Virus Terms
• US CERT Virus Resources
• Virus Sites
• The Worm FAQ
•  W3CSecurity Resources
• Wilders Security Advisors
• Web Browser - Securing Them
• Wireless Security (Interop)
• Wireless Security (Arstechnica)
• Windows95 Security Applications
• Windows9x/NT/2000/XP/ Minimal Maintence
• Windows9x/NT/2000/XP/2003 Security Links
• Windows9x/NT/2000/XP Virus Links
• ZoneAlarm - Internet Connection Firewall
• ZDNet Security Resource Center

Acknowledgments

The following are acknowledged for their suggestions and contributions to this security page:
Jeffrey Bailey,  John D Balogh, John Carnicella, Giles Lodge de Streel, Kind Sir, Mike Kauffman, Mike Fiorentino, and Monty Solomon