Implementation Details

There are many excellent sources of information about emerging intruder trends, attack scenarios, security vulnerabilities, vulnerability detection, and ways to fix them. You should take time each day to review these sources, learn about new developments, and potentially take action based on the information and instruction provided.

Both broad and detailed information on a wide range of information, computer, and network security topics can be found at http://www.cert.org/other_sources/other_teams.html and include the following:

• AUSCERT Australian Computer Emergency Response Team
  
• CERIAS (Center for Education, Research, and Information Assurance Security). Note that this group was formerly known as the Computer Operations, Audit, and Security Team [COAST].
• CERT/CC Computer Emergency Response Team Coordination Center
  
• CIAC Computer Incident Advisory Capability
  
• CVE "Common Vulnerabilities and Exposures (CVE) is a list or dictionary that provides common names for publicly known information security vulnerabilities and exposures."
• DFNCERT German Computer Emergency Response Team
  
• FIRST Forum of Incident Response and Security Teams
  
• ICSA ICSA Labs, as described on its web site, "provides the continuous research, statistics and knowledge that allow TruSecure® Corporation to continuously pioneer Internet security."
  
• IETF Internet Engineering Task Force
  
• SANS SANS Institute
  
• Security Focus contains BugTraq, which is a full disclosure moderated mailing list for the detailed discussion and announcement of computer security vulnerabilities: what they are, how to exploit them, and how to fix them.
  
• Security Portal
  
• USENIX Advanced Computing Systems Association
  

Monitor security fixes and patches that are produced by the vendors of your equipment and obtain and install all that apply. A general index of vendor sites can be found at

http://www.cert.org/security-improvement/implementations/data/vendor_list.html

Subscribe to advisories that are issued by various security incident response teams and update your systems against those threats that apply to your site's technology. Sites that publish such advisories include:

• AUSCERT
• CERT/CC
• CIAC

It is important to regularly review sites that contain a wide range of useful and publicly available security tools.

These include:

• CERIAS
• CIAC
• DFNCERT
• TAMU Computer and Information Services Network Group at Texas A&M University
  
• Wietse Venema's site