# Security Threats and Attacks
## Official Documentation
- **NIST Computer Security Resource Center**
  - [Link](https://csrc.nist.gov/)
- **OWASP (Open Web Application Security Project)**
  - [Link](https://owasp.org/www-community/)
- **US-CERT (United States Computer Emergency Readiness Team)**
  - [Link](https://www.cisa.gov/uscert/)
- **MITRE ATT&CK Framework**
  - [Link](https://attack.mitre.org/)

## Research Papers
- **"A Survey of Coordinated Attacks and Collaborative Intrusion Detection" by F. Gong (2003)**
  - [Link](https://www.sciencedirect.com/science/article/abs/pii/S0167404803000180)
- **"A Survey of Insider Attack Detection Research" by M. Salem et al. (2008)**
  - [Link](https://link.springer.com/chapter/10.1007/978-0-387-77322-3_5)
- **"A Survey of Botnet and Botnet Detection" by M. Feily et al. (2009)**
  - [Link](https://ieeexplore.ieee.org/document/5137300)

## Additional Online Resources
- **Cybersecurity & Infrastructure Security Agency (CISA) Resources**
  - [Link](https://www.cisa.gov/cybersecurity)
- **SANS Internet Storm Center**
  - [Link](https://isc.sans.edu/)
- **Krebs on Security**
  - [Link](https://krebsonsecurity.com/)

## Books
- **"The Art of Attack: Attacker Mindset for Security Professionals" by Maxie Reynolds**
  - ISBN: 1119805465
  - Provides insights into the mindset and strategies of attackers to help defenders improve their security posture.
- **"Threat Modeling: Designing for Security" by Adam Shostack**
  - ISBN: 1118809998
  - Offers a comprehensive approach to identifying and mitigating potential security threats in system design.
- **"Hacking: The Art of Exploitation" by Jon Erickson**
  - ISBN: 1593271441
  - Explores various hacking techniques and attacks, providing a deep understanding of how they work.
- **"The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws" by Dafydd Stuttard and Marcus Pinto**
  - ISBN: 1118026470
  - Focuses on web application security, covering a wide range of attacks and defense strategies.

## Standards
- **ISO/IEC 27001:2013 Information Security Management**
  - Provides requirements for an information security management system (ISMS)
- **NIST Special Publication 800-53 Security and Privacy Controls for Information Systems and Organizations**
  - [Link](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final)

## Online Courses
- **Coursera: Cybersecurity Specialization by University of Maryland**
  - [Link](https://www.coursera.org/specializations/cyber-security)
- **edX: Cybersecurity Fundamentals**
  - [Link](https://www.edx.org/course/cybersecurity-fundamentals)
- **Udacity: Security Analyst Nanodegree**
  - [Link](https://www.udacity.com/course/security-analyst-nanodegree--nd698)
