Files

55 lines
2.7 KiB
Markdown

# Security Threats and Attacks
## Official Documentation
- **NIST Computer Security Resource Center**
- [Link](https://csrc.nist.gov/)
- **OWASP (Open Web Application Security Project)**
- [Link](https://owasp.org/www-community/)
- **US-CERT (United States Computer Emergency Readiness Team)**
- [Link](https://www.cisa.gov/uscert/)
- **MITRE ATT&CK Framework**
- [Link](https://attack.mitre.org/)
## Research Papers
- **"A Survey of Coordinated Attacks and Collaborative Intrusion Detection" by F. Gong (2003)**
- [Link](https://www.sciencedirect.com/science/article/abs/pii/S0167404803000180)
- **"A Survey of Insider Attack Detection Research" by M. Salem et al. (2008)**
- [Link](https://link.springer.com/chapter/10.1007/978-0-387-77322-3_5)
- **"A Survey of Botnet and Botnet Detection" by M. Feily et al. (2009)**
- [Link](https://ieeexplore.ieee.org/document/5137300)
## Additional Online Resources
- **Cybersecurity & Infrastructure Security Agency (CISA) Resources**
- [Link](https://www.cisa.gov/cybersecurity)
- **SANS Internet Storm Center**
- [Link](https://isc.sans.edu/)
- **Krebs on Security**
- [Link](https://krebsonsecurity.com/)
## Books
- **"The Art of Attack: Attacker Mindset for Security Professionals" by Maxie Reynolds**
- ISBN: 1119805465
- Provides insights into the mindset and strategies of attackers to help defenders improve their security posture.
- **"Threat Modeling: Designing for Security" by Adam Shostack**
- ISBN: 1118809998
- Offers a comprehensive approach to identifying and mitigating potential security threats in system design.
- **"Hacking: The Art of Exploitation" by Jon Erickson**
- ISBN: 1593271441
- Explores various hacking techniques and attacks, providing a deep understanding of how they work.
- **"The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws" by Dafydd Stuttard and Marcus Pinto**
- ISBN: 1118026470
- Focuses on web application security, covering a wide range of attacks and defense strategies.
## Standards
- **ISO/IEC 27001:2013 Information Security Management**
- Provides requirements for an information security management system (ISMS)
- **NIST Special Publication 800-53 Security and Privacy Controls for Information Systems and Organizations**
- [Link](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final)
## Online Courses
- **Coursera: Cybersecurity Specialization by University of Maryland**
- [Link](https://www.coursera.org/specializations/cyber-security)
- **edX: Cybersecurity Fundamentals**
- [Link](https://www.edx.org/course/cybersecurity-fundamentals)
- **Udacity: Security Analyst Nanodegree**
- [Link](https://www.udacity.com/course/security-analyst-nanodegree--nd698)