Security Guides

Bagi yang ingin mengetahui petunjuk bagaimana konfigurasi yang aman pada sistem, jaringan, dan lain-lain bisa lihat di website NSA.
http://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/fact_sheets.shtml

Semoga bermanfaat!!

20 Kontrol Keamanan

Ada 20 kontrol keamanan yang wajib di implementasi menurut SANS:

  1: Inventory of Authorized and Unauthorized Devices

2: Inventory of Authorized and Unauthorized Software

3: Secure Configurations for Hardware and Software on Mobile Devices, Laptops, Workstations, and Servers

4: Continuous Vulnerability Assessment and Remediation

5: Malware Defenses

6: Application Software Security

7: Wireless Access Control

8: Data Recovery Capability

9: Security Skills Assessment and Appropriate Training to Fill Gaps

10: Secure Configurations for Network Devices such as Firewalls, Routers, and Switches

11: Limitation and Control of Network Ports, Protocols, and Services

12: Controlled Use of Administrative Privileges

13: Boundary Defense

14: Maintenance, Monitoring, and Analysis of Audit Logs

15: Controlled Access Based on the Need to Know

16: Account Monitoring and Control

17: Data Protection

18: Incident Response and Management

19: Secure Network Engineering

20: Penetration Tests and Red Team Exercises

Web Application Security Scanner

Perlu dicoba free dan open source scanner untuk web application security.
http://www.arachni-scanner.com/

Selamat mencoba...

DDOS Attack

Teman2

Bagi yang ingin mengetahui tentang serangan DDOS bisa kunjungi websitenya Prolexic.
http://www.prolexic.com/index.html

Selamat membaca!

Pentest FTP

Tools ini bisa digunakan utk pentest FTP.
http://securityxploded.com/ftp-password-sniffer.php

Semoga berguna!

Publikasi Spesial NIST (800 Series)

Bagi yang tertarik membaca doumen-dokumen mengenai keamanan informasi yang dipublikasi oleh NIST (800 Series) bisa lihat di link berikut:

http://csrc.nist.gov/publications/PubsSPs.html#800-115

Selamat membaca!!

PACK (Password Analysis and Cracking Toolkit)

Bagi yang tertarik mempelajari password analysis dan cracking, bisa baca di sini:
http://thesprawl.org/projects/pack/

Salam