Whether you are a seasoned professional or someone just getting started in Information Security, there probably has never been a better time for developing or honing your skills for little or no expense. This is due to the many free online resources like OpenCourseware and intructional videos that have been
released in recent years.
The list below represents materials that I've either used or have stumbled upon.
I do update this list periodically, so feel free to let me know if you spot a good training resource.
Now go learn something!
Full Courses / Lecture Videos
Subject Matter | Title of Material | Comment |
Certification - Security+ | ProfessorMesser's Free Security+ Training Course | Cover at high level broad Security+ topic areas |
Cryptography | Udacity: Applied Cryptrogaphy | Advanced Course into Math behind modern cryptographic systems |
Exploit Research | Security Tube: Exploit Research Megaprimer | Delves into some fundamental software vulnerabilites and attack methods. |
Forensics | Write Blocked: DFIROnline | Video archive of monthly online meeting of digital forensic and incident response professionals. |
Intrusion Detection | DOD - IDS Analysis (Pt1) | Introduction to IDS, alerts, and false positives. |
Intrusion Detection | DOD - IDS Analysis (Pt2) | Lessons on Packet Sniffing, Client Side Attacks, Botnets, and Traffic Analysis. |
Penetrating Testing | Dan Guido: Penetration Testing and Vulnerability Analysis | Amazing lectures and materials by leaders in Appsec and Vuln. Research. |
Penetration Testing | SecurityTube: Metasploit Framework Expert Course Material | Overview of Metasploit Framework as well as info on researching and integrating new attacks into MSF. |
Programming | MIT: Introduction to Computer Science and Programming | Good intro into fundamental CS concepts and coding in Python. |
Programming | SecurityTube: Python Scripting Expert | Getting off the ground..not mand vids yet. |
Programming | SecurityTube: Linux Assembly Language Megaprimer | Learn Assembly (x86) fundamentals within Linux |
Programming | SecurityTube: Windows Assembly Language Megaprimer | Learn Assembly (x86) fundamentals within Windows |
Wireless Security | SecurityTube: Wi-Fi Security Expert Course Materials | Great course into Wifi fundamentals, weaknesses, and attack vectors |
Varied | Coursera Online Lectures | University Lecture Series on System,Security, and Networking |
Ebooks / Free Docs
Subject Matter | Title of Material | Comment |
Forensics | DOJ - Forensic Examination of Digital Evidence | High-level DOJ book on Computer Forensic Examination For US Law Enforcement. |
Penetration Testing | Offensive Computer: Metasploit Unleashed | Great primer on all things Metasploit. Always seems up-to-date. |
Varied | NIST Computer Security Division | NIST guidelines and standards publications covering several major areas of computer security. |
Varied | SANS Reading Room | Huge collection of papers from SANS "Gold" certificate holders. Lot's of cool material / projects. |
Labs / Challenges / Hands On
Subject Matter | Title Of Material | Comment |
Forensics (Network) | Network Forensic Challenge | Great quizzes by LMGsecurity team. Most of the fun I had at Defcon was due to these folks. |
Forensics | DC3 Forensic Challenges | Defense Cyber Crime Center Forensic Challenges and Competitions. |
Web Application Security | HackThis Site! | Learn through direct online challenges and mock-ups. |
Varied | Security Overide | Large assemblage of hacking challenges with progressive levels across different domains. |
Magazines / Zines
Title of Material | Comments |
HITB Magazine | Hack In the Box Magazine - Various Technical Security Articles |
Hack This Zine | Computer Security, Privacy, Open Source Software |
Phrack | Venerable Zine of the Computer Underground. |
SC Magazine Archive | Issue Archive for SC Magazine |
Tutorials
Subject Matter | Title of Material | Comment |
Lockpicking / Physical Penetration | Basic operation and manipulation of Locks | Series of short videos by Schuyler Towne on lockpicking concepts and techniques. |
Web Development | W3Schools | Great tutorials on web-coding and foundation for understanding web-app security. |
No comments:
Post a Comment