Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Security Policy Template For Hotel Networks

When booking a hotel room, you assume that it is the responsibility of the hotel to keep you and your belongings safe by not sharing your room keys or other details. But a greater threat could be lurking in your room...
Read More
Article

Flash Fades, Adobe Crumbles

Oh, Adobe Flash. I knew you well, starting from when you were known as Macromedia Flash in the late 1990s. The dynamic web content you provided me was
Read More
Article

Gh0st RAT: Complete malware analysis – Part 1

In this article series, we will learn about one of the most predominant malware, named Gh0st RAT, whose source code is dated back to 2001 but it is still rel
Read More
Article

Hunting Malware in the Deep Web

Introduction Botnets are still considered one of the most dangerous cyber threats. These malicious networks of compromised machines are used by cyber crimina
Read More
Article

7 Reasons to Embrace Source Code Analysis

With the exponential rise in cybercrime in recent years, application security is starting to take center stage. Conventional methods such as antivirus soluti
Read More
Article

Threat Analysis Template For BYOD Applications

Your IT department is certainly not at a loss when it comes to worrying about BYOD applications. Indeed, the list of threats to enterprise applications and t
Read More
Article

Snowden's New Revelations on Dominance in Cyberspace

Edward Snowden is continuing to release the documents he collected during his service at the NSA. His revelations on the mass surveillance operated by US int
Read More
Article

SIEM Use Cases for PCI DSS 3.0 – Part 4

So we have finally reached the final part of this series of articles. First of all I would like to thank you readers for such an outstanding response to Part
Read More
Article

What US Companies Need to Know about EU Privacy Laws

1. Introduction The European Union (EU) is a large politico-economic union consisting of 28 countries, having a total population of more than 500,000 million
Read More
Article

Incident Response Interview Questions

Introduction Incident response people respond to IT issues such as system down time or emergency hardware outages. They also run reports and attend meetings
Read More
Article

Ethical Hacking Interview Questions

If you’ve got hacking skills, you can turn your ethical hacking into a career. Ethical hacking is the term given to penetration testing and prevention. Your
Read More
Article

SCADA Interview Questions

SCADA (supervisory control and data acquisition) is a type of software application and hardware control that defines the way data and real-time processing is
Read More
Article

Quantum Cryptography

"Quantum cryptography uses photons and physics to generate cryptographic keys" What is quantum cryptography?[pkadzone zone="main_top"] Quantum cryptography i
Read More
Article

iOS Application Security Part 38 - Parse Security in iOS

This is a guest lecture by Egor Tolstoy. Egor is a full-time iOS developer working at Rambler&Co and living with his lovely wife in Moscow, Russia. In hi
Read More
Article

Best Security Podcasts

One of the most important aspects of security is staying up to date with trends, best practices and current events. News sites and Twitter are great ways to
Read More
Article

Overview of Automated Malware Analysis in the Cloud

Malicious attackers are constantly on the lookout for new and advanced attacks, which they use to spread malware around the world. There are a vast number of
Read More
Article

Breaking Software Protection – DSA/DSS

1. Introduction In this third part of the series, we will see something similar to the second article but a little bit more advanced. This article will cover
Read More
Article

Internet of Things: How Much are We Exposed to Cyber Threats?

Introduction The Internet of Things (IoT) is one of the paradigms that will influence our society most of all in the next few years, and it is already condit
Read More
Article

The Likelihood of Cyber-Terrorism Today

Introduction The virtual space has over time become something of real importance for business, politics, work, communities and communications.[pkadzone zone=
Read More
Article

Antenna theory for wardriving and penetration testing

Wardriving is an activity in which a person seeks wireless access points in moving vehicles with high gain antennas mounted on the top. Usually, this access
Read More
Article

POODLE: Not your typical walk in the park

Google, among several security organizations, recently announced a vulnerability in the SSL protocol, particularly SSL version 3. SSL is used to secure conne
Read More
Article

SIEM Use Cases for PCI DSS 3.0 – Part 3

Welcome to the Part 3 of the series "SIEM Use Cases for PCI DSS 3.0". We have covered some very good use cases in Part 1 and Part 2. Let's look at some more
Read More
Article

Session hijacking cheat sheet

'Session Hijacking' is an old and routine topic in the field of application security. To make it more interesting, in this article, we are going to focus on
Read More
Article

Tyupkin ATM Malware Analysis

Introduction Some time ago, Kaspersky discovered and reported a new type of malicious program called Tyupkin, which targets ATM machines by moving beyond tar
Read More