Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

.NET Framework CLR: Common Language Runtime

Introduction The point of this article is to lay down the conceptual groundwork of numerous .NET related topics such as CLR, CTS, CLS, Managed Code, JIT Comp
Read More
Article

Risks of using a shared hosting server

In this article, I would like to present the risks associated with hosting your site on a shared hosting server. I often correlate it with the analogy, "a ch
Read More
Article

An Introduction to Returned-Oriented Programming (Linux)

INTRODUCTION: In 1988, the first buffer overflow was exploited to compromise many systems. After 20 years, applications are still vulnerable, despite the eff
Read More
Article

Embedding Security in Procurement Process & Vendor Contracts – Part 2

Background: In the previous article, we've covered how to implement security in procurement process and vendor contracts. There are 3 different aspects to m
Read More
Article

DDoS Attack on Spamhaus – An insight

Spamhaus recently witnessed one of the biggest Distributed Denial of Service attacks on its infrastructure. The Spamhaus Project is an international non-prof
Read More
Article

Code Access Security (CAS)

Abstract Security is an essential part of .NET applications and should be taken into consideration from the grass root level. Security is all about protecti
Read More
Article

Loading the Windows Kernel Driver

In the previous part of the article, we've explained how to compile the Windows kernel driver. Now that we know how to compile the driver, we also have to lo
Read More
Article

Penetration testing for iPhone applications – Part 4

In the first part of the article, we have discussed the iPhone application traffic analysis. The second part of the article covered privacy issues and proper
Read More
Article

Compiling the Windows Kernel Driver

Introduction In the previous article, I've written and described a kernel mode driver, but I haven't actually done anything with it. There's something missi
Read More
Article

Writing a Windows Kernel Driver

Introduction If you haven't read the first two articles yet, here and here, then you probably should, because they are essential to understanding what we'll
Read More
Article

Dot NET Assemblies and Strong Name Signature

General Overview Before going any deeper on this subject, we need to clarify a huge ambiguity regarding signing for versioning and signing for protecting.[p
Read More
Article

Windows Building Environment for Kernel Driver Development

Details of Driver Development Environment In the previous article , we saw that upon installing WDK 7.1.0, we got build environments for Windows 7, Windows S
Read More
Article

Botnets and cybercrime - Introduction

Preface One of the most insidious cyber threats for security community is represented by diffusion of botnets, networks of infected computers (bots or zombie
Read More
Article

Machine Learning Part 3: Ranking

INTRODUCTION: In the previous article, we saw the utility of Naïve Bayes Rule for malware classification. While simple to understand and implement, we have
Read More
Article

Windows booting process

In the previous tutorial, we've seen how one would go about booting the Linux operating system by using GRUB. We presented the basic overview of the booting
Read More
Article

Linux Booting Process

Introduction In this article, we'll take a closer look at the booting process of the Linux operating system. We've already described the booting process i
Read More
Article

A Security Officer’s Playbook

I've been writing some pieces for InfoSec Review about my past work in information security management and assurance within the British government. Although
Read More
Article

Embedding Security in Procurement Process and Vendor Contracts

Background: Every organization has a procurement process. Some of the software products acquired by an organization are COTS (Commercial off The Shelf) Solu
Read More
Article

Anti-Forensics 2

For part one, click here[pkadzone zone="main_top"] 1. - Analysis Prevention and Memory Resident Execution The second part of this document examines those t
Read More
Article

An Introduction to Data Masking

Background: Dealing with Production Data is a challenge, but most organizations around the world have safeguards in place which secure the production enviro
Read More
Article

Windows Kernel Debugging Symbols and Commands

Introduction In this tutorial, we'll introduce a few basic tools that we need to have available when doing kernel debugging on Windows. Besides that, we'll p
Read More
Article

C# Core Programming Construct (PART-1)

Introduction This article explores the core C# programming language constructs by presenting numerous stand-alone concepts such as data types, constants, it
Read More
Article

Machine Learning : Naïve Bayes Rule for Malware Detection and Classification

ABSTRACT: This paper presents statistics and machine learning principles as an exercise while analyzing malware. Conditional probability or Bayes' probabili
Read More
Article

The Sysenter Instruction and 0x2e Interrupt

In this article, we'll present a couple of examples where we'll be using the 0x2e int instruction to interrupt the kernel and call some interrupt service rou
Read More