Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Protecting yourself from Social Engineering Attacks

Due to technical advances in today's society, traditional boundaries, borders and personal privacy have been redefined. This has resulted in a new freedom of
Read More
Article

Facebook Hacker Cup 2013 Qualification Round: Beautiful strings

Here's my follow-on to the Facebook Hacker Cup. Yesterday, I told you about my take on the Balanced Smileys puzzle. Today, we'll discuss the easiest challeng
Read More
Article

Introduction to secure software development life cycle

The objective of this article is to introduce the user to Secure Software Development Life Cycle (will now on be referenced to as S-SDLC). There are multiple
Read More
Article

Social Media use in the Military Sector

Introduction Social media has assumed a fundamental role in today's society. It is a technology with the highest penetration level, as billions of people are
Read More
Article

MetaData and Information Security

Information security and penetration testing is not limited to find the vulnerabilities on the website and network; it is an interesting profession that cove
Read More
Article

Linux Hardening

This article aims to provide a general list of security issues that should be considered when you are auditing a Linux system or when you are hardening an ex
Read More
Article

Android Application Assessment

In this article, we'll discuss THE steps involved in performing A security assessment of an Android based application. We will see the use of various tools a
Read More
Article

The Basics of ASP.NET

Introduction In this article we'll talk about unicode support in various elements of the HTTP protocol, but first let's say a few words about HTTP. We won't
Read More
Article

CompTIA Security+: SY0-301 Study Guide excerpt

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

Invoking Article 51 (self-defense) of the UN Charter in Response to Cyber Attacks – II

Cyber attacks through the perspective of the armed attack notion A cyber attack cannot rise to the level of an armed attack as prescribed in Article 51 "bec
Read More
Article

Introduction to Blackberry Balance Technology

Blackberry is known for its email and security rather than a company which produces fancy mobile phones. This is one of the reasons why Blackberry is preferr
Read More
Article

Invoking Article 51 (self-defense) of the UN Charter in Response to Cyber Attacks - I

Introduction Among the series of problems with regard to the legal regulation of cyber attacks is how the self-defense doctrine applies to them. In itself, t
Read More
Article

Restricting social media at work

Employees using social networks such as Facebook and Google+ may not only waste a lot of their working time, but also spread viruses on their work computers.
Read More
Article

Arbitrary file download: Breaking into the system

What you will learn: Introduction to Arbitrary File Download [pkadzone zone="main_top"] Difference between Arbitrary File Download and LFI/ RFI H
Read More
Article

Using X5S with Fiddler to find XSS Vulnerabilities

Cross Site Scripting is one of the top 10 OWASP security threats. This dangerous vulnerability allows attackers to inject malicious scripts on a website in u
Read More
Article

Demystifying dot NET Reverse Engineering: Advanced Round-trip Engineering

Before going through this article, I highly advice you to read all previous ones in the series since I will not re-explain some techniques and re-describe so
Read More
Article

Tips and Tricks for Using Two-Factor Authentication Technology

Large corporations have been employing two-factor authentication and multi-factor authentication for years to protect against customer identity theft, fraud,
Read More
Article

Security Assessment of Blackberry Applications:

Development of mobile applications have picked up really fast in the last couple of years. Much has been written about the security assessment of iOS & A
Read More
Article

LUKS: Swap, Root and Boot Partitions

The /swap Partition We need to encrypt the swap partition, since we don't want encryption keys to be swapped to an unencrypted disk. To do that we can first
Read More
Article

AAnval - SIEM by Tactical Flex

Aanval by Tactical Flex is an event correlation tool also known as a SIEM. Many governmental agencies require a centralized login system to retain and corre
Read More
Article

Command line for Windows malware and forensics

Abstract: WMIC has completed more than a decade of existence without having the limelight in terms of its features, though windows command line geeks hav
Read More
Article

Wordpress Security for Users

Introduction We all know that Wordpress is the primary CMS system used on the Internet. We also know that security in Wordpress is not always taken for grant
Read More
Article

Using Technology To Enhance Public Safety

This article is focused on the sport football (or soccer in the USA). Nevertheless, the same technology and security measures can be applied in virtually any
Read More
Article

IDA: Jumping, searching and comments

In this tutorial, we will describe the Jump Menu option in Ida Pro. Using the Jump command when analyzing an executable can prove to be a valuable trick in p
Read More