Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Biometrics: Technical Aspects

Overview of the Last Article Deploying any type or kind of security solution can be a daunting task. There are many factors which need to be taken into consi
Read More
Article

The Mirai Botnet: A Milestone in the Threat Landscape

August 2015, MalwareMustDie spotted the Mirai malware In August 2015, the researcher MalwareMustDie analyzed samples of a new ELF Trojan backdoor, dubbed ELF
Read More
Article

I Social Engineered my Dad!

Introduction I'd like to tell you a short story about how I performed a Social Engineering attack against my lovely Dad! Of course, everything that I did wou
Read More
Article

Process: Scanning and enumeration

In an environment of global connection and cyber terrorism, the protection of information assets is vital to every private business, public organization, and
Read More
Article

A Project Management Guide to Deploying Biometrics: The Basics

Overview of the Last Article Our last article examined the concept of E-Voting, and how it is taking precedence worldwide. Essentially, many nations around
Read More
Article

Regulatory Compliance for HIPAA Security Officers

Prior to the Health Insurance Portability and Accountability Act (HIPAA), enacted in 1996, the healthcare industry had no generally accepted set of security
Read More
Article

HIPAA and IT Security

The health care system, and the research organizations within it, is a sensitive sector and one of the most exposed to privacy risks, which makes the securit
Read More
Article

Midstream Security for Oil

I hope you enjoyed the previous parts of Oil and Gas Cyber Security series (Upstream Cyber Security and Oil and Gas Cyber Security 101). Today we will talk a
Read More
Article

Defeating integer overflow attack

Abstract This article unleashes memory overflow related security vulnerabilities, in particular, Integer Overflow (resided during source coding inadvertentl
Read More
Article

SSL Pinning in UWP Apps

Introduction and Background: In the previous article, we have discussed some of the common checks we need to make while testing Windows application traffic.
Read More
Article

A Detailed Look Into the World of Clinical Decision Support Systems

As healthcare organizations become more and more advanced in their utilization of technology, they are now able to help their patients in a more efficient an
Read More
Article

Top Clinical Application Systems

Introduction The increasing usage of digital technology in the healthcare industry is tragically in direct relation with the exploitation of it. Over the pas
Read More
Article

Who is Hacking Healthcare?

In February of last year, history was made when about 78 million Anthem customers were hacked; till date, it’s the largest breach that healthcare has ever se
Read More
Article

Intercepting Http/Https traffic of Uwp apps on Windows desktop

In the previous article of the series, we have discussed how to intercept HTTP/HTTPS traffic of Windows Phones. In this article, we will discuss how to int
Read More
Article

Biometrics and E-Voting

Overview of the Last Article When Biometric technology is examined in comparison to all of the other security technologies which are available today, it is t
Read More
Article

Penetration Testing Resources: Practicing Skills

Penetration testing can help fortify online and offline data security, strengthen system stability and improve user privacy protocols. This is the process of
Read More
Article

Intercepting HTTP/HTTPS Traffic on Windows Phones

Introduction and Background: In the previous article of the series, we have discussed Sideloading concepts associated with Windows Phone 8.1 apps and UWP app
Read More
Article

Mobile Hacking Tools: The Current Top Mobile Device Threats

Criminal syndicates are strategically adapting to the changing times. An estimated 25% of all mobile devices worldwide were reported by SkyCure to encounter
Read More
Article

DNS enumeration techniques in Linux

During the Information Gathering phase, DNS enumeration is one of the most critical steps. When we mention DNS enumeration, we are referenced to all the tech
Read More
Article

Sideloading

Introduction and Background: In the First article of the series, we have covered the introduction and background required to start learning Windows Mobile Ap
Read More
Article

Understanding Applications

The first article of the series covered the introduction and background required to start learning Windows Mobile Application Penetration Testing. We have al
Read More
Article

The Social Impacts of Biometric Technology

Overview of the Last Article Our last article reviewed what is deemed to be the "most stable Biometric of all"-Iris Recognition. This modality actually has i
Read More
Article

What’s So Different with Audit?

Though aimed at InfoSec practitioners, I hope this piece will also be of interest to audit practitioners, whether InfoSec centered or not. Audit, Assurance,
Read More
Article

The Shadow of the Russian Cyber Army Behind the 2016 Presidential Election

US Accuses Russia of Attempting to Disrupt The US Presidential Election A few weeks ago, the US Government officially accused Russia of trying to interfere t
Read More