Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Data Storage Issues with DAMN Vulnerable Thick Client App

Practical Thick Client Application Penetration Testing using Damn Vulnerable Thick Client App: Insecure Data Storage Background: Welcome to part-3 of thick
Read More
Article

Discovering entry points

When people secure real world physical objects for example bank premises, they first secure obvious entry points like entrance, doors, exists and much more w
Read More
Article

Insider Threats at Hospitals

What are insider threats, why do they happen, and what is the outcome? Insider threat is an umbrella term for a number of different malicious acts carried o
Read More
Article

Healthcare HITECH Act

The Healthcare HITECH Act is an important piece of legislation that affects everyone now that the Affordable Care Act is in place. However, if your company o
Read More
Article

HIPAA Overview and Resources

Under the Affordable Care Act, every United States citizen must be signed up for healthcare coverage. This also means that another, earlier piece of legislat
Read More
Article

Overview of Regulations and Compliance

Introduction The healthcare industry consists of a large pool of individuals and entities. There are of course doctors and nurses, but there are also adminis
Read More
Article

Remote Code Injection, Plus...

In Part One of this article, we learned about two injection techniques such as remote DLL injection and hollow process injection. In this article, we will le
Read More
Article

Remote DLL Injection, Plus...

In this article, we will take a look at the code injection techniques. We will take a look at remote DLL injection, remote code injection, Reflective DLL inj
Read More
Article

Traffic Analysis Using DAMN Vulnerable Thick Client App

Background: In the first part of this series, we have seen an introduction to Thick Client Applications, set up Damn Vulnerable Thick Client Application and
Read More
Article

The Oldest Biometric of All – Hand Geometry Recognition

Overview of the Last Article Our last article dealt with what is deemed to be the Ultimate Biometric Modality of all-Retinal Recognition. By itself, the eye
Read More
Article

Petya Ransomware Analysis Part II

In the previous part, we stopped right at when the decision of which approach to use to encrypt the data, i.e. either Petya or Mischa. In this article, we wi
Read More
Article

Practical thick client application penetration testing using damn vulnerable thick client app: An introduction

Though, thick client applications are not new, penetration testing process for thick clients is not as straight as Web Application Penetration testing. It is
Read More
Article

The Next Generation of Secure Documents: The e-Passport

Introduction Overview of the Last Article Our last article continued into the review and examination of Biometrics. This type of security tool, while it has
Read More
Article

Drones: The Future of Information Gathering

Just a few years back, drones or Unmanned Aerial Vehicle (UAV) were unknown to the world. These days, drones are idealized up with the thoughts of bombing an
Read More
Article

Retinal recognition – The ultimate biometric

Review of the last article As we have seen, there are numerous applications for Biometric Technology. They can range from very simple applications, such as
Read More
Article

Enumeration of Heaps, Environment Variables

Continuing with the series, in this article, we will learn about enumeration of important structures like heaps, environment variables, DLLs pointed by main
Read More
Article

PWN The PwnLab

Here is another interesting boot2root challenge we are going to solve. The vulnerable machine's name is PwnLab. We hosted the machine in VirtualBox and fire
Read More
Article

Detection and prevention of DNS anomalies

Malware and Botnets have been a threat to systems and networks for several years. The usual methods of detecting a virus with a local virus scanner or their
Read More
Article

The Biometric Technologies of the Future

Introduction Overview of the Previous Article Our last article reviewed what Multimodal Biometric Solutions are all about, and what the implications are for
Read More
Article

Page tables, VAD and PEB

In this part of the series, we will understand how the process can be enumerated within memory. Just as a refresher in part 1 of this series we had a look at
Read More
Article

Russia vs. the US: A Pretext to Discuss the Cyber “Cold War”

Introduction Early 2016, the Director of National Intelligence James Clapper told Congress that the US intelligence agencies were aware of cyber-attacks agai
Read More
Article

An Ultimate Guide to Secure Mobile Authentication

In the early stage when the first mobile phone was introduced, it was owned, managed and secured to business standards. Now mobile devices have grown in bill
Read More
Article

Penetration Testing: Covering Tracks

"Covering Tracks" is the final stage of a penetration test as a process – all the rest is paperwork. In a nutshell, its goal is to erase the digital signs le
Read More
Article

A brief introduction to Forensic Readiness

Introduction As defined in the RFC 2350 (Expectations for Computer Security Incident Response), the security incident is any adverse event which compromi
Read More