Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

The essentials of an acceptable use policy

What is an acceptable use policy? An Acceptable Use Policy (henceforward mentioned as "AUP") is agreement between two or more parties to a computer network
Read More
Article

Dockerizing a Sample GUI Application: Case Study

The goal for this article is a sprint from never using Docker to using it to deploy a GUI application that only has a console deployment pattern for Docker.
Read More
Article

Parameterized SQL query over dynamic SQL query

What is a parameterized SQL query? It is used for better performance, high efficiency and prevention of SQL injection vulnerability. Before going further, l
Read More
Article

Defense-in-Depth: Layered Protection and Data Security

Application vulnerability is caused when a developer fails to sanitize the input from user and blindly uses it as an input for further data processing. One o
Read More
Article

Top Cloud Computing Threats in Enterprise Environments

Introduction The cloud has been around for some time now and is still gaining popularity in every day operations of IT companies. I've seen different compani
Read More
Article

Risks and Cyber Threats to the Healthcare Industry

Introduction Every day, our digital identity is menaced by several cyber threats that are becoming even more sophisticated. Every year, data breaches expose
Read More
Article

The Evolutionary Approach to Defense

By: Philip Nowak The evolutionary approach to IT security seems to be the most natural and efficient way to resist cyber-attacks. The Red Queen Effect descri
Read More
Article

Encryption of Cloud Data

1.0. Executive Summary Organizations seeking to protect sensitive and mission-critical data quickly realize that there is no single answer to keep all system
Read More
Article

Privacy Risks of Sleep-Tracking Devices

1. Introduction According to the technology market intelligence company "ABI Research", there are currently more than 10 billion wirelessly connected devices
Read More
Article

Want to Limit PCI DSS Scope? Use Tokenization

Every organization should follow a proactive rather than a reactive approach to protect against threats, risks and vulnerabilities, to which if their IT infr
Read More
Article

Clickjacking, Strokejacking or UI Redress

Introduction Clickjacking was first publicized by Jeremiah Grossman and Robert "Rsnake" Hansen in 2008. Clickjacking is an attack that is possible only by th
Read More
Article

How a DNS Sinkhole Can Protect Against Malware

The Domain Name Service (DNS) is an integral part of Internet access. It translates human-recognized domain names into computer-readable IP addresses in orde
Read More
Article

In Cloud Networking, Security Needs to be a Combined Effort

From our experience in the cloud, layers of security are best Cloud computing infrastructure is elastic, scalable, highly available, and accessible - but is
Read More
Article

Tracking Attackers with a Honeypot - Part 2 (Kippo)

Introduction Unauthorized access to servers occurs on a daily basis. Attackers are constantly searching the Internet for servers that they can use for malici
Read More
Article

Three Security Practices That IoT Will Disrupt

I made it back from DEFCON with both my phone and tablet intact, but I'm happy I didn't bring a light bulb. You see, if had brought a light bulb, and that li
Read More
Article

Data Backups with Bacula: Mobile Devices

Introduction Bacula was specifically designed for backup jobs in a server environment, where servers have IP addresses that don't change regularly and are al
Read More
Article

Phishing WhatsApp Images via USB, From Python With Love

Introduction How many times did your work colleague or a friend of yours find a USB cable from your PC/Laptop and attach his Android phone to recharge its ba
Read More
Article

Preparing for a successful IAM integration project (Part 2 of 2)

Iteration-Based Delivery[pkadzone zone="main_top"] As mentioned before, an identity management implementation project will often extend 18-36 months based o
Read More
Article

Data Backups with Bacula: Notifications

Introduction When the backup solution is already working, we can also take a look at notifications more closely. We can send a notification email for every b
Read More
Article

Alleged Hack of iCloud Exposed Nude Photos of Celebrities Online

The case The gossip news of this week is the alleged hack of Apple's iCloud of many celebrities. Hundreds of naked photos purportedly belonging to more than
Read More
Article

Hacking traffic light systems

Traffic light systems security issues We often see movie scenes in which hackers are able to hack systems for the control of traffic lights, with catastroph
Read More
Article

Data Backups with Bacula: Backup Encryption

Introduction Bacula supports file encryption on the file daemon, which sends encrypted data to the storage daemon for storage. Since the file daemon encrypts
Read More
Article

Data Backups with Bacula: Client Data Backup and Restoration

Introduction When configuring the Bacula client, we don't need the full-blown Bacula installation, but just the bacula-client package that we can simply inst
Read More
Article

Data Backups with Bacula: Bacula Internals

Introduction This article presents the integral concepts of Bacula operation and management, which are integral parts of every Bacula backup solution and mus
Read More