Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Data Backups with Bacula: Creating the Storage Partition

Introduction In this endeavor I've chosen to use Bacula backup software for the reasons outlined above. First we must talk about the Bacula server, but the o
Read More
Article

iOS Application Security Part 35 - Auditing iOS applications with iDB

In this article, we will look at another cool utility named iDB for pentesting iOS applications. Before that, i would like to apologize for coming up late wi
Read More
Article

Windows registry analysis with RegRipper – A ‘hands-on’ case study

Every analysis begins with specific goals in mind. As a forensics investigator, you are expected to know the type and importance of information you are looki
Read More
Article

Exploiting Systemic Query Vulnerabilities: Why You Should Not Attempt to Re-invent PDO

The particular exploits in this article take advantage of systemic query factory vulnerabilities, vulnerabilities which exist throughout an entire applicatio
Read More
Article

PGP Alternatives for Email Encryption

A few weeks ago, I wrote an article for 2600 Magazine. (If you're curious, publication has been confirmed and you'll probably see it in the Winter 2014-2015
Read More
Article

Getting started with android forensics

This article introduces Android forensics and the techniques used to perform Android forensic investigations. We will discuss Android file systems, data acqu
Read More
Article

Microsoft NAP (Network Access Protection)

In this article we will learn about one of the most important features introduced by Microsoft from the perspective of network access protection (NAP). We wi
Read More
Article

Operation Emmental: Banking Hit by Even More Sophisticated Cyber Attacks

Operation Emmental Security experts at Trend Micro have recently uncovered a hacking campaign dubbed "Operation Emmental" which targeted Swiss bank accounts
Read More
Article

Windows registry forensics using ‘RegRipper’ command-line on Linux

Windows registry is a gold mine for a computer forensics investigator. During case analysis, the registry is capable of supplying the evidence needed to supp
Read More
Article

Cyber Insurance

Introduction Cyber insurance coverage has been available on the market for a decade, but only recently companies have been seeing a significant growth—sales
Read More
Article

Authentication in the Cloud

Cloud computing is changing the way we interact with devices, software, data and processes. But some things never change, and one thing that remains true acr
Read More
Article

The Cloud is Both More and Less Secure than you Think

At the beginning of this year, an Intermap poll found that cloud security is still a major obstacle to cloud adoption, with 40% of respondents still wary of
Read More
Article

Analyzing the mod security logs

In the previous article, we had already configured the Mod-Security Firewall with OWASP Core Rule Set (CRS). But installing and configuring the Mod Security
Read More
Article

Cookies with Secure Flag: Undesired Behavior in Modern Browsers

Introduction When a cookie has secure flag set, it will only be sent over secure HTTPS, which is HTTP over SSL/TLS. This way, the authentication cookie will
Read More
Article

Securing VoIP systems

Voice over Internet Protocol (VoIP) is a methodology and group of technologies for the delivery of voice communications and multimedia sessions over Internet
Read More
Article

Securing Shared Preferences with Third Party Libraries

In one of the previous articles, we have seen how developers implement Shared Preferences in Android applications. We have also seen how one can compromise t
Read More
Article

Blackbox Assessments with Introspy

This article explains how to start performing black box assessments on Android applications using Introspy. Introspy is one of the important tools in an Andr
Read More
Article

Bringing Down Security Risks With A BYOD Encryption Policy

The number of employees using their personal devices for work-related purposes is absurd. Let's just say there's an employee or two in every organization usi
Read More
Article

Have New Backdoors Been Discovered in iOS? An Interview With iOS Developer and Digital Forensics Expert Jonathan Zdziarski

When the HOPE X (Hackers On Planet Earth) 2014 convention started on July 18th, one particular presentation caught the undivided attention of information sec
Read More
Article

Xplico

Downloading Xplico In this article we'll present Xplico, which is a network forensics tool installed in major digital forensics Linux distributions like Kali
Read More
Article

Amazon S3 Encryption

Introduction Cloud computing has really changed how organizations operate and store their data. Cloud computing attracts big organizations with tags such as
Read More
Article

Shellcode Detection and Emulation with Libemu

Introduction Libemu is a library which can be used for x86 emulation and shellcode detection. Libemu can be used in IDS/IPS/Honeypot systems for emulating th
Read More
Article

Crowdsensing: State of the Art and Privacy Aspects

1. Introduction It is estimated that today approximately three-quarters of the human population has a mobile phone. Crowdsensing, a new business model, allow
Read More
Article

How cybercrime exploits digital certificates

What is a digital certificate? The digital certificate is a critical component of a public key infrastructure. It is an electronic document that associates
Read More