skip to main | skip to sidebar

Critical Information Infrastructure Protection and Security

This blog infraprotect.blogspot.com (or infraprotect dot blogspot dot com ) focuses on the Critical Information Infrastructure (CII) Security issues. CII means the information layer which critical infrastructures depend on for planning, operation and management. Security compromises in the information layer may impact the infrastructure service operations and continuity which in turn affects the national economy and integrity.

Showing posts with label Security Posture Assessment. Show all posts
Showing posts with label Security Posture Assessment. Show all posts

Sunday, April 12, 2009

Some articles on penetration testing

Six hours to hack the FBI

5 free penetration testing tools

Cost effective penetration testing

Core Impact penetration testing tool (not free)

Posted by A Fattah Yatim at 11:06 AM 2 comments:
Labels: Penetration Tests, Security Posture Assessment
Older Posts Home
Subscribe to: Posts (Atom)

Subscribe To

Posts
Atom
Posts
All Comments
Atom
All Comments

Visit Counter

What This Site is About ...

Many of our National Infrastructures today, for example, energy, banking and finance, information and communication, national defense and security, transportation, water, health services, government, emergency services, food and agriculture, depend heavily on information systems and information transmission. Increasingly these information channels use and are dependent on the Internet.

Virus and malware incidents as well as cyber attacks on the infrastructures have happened in the past and have crippled the affected societies in varying degrees. A national level initiative is mandatory to ensure that such infrastructures are not vulnerable to cyber incidents and can respond to cyber incidents. This site is an attempt to assemble materials, links and articles on the subject of Critical Information Infrastructure Protection and Security. The copyright of any materials quoted or linked remain with the respective owners.

Blog Archive

  • ▼  2010 (5)
    • ▼  March (5)
      • Latest Version Of Cybersecurity Act Lessens Presid...
      • Copy Machines Can Store Your Private Info
      • Cyber attacks shift to the cloud, too
      • China Schools Seen Behind Cyberattacks on Google
      • Government and infrastructure tops hacking league
  • ►  2009 (29)
    • ►  December (3)
    • ►  October (1)
    • ►  September (1)
    • ►  August (1)
    • ►  June (2)
    • ►  May (1)
    • ►  April (6)
    • ►  March (4)
    • ►  February (4)
    • ►  January (6)
  • ►  2008 (29)
    • ►  November (3)
    • ►  September (4)
    • ►  May (3)
    • ►  April (1)
    • ►  March (7)
    • ►  February (4)
    • ►  January (7)
  • ►  2007 (45)
    • ►  December (5)
    • ►  November (13)
    • ►  October (27)

Critical Infrastructure Links

  • Australia CIP
  • Canada Office of CIP
  • Critical Infrastructure Institute International
  • CyberSecurity Malaysia's CNII Portal
  • DHS Critical Infrastructure and Key Resources
  • Digital Bond (SCADA Security)
  • Information Warfare Site - Various Articles
  • Infracritical - Your Infrastructure, Their future
  • Institute of Information Infrastructure Protection
  • New Zealand CCIP
  • UK - CPNI
  • US Control Systems Security Program CSSP
  • US National Infrastructure Protection Plan NIPP
  • USA Critical Infrastructure News
  • USA Department of Homeland Security

Business Continuity, Disaster Recovery and Societal Security

  • ASIS International
  • Business Continuity Institute
  • Business Continuity Management (Practicioners)
  • Business Continuity Management Institute
  • Disaster Recovery Institute
  • Disaster Recovery Journal
  • Security Management (ASIS Publication Site)

Rational Security Thinking Links

  • Security in 10 Years - Schneier-Ranum
  • Real Stupid Security Incidents
  • Bruce Schneier's Views and Critiques

General Threats and Security Links

  • Cyber Attacks Mid Year Report 2007
  • Denial of Service (DoS) Attack Resources
  • Natural Disasters Map
  • US CERT Publications

Useful Blogs

  • Critical Infrastructure Protection blog
    Cybersecurity: Senate bill would make international cooperation a priority
    17 years ago
  • Russian Business Network (RBN)
    RBN – Fake Codecs
    18 years ago

Organizations Links

  • Crisis and Risk Network CRN CSS
  • Manufacturing Computer Solutions
  • Instrumentation Systems and Automation Society

Books, Journals, References,Experts

  • Cybersecurity for SCADA Systems
  • Information Warfare - Many Articles
  • Insecure Magazine
  • Myriam Dunn Cavelty
  • SCADApedia

Labels or Tags

  • Hacks (22)
  • SCADA (18)
  • Cyber Attack (11)
  • Vulnerability (11)
  • Government (7)
  • Standards (7)
  • USA (6)
  • CNII (5)
  • China (5)
  • Malware (5)
  • Power Grid (5)
  • Security Breach (5)
  • Control Systems (4)
  • Hackers (4)
  • Bank (3)
  • Botnet (3)
  • Cloud (3)
  • DDOS (3)
  • Homeland Security (3)
  • Penetration Tests (3)
  • Air Defense (2)
  • Air Traffic (2)
  • Australia (2)
  • Automation (2)
  • Breach (2)
  • Certification (2)
  • Countermeasures (2)
  • Crime (2)
  • Critical Infrastructure (2)
  • Cyber Preparedness (2)
  • DHS (2)
  • Espionage (2)
  • Exploits (2)
  • Guide (2)
  • Hospital (2)
  • IRS (2)
  • Iframe (2)
  • Incident Response (2)
  • Incidents (2)
  • Interview (2)
  • Lawsuit (2)
  • Loopholes (2)
  • Manufacturing (2)
  • NIST (2)
  • SQL Injects (2)
  • Secure Programming (2)
  • Security Flaw (2)
  • Strategy (2)
  • Threat (2)
  • Virus (2)
  • Virus Attack (2)
  • Worm (2)
  • Acculturation (1)
  • Airport (1)
  • Antivirus (1)
  • Audit (1)
  • Awareness (1)
  • Back Door (1)
  • Backdoor (1)
  • Best Practices (1)
  • Blackberry (1)
  • Blogs (1)
  • Bugs (1)
  • CERTS (1)
  • CIP (1)
  • CISCO (1)
  • Cable (1)
  • Chinese (1)
  • Collaboration (1)
  • Common Criteria (1)
  • Compliance (1)
  • Compromised (1)
  • Computer Failure (1)
  • Control Tower (1)
  • Control of Internet (1)
  • Controls (1)
  • Coordination (1)
  • Copy Machines (1)
  • Countries (1)
  • Credit (1)
  • Criminal (1)
  • Crypto (1)
  • Cyber Sheriff (1)
  • Cyber War (1)
  • Cybersecurity Bill (1)
  • DCS (1)
  • DNS (1)
  • DOS (1)
  • Data Loss (1)
  • Data Protection (1)
  • Defense (1)
  • Drone (1)
  • EC Directive (1)
  • Education (1)
  • Electronic Warfare (1)
  • Estonia (1)
  • Exercise (1)
  • Expert (1)
  • Experts (1)
  • Exposures (1)
  • FAA (1)
  • Failure (1)
  • Financial Institutions (1)
  • Flight (1)
  • Forgery (1)
  • France (1)
  • GAO (1)
  • Gaming (1)
  • Gaza (1)
  • Georgia (1)
  • Glitches (1)
  • Grounded (1)
  • Guidelines (1)
  • HITB (1)
  • Hacking (1)
  • Hardware (1)
  • Health (1)
  • Healthcare (1)
  • Hijack (1)
  • ISP (1)
  • Identity Theft (1)
  • Impact (1)
  • India (1)
  • Indigeneous (1)
  • Industry (1)
  • Information Sharing (1)
  • Infrastructure (1)
  • Initiatives (1)
  • Insider (1)
  • Internal Controls (1)
  • Internet Security (1)
  • Interruptions (1)
  • Intrusion (1)
  • Israel (1)
  • Kids (1)
  • Korea (1)
  • Legal (1)
  • Legislation (1)
  • Limits of Authority (1)
  • Logic Bomb (1)
  • London (1)
  • Malicious (1)
  • Massive (1)
  • Middle East (1)
  • Mortgage (1)
  • NHS (1)
  • OPC (1)
  • OS (1)
  • OWASP (1)
  • Oil and Gas (1)
  • PCI (1)
  • PLC (1)
  • Patch (1)
  • Pentagon (1)
  • Physical Security (1)
  • Plans (1)
  • Policy (1)
  • Potential Threats (1)
  • Power Systems (1)
  • Predictions (1)
  • Preventive Measures (1)
  • Privacy (1)
  • Private (1)
  • Process Control (1)
  • Public (1)
  • Publications (1)
  • RFID (1)
  • Radar (1)
  • Report (1)
  • Risk (1)
  • Rootkits (1)
  • Russia (1)
  • Safe Internet (1)
  • School (1)
  • Screw Up (1)
  • Security Companies (1)
  • Security Education (1)
  • Security Posture Assessment (1)
  • Segregation of Responsibilities (1)
  • Smartcard (1)
  • Software (1)
  • Statistics (1)
  • Symposium (1)
  • TV (1)
  • Task Force (1)
  • Teachers (1)
  • Teens (1)
  • Tests (1)
  • Threats (1)
  • Toolkits (1)
  • Top Mishaps (1)
  • Training (1)
  • Trends (1)
  • Trojan (1)
  • US (1)
  • US-Cert (1)
  • Ukriane (1)
  • Unauthorized (1)
  • Underground Economy (1)
  • Vendor (1)
  • Video (1)
  • Vulnerabilities (1)
  • Water Utility (1)
  • Weaknesses (1)
  • Weapons (1)
  • Web Attack (1)
  • Web Servers (1)
  • Year Summary (1)
  • ePrivacy (1)
  • iWork (1)

Followers