Resources

BASICS

• Cybersecurity - Future of Tech by CompTIA

GLOSSARY

• Computer Security Resource Center - NIST
• Cybersecurity Career Resources - CISA

Conferences/Summits/Expos/Shows

• https://cybersecuritysummit.com/summit/
• https://infosec-conferences.com/
• https://www.cybersecurity.lu/
• https://www.sans.org/cyber-security-summit/
• https://dataconnectors.com
• https://conference.hitb.org/
• https://infosecuritycalendar.com/

CYBERSECURITY FORUM

• https://globalcybersecurityforum.com/
• https://cybersecforum.eu/
• https://csrc.nist.gov/Projects/forum/
• https://www.first.org/
• https://www.cybersecuritycollaboration.com/
• https://cybersecurityforum.com/
• https://www.himss.org/event-healthcare-cybersecurity-forum
• https://www.cyfiparis.com/

FORUM DISCUSSION

• https://www.wilderssecurity.com/
• https://www.reddit.com/r/netsec/
• https://www.reddit.com/r/cybersecurity/
• https://www.reddit.com/r/cyber_security/
• https://www.reddit.com/r/netsecstudents
• https://malwaretips.com/
• https://www.antionline.com/
• https://forums.comodo.com/
• https://www.bleepingcomputer.com/forums/
• https://www.defencetalk.com/military/forums/cybersecurity.63/
• https://forum.avast.com/index.php

PRESENTATIONS

• https://www.sans.org/presentations/

CERTIFICATIONS

• ISC2 - One Million Certified
• Paul Jeremy - Security Certification Roadmap
• The International Information Systems Security Certification Consortium (ISC)²
• International Association of Privacy Professionals (IAPP)
• Information Systems Audit and Control Association (ISACA)
• CompTIA IT Certifications
• Global Information Assurance Certification (GIAC)
• Institute for Security and Open Methodologies (ISECOM)
• List of Computer Security Certifications - Wikipedia

INTERNSHIPS AND APPRENTICESHIPS

• https://www.nist.gov/nice/apprenticeship-finder
• https://www.apprenticeship.gov

CYBERSECURITY AWARDS

• https://www.nist.gov/itl/applied-cybersecurity/nice/resources/awards

COMPETITIONS

• https://www.nist.gov/itl/applied-cybersecurity/nice/community/community-coordinating-council/cybersecurity-skills-0

EDUCATION & TRAINING

• NICE Cybersecurity Workforce Framework
• NICCS Education & Training Catalog
• National Initiative for Cybersecurity Careers and Studies (NICCS)
• CISA Training Resources
• Centers of Academic Excellence in Cybersecurity
• CyberCorps®: Scholarship for Service
• NICE List of Free and Low-Cost Online Learning

SCHOLARSHIPS

• CyberCorps®: Scholarship for Service

BUSINESS/CONTRACTING

• Small Business Administration Cybersecurity Resources

VULNERABILITIES

• NIST National Vulnerability Datase (NVD)
• Open Source Vulnerability - Snyk
• CVE MITRE
• OVAL MITRE

VIRTUAL SIMULATORS

• Virtualbox
• VMWare
• Docker
• Vagrantup
• Kubernetes
• ProxMox
• RedHat OpenShift

SECURITY/NETWORKING SIMULATORS

• https://attack.mitre.org/
• GNS3
• SEED Security Lab
• Common Open Research Emulator (CORE)
• GreyBox
• NS-3
• NiniNet
• EMANE

SECURITY/NETWORKING TOOLS

• https://www.cisa.gov/free-cybersecurity-services-and-tools
• https://sectools.org/
• https://cyberexperts.com/cybersecurity-tools/
• https://owasp.org/www-community/Free_for_Open_Source_Application_Security_Tools
• https://www.networkstraining.com/network-simulation-software-tools/
• https://www.kali.org/tools/
• https://www.sans.org/tools/
• https://isc.sans.edu/tools/
• https://www.shodan.io/

Security Assessment Tools

• https://www.aircrack-ng.org/
• https://www.metasploit.com/
• https://www.tenable.com/
• https://nmap.org/
• https://www.openvas.org/
• http://www.cirt.net/Nikto2
• https://sqlmap.org/
• https://www.wireshark.org/
• https://nmap.org/
• https://github.com/danielmiessler/SecLists

SECURITY INCIDENT RESPONSE

• https://thehive-project.org/

Network Analyzers

• http://www.porcupine.org/satan/

Scanners / Crackers

• https://www.openwall.com/john/

Vulnerability Scanners

• https://www.openvas.org/
• http://yasca.org/
• https://www.metasploit.com/
• https://www.tenable.com/products/nessus

Dynamic Application Security Testing (DAST)

Fuzz Testing / Fuzzing Tools

• https://peachtech.gitlab.io/peach-fuzzer-community/
• https://github.com/google/oss-fuzz
• https://github.com/google/clusterfuzz

Penetration Testing / Ethical Hacking

• https://www.kali.org/
• https://www.metasploit.com/

APIs Hacking

• https://github.com/arainho/awesome-api-security
• https://github.com/wallarm/gotestwaf

VIRUS / MALWARE SEARCH

• https://www.virustotal.com/gui/home/search

PASSWORD RECOVERY

• https://hashcat.net/hashcat/

Exploit / Malware Kits

• https://stillthinking.com

Remote Administration Tools

• https://stillthinking.com

Reverse Engineering

• https://binary.ninja/
• https://hex-rays.com/ida-pro/

SCRIPTING: BASH, POWERSHELL

• https://ryanstutorials.net/bash-scripting-tutorial/bash-script.php
• https://www.freecodecamp.org/news/shell-scripting-crash-course-how-to-write-bash-scripts-in-linux/
• https://tldp.org/LDP/abs/html/
• https://learn.microsoft.com/en-us/powershell/scripting/overview?view=powershell-7.3
• https://learn.microsoft.com/en-us/training/modules/script-with-powershell/
• https://www.techrepublic.com/article/10-fundamental-concepts-for-powershell-scripting/

DOMAINS

Leadership

• https://www.sans.org/cybersecurity-leadership/

Industry Security / Industrial Control Systems (ICS)

• https://industrialcyber.co/
• https://www.sans.org/industrial-control-systems-security/

Defensive Security

• https://www.sans.org/cyber-defense/

Offensive Security

• https://www.sans.org/offensive-operations/

Cloud Security

• https://www.sans.org/cloud-security/

Digital Forensics

• https://www.sans.org/digital-forensics-incident-response/

Authentication, Authorization, Accounting (AAA)

Password-less

• https://fidoalliance.org/

Biometric

• https://eab.org/
• http://openbiometrics.org/
• https://github.com/biometrics/openbr

SECURITY/PRIVACY FRAMEWORKS & STANDARDS

• SOC2/AICPA
• ISO/IEC 27001
• ISO/IEC 270017:2015
• PCI DSS
• NIST 800-171
• NIST 800-53
• NIST CSF
• FedRamp
• FIPS 140-2
• Open Source Finance Data Security Standard (OFDSS)
• AWS Foundational Technical Review (FTR) - Amazon
• Supplier Security & Privacy Assurance (SSPA) Program - Microsoft
• Minimum Viable Secure Product (MVSP)
• GDPR
• GDPR VS CCPA VS CPRA VS VCDPA VS CPA
• HIPAA
• SOX
• ISO 27701
• ISO 27018
• ISO 15408-1:2009
• ITGC
• NERC Cyber Security Standards (CSS)
• ISA/IEC 62443 Series of Standards
• Security Standards - the Open Group

OPEN SOURCE

• https://openssf.org/
• https://source.android.com/
• https://www.isecom.org

ASSOCIATIONS

• https://www.acm.org/
• https://www.computer.org/
• https://cra.org/
• https://cybersecurity.ieee.org/
• https://www.isc2.org/
• http://www.sans.org/
• https://owasp.org/
• http://www.issa.org/
• http://www.first.org/
• http://www.cisecurity.org/
• https://www.securityforum.org/
• http://www.isaccouncil.org/
• http://www.isalliance.org/
• http://privacyassociation.org/
• http://www.isaca.org/
• http://www.staysafeonline.org/
• https://csrc.nist.gov/
• https://aehis.org/
• http://www.iacr.org/
• https://www.theiia.org/en/
• http://www.cuispa.org/
• http://www.is-ra.org/
• http://www.aisp.sg/
• http://www.iasapgroup.org/
• https://www.isecom.org
• http://www.ewf-usa.com/
• http://www.cyberspaceintel.org/
• https://cloudsecurityalliance.org/
• https://cyberdefenselabs.com/
• http://www.identitymanagementinstitute.org/
• https://itsmfleaders.org
• http://www.cyberstudents.org/
• https://www.securityindustry.org/
• https://www.insaonline.org/
• https://www.afcea.org/
• https://www.actiac.org/
• https://quantumconsortium.org
• https://usgif.org/

RESOURCES

• https://www.sans.org/security-resources/
• https://www.sans.org/information-security-policy/
• https://www.sans.org/white-papers/
• https://www.sans.org/posters/