• IEEE Computer Society Digital Library
• ACM Digital Library
• Information Assurance Support Environment (IASE)
• Information Assurance Technology Analysis Center (IATAC)

References

• Security General
• Security Guidelines
• Incident Response
• Portals & Publications
• Firewalls
• Forensics

Security (Overview, General, Opinions)

Best Practices in Network Securityty by Fred Avolio
Conducting A Security Audit: An Introductory Overview: by Bill Hayes
Cross Platform Security Analysis by Anton Chuvakin
Federal Cybersecurity: Get a Backbone by Marcus Ranum
Hammering Out a Secure Framework by Mike Fratto
The Rise and Fall of Internet Security: A Story in Two Parts by Fred Avolio
The State of Systems Security by Ron Dufresne
Vulnerability Assessment Survey at SecurityFocus.com
Best Practices for Securing Enterprise Networks by Dave Piscitello and Lisa Phifer
Rethinking Network Security  

Security (Guidelines)

Organization for Economic Co-operation and Development (OECD) Guidelines for the Security of Information Systems and Networks (9 pervasive principles for information security upon which several other guides are based.)
ISF Security Standard  A Standard of Good Practice for Information Security
Internet Security Alliance (ISA):  Common Sense Guides for Senior Managers
ITCG: Information Technology Control Guidelines
StaySafeOnline – Top 10 Security Tips, Security Test, educational materials and more
SANS - Top 20 Internet Security Attacks Target
Cyber Security and Consumer Data: What’s at Risk for the Consumer?
Department of Trade and Industry: Code of Practice for Information Security
Information Security Governance Institute: Guidance for Boards of Directors and Executive Management
Association of Small Business Development Centers Network (ASBDC) e-Security Guide for Small Business
US-CERT: Small Business Best Practices (Internet Security Alliance and Small Business Working Group

Incident Response & Advisory Centers

Cert(sm) Coordination Center. CERT studies Internet security vulnerabilities, provides incident response services, publishes security alerts, researches security and survivability, and develops information to help you improve security at your site.

Center for Education and Research in Information Assurance and Integrity. CERIAS provides innovation and leadership in technology for the protection of information and information resources, and in the development and enhancement of expertise in information assurance and security.

Computer Incident Advisory Capability. CIAC provides computer security services to employees and contractors of the DOE, and serves as a primary resource for anyone with an interest in security issues.

Forum of Incident Response and Security Teams (FIRST)T). FIRST fosters cooperation and coordination in incident prevention among a variety of computer security incident response teams from government, commercial, and academic organizations to prompt rapid reaction to incidents, and to promote information sharing among members and the community at large.

The Information Warfare Site. This site is an online resource that aims to stimulate debate about a range of subjects from information security to information operations and e-commerce. It is the aim of the site to develop a special emphasis on Europe.

Trust Services Criteria

Portals, Info Sites & Publications

All-Internet-Security.com Directory is an established and active marketplace for free, shareware and Internet Security resources. .