Site Security Planning

Web Links

http://www.ntbugtraq.com: The ntbugtraq Web site hosts the leading Internet mailing list for tracking Windows NT and Windows 2000 Server–related bugs.
http://www.cert.org: The CERT Coordination Center manages responses to security incidents and security vulnerability reports, and provides information about a wide range of security-related issues.
http://info.internet.isi.edu/in-notes/rfc/files/rfc2196.txt: RFC 2196 is a site security planning document published by the Internet Engineering Task Force (IETF). Coverage includes policy formation and content, many technical network security topics, and incident response.
http://www.iss.net: The Internet Security Systems Web site is a source of links to FAQs, mailing lists, newsgroups, and other security-related resources. The company describes its security products at this site as well.
http://www.microsoft.com/security/default.asp: This is the most comprehensive and up-to-date site dealing with Microsoft security. Coverage includes Microsoft’s security bulletins, information about security for each Microsoft product and technology, and links to other security information resources.
http://www.sans.org/newlook/home.htm: The SANS Institute is an organization dedicated to helping computing and networking professionals share their experiences in solving the problems they face. The Institute provides publications and online information and hosts conferences and seminars on network security. Publications on Windows NT security include: SANS NT Digest and Windows NT Security: Step-by-Step Guide.
http://www.trustedsystems.com/NSAGuide.htm: Trusted Systems wrote Windows NT Security Guidelines through a year-long project for the National Security Agency (NSA). It provides guidelines for configuring Windows NT for optimum security, including government C2-level security. You can download the guidelines from this site.
http://www.w3.org/security: The World Wide Web Consortium (W3C) pages on security cover many important security issues and technologies. The site is also a good portal to other security-related sites.