] This is a weblog written by a friend of mine who is has much infosec ] clue. I expect good things out of Randy's blog.

I do as well. A strongly recommended read.

Insights into Information Security by Randy Bias

Downlow on the Worm.

Analysis of Sapphire SQL Worm

This is an attempt by the IETF to clarify and define computer security terms.

RFC 2828 - Internet Security Glossary

I actually found this to be a fairly comprehensive, but a bit abstract, paper on providing information security with a "Defense in Depth" strategy. Recommended reading if you are looking to fill out the edges of your knowledge or are doing research.

NSA's 'Defense in Depth' Paper

Decius wrote:
] Although most of the articles in the new phrack consist of
] more boring papers on buffer overflows, this article is
] interesting. How to Jam civilian GPS receivers. There is also
] an entertaining article about how traffic lights work...

Agreed. It's the only one I read and the only one that was truly interesting.

RE: Phrack: Jamming GPS

] Organizations relying on the Internet face significant
] challenges to ensure that their networks operate safely.
] And that their systems continue to provide critical
] services even in the face of attacks.
]
] Denial of service, worms, DNS, and router attacks are
] increasing. To help you stay one step ahead of these and
] other threats, the IEEE Computer Society is introducing a
] new periodical in 2003 IEEE Security & Privacy magazine.
]
] IEEE Security & Privacy will rethink the role and
] importance of networked infrastructure and help you
] develop lasting security solutions.

In 2003, IEEE is offering a new publication that may be of interest to you.

IEEE Security & Privacy magazine

This looks like it might be useful, although exactly how useful remains to be seen. . .

Macintosh Security Site - Security for Mac Platform MacOS X Security Firewalls Desktop Network Security secure mac os x Virus Encrpytion PGP macosx

cyantist wrote:
] Your computer is full of evidence. You need help now.
]
] Years of Internet data could be used by the police.
]
] Time of latest investigation: Today 7:28:18 P.M. ON 29
] NOVEMBER 2002
]
] Click Here Now For Urgent Help To Stop This Investigation
]
] Are you guilty? What's that on your desktop? What are all
] those PICTURES?

For whatever it's worth I have purchased and used this product. It works and it's pretty effective.

RE: YOU HAVE A BIG PROBLEM

] I'd like to play with this as a filtering system in the agent...

That would be tres' cool.

Bayesian Spam Filtering

] "Apache/Tomcat Denial Of Service And Information Leakage
] Vulnerability"

WooHoo! My first vulnerability discovery.

MARC: msg 'Apache/Tomcat Denial Of Service And Information Leakage Vulnerability'