Resources for IT Staff

InfraGard
Infragard is an information sharing and analysis effort that is a cooperative undertaking between the U.S. Government (led by the FBI and the NIPC) and an association of businesses, academic institutions, state and local law enforcement agencies, and private citizens.

The Institute for Security Technology Studies (ISTS)
The ISTS and its core program on cyber-security and information infrastructure protection research at Dartmouth College serve as a principal national center for counter-terrorism technology research, development and assessment. Their Institute for Information Infrastructure Protection (I3P) group daily compiles timely and salient information on cybercrime, cyberterrorism, malware and other information-security issues at the strategic level

See the daily I3P Security in the News.

CERT/CC
The CERT/CC (Computer Emergency Response Team Coordination Center) is a center of Internet security expertise, located at the Software Engineering Institute, a federally funded research and development center operated by Carnegie Mellon University.

National Computer Emergency Response Team (US-CERT)
Established in September 2003, the US-CERT is the focal point for identifying and responding to computer security incidents in the United States. US-CERT is responsible for the analyzing and reducing cyber threats and vulnerabilities, disseminating cyber threat warning information, and coordinating incident response.

The Center for Infrastructure Assurance and Security (CIAS)
The CIAS is developing the world's foremost center for multidisciplinary education and development of operational capabilities in the areas of infrastructure assurance and security. The CIAS is a part of the Institute for Cyber Security at The University of Texas at San Antonio (UTSA).

National Cyber Security Division (NCSD)
NCSD is the division of the Department of Homeland Security that handles critical cyber assets. This agency was created to merge the capabilities of DHS's Critical Infrastructure Assurance Office, the National Infrastructure Protection Center, the Federal Computer Incident Response Center, and the National Communications System.

US-CERT For Government Users
This section of the US-CERT Web site deals with computer security issues affecting the civilian agencies and departments of the Federal Government.

Center for Education and Research in Information Assurance and Security (CERIAS)
Located at Purdue University, CERIAS is the world's foremost University center for multidisciplinary research and education in areas of computer, network, and communications security, as well as information assurance.

Computer Security Institute (CSI)
CSI is the world's leading membership organization specifically dedicated to serving and training information, computer, and network security professionals. Since 1974, CSI has been providing education and aggressively advocating the critical importance of protecting information assets.

National Strategy to Secure Cyberspace
The White House has released the revised National Strategy to Secure Cyberspace to ensure that America has a clear roadmap to protect a part of its infrastructure so essential to our way of life.

The Internet Storm Center (ISC)
ISC gathers more than 3,000,000 intrusion detection log entries daily in a rapidly expanding quest to find malicious activities (or storms) faster. The work at ISC is supported by funding from the SANS institute.

GCK's Information Security-related URLs
An immense listing of resources for all kinds of topics: cryptography, legal issues, operating system security, firewalls/IDS/honeypots, VPNs, Web-related security, hacker/cracker sites & tools, etc.

Threat centers provide up-to-the-minute information to IT professionals about the top Internet threats. They also provide a way to see the security levels of different regions around the world. Listed below are some of the more prominent threat centers on the Web:

**Cybersecurity Threat Centers**
	MS-ISAC Dashboard	Provides a central resource for gathering information on cyber threats and providing two-way sharing of information among the states, territories, and local government.
	Microsoft Malware Protection Center	Provides world class anti-malware research and response capabilities that support Microsoft's range of security products and services.
	Cisco Security Intelligence Operations	Early-warning intelligence, threat and vulnerability analysis, and proven Cisco mitigation solutions to help protect networks.
	Trend Micro TrendWatch	Trend Micro's dedicated threat center keeps users informed and abreast of the latest threats.
	Symantec Security Response	Provides comprehensive Internet protection expertise to guard against today's complex threats.
	McAfee Threat Center	An information hub that publishes news about digital security threats, and alerts you to new malware that might affect your computer.
	J-Security Center	A resource for security information and analysis. Delivers preventive and comprehensive network and application level security.