LibGuides: Cyber Security & Digital Forensics: Find Policies & Best Practices

Government Agencies, Organizations, and Tools

Department of Homeland Security: Cybersecurity Resources
Includes, videos, papers and guides from the Department of Homeland Security
ICS-CERT
Recommended practices, assessments, and standards, from the US-CERT, part of the Department of Homeland Security.
Law Enforcement Cyber Center
This site includes resources for law enforcement on best practices for cyber crime investigations
MA Attorney General: Cyber Crime Division
Provides resources on staying safe online for all ages
National Security Archive Cyber Vault
This site is an online resource that provides information on the cyber activities of the United States, foreign governments, and organizations
NITRD: CISA
The cybersecurity division of the Networking and information Technology Research and Development Program offers information about the national cybersecurity strategy for the US. You will find the Federal Strategic plan as well as links to publications and the Federal Register.
NIST: Computer Security Resource Center
"NIST develops and maintains an extensive collection of standards, guidelines, recommendations, and research on the security and privacy of information and information systems. This includes various NIST technical publication series" --from website
Science of Security (SOS)
"The National Security Agency Research Directorate sponsors the Science of Security Initiative to promote foundational cybersecurity science that is needed to mature the cybersecurity discipline and to underpin advances in cyberdefense. The SoS initiative works in several ways. 1. Engage the academic community for foundational research, 2. Promote rigorous scientific principles, and 3. grow the SoS community. " -from website
US CERT
Offers alerts and documents for keeping your digital content safe

European Union Agency for Cybersecurity
"The European Union Agency for Cybersecurity (ENISA) contributes to EU cyber policy, enhances the trustworthiness of ICT products, services and processes with cybersecurity certification schemes, cooperates with Member States and EU bodies, and helps Europe prepare for the cyber challenges of tomorrow." --from website
INTERPOL: Cybercrime
Describes support provided and offers consumer information
National Cybersecurity Centre
Collection of resources that laymen, organizations, and professionals can use to be more secure
NATO CCDOE: Research
Collects cybersecurity/cyber defense research and strategy documents

Carnegie Mellon CERT
"The CERT Division is a leader in cybersecurity. We partner with government, industry, law enforcement, and academia to improve the security and resilience of computer systems and networks. We study problems that have widespread cybersecurity implications and develop advanced methods and tools to counter large-scale, sophisticated cyber threats." Check out their page for research and a vulnerability database.
CERIAS
Purdue University's Center for Education and Research in Information Assurance and Security (CERIAS) offers research, training resources, and a vulnerability database
Cloud Security Alliance
"The Cloud Security Alliance (CSA) is the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment." -from website
MIT EECS: Cybersecurity
Research from MIT's Electrical Engineering and Computer Science department
National Cybersecurity Alliance
"The National Cyber Security Alliance (NCSA) builds strong public/private partnerships to create and implement broad-reaching education and awareness efforts to empower users at home, work and school with the information they need to keep themselves, their organizations, their systems and their sensitive information safe and secure online and encourage a culture of cybersecurity." -from website
National Cyberwatch Center
The National Cyberwatch Center leads collaborative efforrts to improve cybersecurity education and improve the national workforce.

Law Enforcement Cyber Center: Cybercrime Investigations
Links to resources on digital evidence and devices.
NIJ: Digital Evidence & Forensics
Includes a brief article and a link to Digital Forensics publications
SANS: Digital Forensics Resources
Includes up to date resources on digital forensics practices

Common Vulnerabilities and Exposures (CVE)
CVE is a collection of records of publicly known security vulnerabilities.
Internet Storm Center
The Internet Storm Center keeps track of security intrusions and provides data on the current security attacks.
Metasploit
Metasploit is a penetration testing framework. Download the open source version for free.
National Vulnerability Database (NVD)
"The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics."
Nmap
Nmap is an open source tool that allows you to evaluate your network. Use to inventory your network, manage upgrades, and more.