Learn More Security
Do you want to know more?
Want to learn more about memory analysis?
- Install Volatility or grab SIFT VM
- Get memory image samples from:
- Volatility wiki: https://code.google.com/p/volatility/wiki/PublicMemoryImages
- HoneyNet: http://honeynet.org/challenges/2010_3_banking_troubles
- Book:
- Practice, practice, practice
- Image your own hosts and analyze them
- Write about what you find out!
Want to learn more about (web) application security?
- Install proxy tools and browser plugins or get Samurai WTF
- Get sample vulnerable web apps :
- Samurai includes WebGoat, Mutilidae, and others
- Google Gruyere: http://google-gruyere.appspot.com/
- BodgeIt Store : http://code.google.com/p/bodgeit/
- Book: The Tangled Web : http://lcamtuf.coredump.cx/tangled/
- Read, participate: OWASP: https://www.owasp.org/index.php/Main_Page
- Practice, practice, practice
- Test your own apps in the lab
- Write about what you find out!
What to learn more about host forensics?
- Get SIFT and FTK Imager (etc)
- Get sample images and challenges:
- HoneyNet Challenges: http://honeynet.org/challenges
- EH Net Challenges: https://www.ethicalhacker.net/category/features/skillz
- Advanced Digital Corpora: http://digitalcorpora.org/corpora/scenarios
- Book: File System Forensics Analysis:
http://www.digital-evidence.org/
- Practice, practice, practice
- Image your own hosts and analyze them
- Write about what you find out!
Want to learn more about network monitoring, network forensics?
- Get Security Onion and SIFT
- Get some sample captures and logs:
- /opt/samples in SecurityOnion
- Wireshark's samples wiki :http://wiki.wireshark.org/SampleCaptures
- (Network) Forensics Contest . com : http://forensicscontest.com/
- Advanced: Johannes packet challenges: http://johannes.homepc.org/packet.txt
- Book: Practice of NSM and samples : http://nostarch.com/nsm
- Practice, practice, practice
- Record, monitor, analyze your own networks
- Write about what you find out!
Want to learn more about artifact analysis and reverse engineering
malware?
- Get REMnux and demos of IDA, Hopper. Download OllyDbg
- Get some sample files:
- Contagio : http://contagiodump.blogspot.com/
- VirusShare : https://virusshare.com/
- your inbox
- Book: Practical Malware Analysis and exercises: http://practicalmalwareanalysis.com/
- Practice, practice, practice
- Dissect and analyze the files around you
- Write about what you find out!
mobile device security ? FIXME GoatDroid
^.*$
- Compete in the DC3 Challenge! http://www.dc3.mil/challenge/
- Compete in a CTF or other challenge!
- InfoSec.SE has a list: http://security.stackexchange.com/questions/3592/what-hacking-competitions-challenges-exist
- So does Keith : http://www.cc.gatech.edu/~krwatson/ctf.html
- Answer questions online.
Written on July 16, 2013