dkerwin.com

Learning Doesn't Sleep

Security+ References

These references were collected in the process of researching the CompTIA Security+ Certification Exam Objectives SYO-501 dated 2017 (most recent objectives as of March 2019).

Articles
Attack List
- MITRE ATT&CK®
- OWASP Community
Blogs
Open Source Intelligence
Organizations
Products
Security Standards
Tech Sites
Tools
Cybersecurity Vulnerabilities
NIST Source Documents
- FIPS 197Specifications for the Advanced Encryption Standard (AES)
- FIPS 199Standards for Security Categorization of Federal Information and Information Systems
- IR 7298 r2Glossary of Key Information Security Terms
- SP 800-12r1An Introduction to Information Security
- SP 800-18r1Guide for Developing Security Plans for Federal Information Systems
- SP 800-30r1Guide for Conducting Risk Assessments
- SP 800-34r1Contingency Planning Guide for Federal Information Systems
- SP 800-37r2Risk Management Framework for Information Systems and Organizations
- SP 800-38aRecommendations for Block Cipher Modes of Operation
- SP 800-38bRecommendations for Block Cipher Modes of Operation - CMAC
- SP 800-38cRecommendations for Block Cipher Modes of Operation - CCM
- SP 800-38dRecommendations for Block Cipher Modes of Operation - GCM
- SP 800-45v2Guidelines on Electronic Mail Security
- SP 800-47Security Guide for Interconnecting IT Systems
- SP 800-52r1Guidelines for the Selection, Configuration and Use of TLS Implementations
- SP 800-53r4Security and Privacy Controls for Federal Information Systems and Organizations
- SP 800-61r2Computer Security Incident Handling Guide
- SP 800-63BSecurity Guide for Interconnecting IT SystemsDigital Identity Guidelines
- SP 800-84Guide to Test, Training and Exercise Programs for IT Plans and Capabilities
- SP 800-100Information Security Handbook: A Guide for Managers
- SP 800-123Guide to General Server Security
- SP 800-144Guidelines on Security and Privacy in Public Cloud Computing
- SP 800-145The NIST Definition of Cloud Computing
- SP 800-162Guide to ABAC Definition and Considerations
- SP 800-163r1 draftVetting the Security of Mobile Apps
- SP 800-175BGuideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms
- SP 800-178Comparison of ABAC Standards - XACML and NGAC
- SP 800-190Application Container Security Guide
RFC Source Documents
- RFC 791Internet Protocol
- RFC 793TCP - Transmission Control Protocol
- RFC 796Address Mappings
- RFC 821SMTP
- RFC 1421PEM Part I - Message Encryption and Authentication Procedures
- RFC 1422PEM Part II - Certificate-Based Key Management
- RFC 1423PEM Part III - Algorithms, Modes and Identifiers
- RFC 1424PEM Part IV - Key Certification and Related Services
- RFC 1661PPP - Point-to-Point Protocol
- RFC 1918Address Allocation for Private Internets
- RFC 1994PPP Challenge Handshake Authentication Protocol
- RFC 2045MIME Part I - Format of Internet Message Bodies
- RFC 2104HMAC
- RFC 2716PPP EAP TLS Authentication Protocol
- RFC 2759Microsoft PPP CHAP Extensions, Version 2
- RFC 2818HTTP Over TLS
- RFC 2865Remote Authentication Dial In User Service (RADIUS)
- RFC 2986Public-Key Cryptography Standards (PKCS) #10
- RFC 3227Guidelines for Evidence Collection and Archiving
- RFC 3447Public-Key Cryptography Standards (PKCS) #1
- RFC 3579RADIUS Support for EAP
- RFC 3748EAP
- RFC 4017EAP Method Requirements for Wireless LANS
- RFC 4120Kerberos (V5)
- RFC 4949Internet Security Glossary, Version 2
- RFC 5246TLS Versioon 1.2
- RFC 5280X.509 PKI Certificates and CRL Profile
- RFC 5281EAP-TTLSv0
- RFC 5598Internet Mail Architecture
- RFC 6960OCSP
- RFC 7208Sender Policy Framework (SPF)
- RFC 7468Textual Encodings of PKIX, PKCS, and CMS Structures
Technology News
- The Register
- SecurityWeek
Video Channels
- OWASP Foundation - YouTube