ITSS Home Links to IT Security Resources

Links to IT Security Resources

U-M Resources

• Campus Safety Handbook: Resource for issues of campus safety, including emergency services, safety tips, University policies and state laws, and additional support services.
• Help Resources at U-M: Help desk Web pages published by various UM departments
• Identity Theft: Information about protecting your identity against misrepresentation and theft
• IT Policies at U-M
• IT User Advocate: Working to ensure compliance with U-M information technology policies and guidelines.
• ResComp: Provides IT education, services, and support, including computer security information, to University Housing residents.
• Security Information for the UMHS Compliance Program
• Virus Busters: Free antivirus software to the U-M community and assistance with the control and prevention of computer viruses
• Mobile Device Security - Guidance for securing your data while using  a laptop or thumb drive.

External Resources

• AntiOnLine
• Center for Computer Security Policy
• Center for Education and Research in Information Assurance and Security - Purdue University
• CERT Coordination Center
• CGI Security
• Computer Security Group, University of Cambridge, England
• The Computer Security Institute
• Computer Security-Unix
• Securing Mac OS X 10.4 Tiger (from Corsair) This technical white paper covers Tiger's new security features and offers additional security guidelines.
• Mac OS X Security Configuration guide, Mac OS X 10.5 (Leopard) Updated version: 2008 (from Apple) This guide gives instructions and recommendations for securing Mac OS X (Leopard) version 10.5, and for maintaining a secure computer.
• EduCAUSE Security Task Force
  • Phished Out, by William Schoettler, U-M student educates viewers about protecting their ID and reporting ID theft if it occurs.
    Download: Real Media | Windows Media
• F-Secure Corporation's Data Security Summary for 2004
• Forum of Incident Response and Security Teams (FIRST)
• Hardened PHP Project
• Identity Theft Resource Center
• Information Security Magazine
• Insecure.Org
• Internet Assigned Numbers Authority (IANA) Official Port List
• ISP Contact Information
• Microsoft Knowledgebase (search)
• National Institute of Standards and Technology, Computer Security Center
• National Vulnerability Database (integrates all public U.S. Government cyber vulnerability resources and provides references to industry resources)
• Open Web Application Security Project (OWASP)
• Penn State University -- Take Control
• PHP Security
• Practically Networked Unofficial Port List for Special Applications
• The SANS Institute
  • SANS Top 20 list
  • SANS Web Application Security Workshop
• Secureroot.com
• Security Administrator
• Staysafe.org
• Stay Safe On Line, National Cyber Security Alliance
• UC Davis Computer Security Laboratory
• U.S. DOE-CIAC - Cyber Solutions Tools Center
• Virus Total (free service for scanning suspicious files)
• Web Application Security Consortium
• Where Windows Malware Hides and Other Tricks (List of over 180 places where Windows malware can hide) by Roger A. Grimes, InfoWorld, 5/30/06
• Why Phishing Works (10-page document from researchers at Harvard University and University of California, Berkeley. Overview of document available)
• WVE (Wireless Vulnerabilities & Exploits) (database of vulnerabilties and exploits that can compromise wireless protocols and products)