You can read my articles or see where I'm giving talks and courses. This page describes resources I didn't create.

I've put a number of links here to interesting software.

  • Systrace - Kernel-level jailing for OpenBSD, Linux, and Mac OS X
  • SILC - An encrypted replacement for IRC -- Secure Internet Live Conferencing
  • Postfix - A secure replacement for Sendmail -- there a howto here
  • vsftpd - The only FTP server designed with security in mind, used even by the folks at OpenBSD
  • mod_security - An apache security module that I'm investigating.
  • HP-UX's Security Patch Check, covered in this article

Here are some good papers that I didn't write:

Here are some good general security team websites:

  • SecuriTeam - These guys have great resources for security.
  • LinuxSecurity - This is a nice security 'blog that covers news stories and articles well.
  • SecurityFocus - This site is the canonical site for BugTraq and many of security resources.