By Robert McGarvey
- Microsoft (http://www.microsoft.com/security): Microsoft's security site is chock-full of bulletins, checklists, news and tips regarding security.
- CERT Coordination Center (http://www.cert.org): Part of a federally funded research and development group at Carnegie Mellon University, CERT's Web site is a reliable source of accurate, objective information about viruses and Internet vulnerabilities.
- The SANS Institute (http://www.sans.org): The System Administration, Networking and Security Institute and its Web site provide informational materials about site security as well as information about SANS-sponsored conferences focusing on user experiences and security problem-solving.
- International Computer Security Association (http://www.icsa.net): Even though this is a for-profit association, check out its site for objective information about firewalls and other security tools. The Web site offers a staggering amount of information, and much of it is free.
- Hackers.com (http://www.hackers.com): This site is run by a group of hackers intent on clearing the name of these self-proclaimed "curious" explorers of the Web.
- Business Security e-Journal (http://www.lubrinco.com): Sign up here for a free, monthly newsletter on security. A recent issue delved into the security perils posed by voice-mail systems and also gave a snapshot of what it's like to work undercover. It's a useful read, presented in short, snappy prose.
Capetown-Rio Inc., (425) 869-2005, http://www.capetownrio.com