capec.mitre.org

msm.mitre.org

Making Security Measurable- Application Security

http://msm.mitre.org/directory/areas/applicationsecurity.html

A Collection of Information Security Community Standardization Activities and Initiatives. MSM Directory of Efforts. And Common Attack Pattern Enumeration and Classification (CAPEC). Collections. By leveraging these collections, along with high-quality tools and services for finding the security weaknesses in code and testing software with misuse and abuse test cases, you can systematically organize and document the assurance activities as you conducted them. Or the CWE/SANS Top 25. Another approach to p...

darklightcyber.com

Cybersecurity Tower of Babel

https://www.darklightcyber.com/blog/cybersecurity-tower-of-babel

Company and Industry News. Cybersecurity Tower of Babel. Cybersecurity Tower of Babel. Fa icon="clock-o"] Jul 14, 2016 3:30:00 AM. Fa icon="user"] Ryan Hohimer. If you think there is an easy solution to the complex problems of cybersecurity and cyber defense, you need to think again. There is no easy button for cybersecurity; no quick solution for cyber defense. Is no different, if you want to be proficient in cyber, you have to learn the culture and languages. You have to have a unified and holistic app...

msm.mitre.org

Making Security Measurable- Software Assurance

http://msm.mitre.org/directory/areas/softwareassurance.html

A Collection of Information Security Community Standardization Activities and Initiatives. MSM Directory of Efforts. As the level of confidence that software is free from vulnerabilities, either intentionally designed into the software or accidentally inserted at any time during its life cycle, and that the software functions in the intended manner. The software you write directly. The software that you contract someone else to write for you (typically a domain expert). The Software Assurance Program of ...

davidonzo.com

davidonzo's blog :) | devi apparire ridicolo se vuoi essere preso sul serio | Page 2

http://www.davidonzo.com/page/2

Davidonzo's blog :). Devi apparire ridicolo se vuoi essere preso sul serio. Newer posts →. Pentest.IT new version and FAQ(s). April 26, 2015. As you can see, Pentest.IT. Has a new look and feel and some new feature available. Dozens of minor bugs have been fixed. To avoid too long select lists in search forms, the selecte element has been replaced by the newest datalist element. Many thanks to Bootstrap Framework developers. That make web design something possibile also to me! What does it mean CVE.

shadowsentry.com

ShadowSentry - Your guide to the computer underground

http://www.shadowsentry.com/links.html

Security / Hacking Links. All security / hacking links listed below are uncategorized and are posted for informational purposes only. I have no affilations and endorse no website listed below. Most of these websites were created by security professionals and contain powerful information and tools. If you are uncomfortable and are inexperienced in this field, please do some research before downloading / using content found on these websites. Milw0rm / 0day Exploits DB. DEF CON Hacking Conference.

veriscommunity.net

Actions

http://veriscommunity.net/actions.html

Map VERIS to other Schemas. Threat actions describe what the threat actor(s) did to cause or contribute to the incident. Every incident has at least one, but most will comprise multiple actions (and often across multiple categories). VERIS uses 7 primary categories of threat actions: Malware, Hacking, Social, Misuse, Physical, Error, and Environmental. Malware is any mal. What varieties or functions of malware were involved? What were the vectors or paths of infection? Identifying the specific vulnerabil...

makingsecuritymeasurable.mitre.org

Making Security Measurable- Software Assurance

http://makingsecuritymeasurable.mitre.org/directory/areas/softwareassurance.html

A Collection of Information Security Community Standardization Activities and Initiatives. MSM Directory of Efforts. As the level of confidence that software is free from vulnerabilities, either intentionally designed into the software or accidentally inserted at any time during its life cycle, and that the software functions in the intended manner. The software you write directly. The software that you contract someone else to write for you (typically a domain expert). The Software Assurance Program of ...

makingsecuritymeasurable.mitre.org

Making Security Measurable- Application Security

http://makingsecuritymeasurable.mitre.org/directory/areas/applicationsecurity.html

A Collection of Information Security Community Standardization Activities and Initiatives. MSM Directory of Efforts. And Common Attack Pattern Enumeration and Classification (CAPEC). Collections. By leveraging these collections, along with high-quality tools and services for finding the security weaknesses in code and testing software with misuse and abuse test cases, you can systematically organize and document the assurance activities as you conducted them. Or the CWE/SANS Top 25. Another approach to p...