Link Farm

Section

Link Farm

Links for Downloads

The following are links to resources, programs and other sites of interest related to computer security. They are updated whenever I find something of interest, and I endeavour to keep them fairly clean of broken links. If you find something that you think should be here, or find a link that no longer works, feel free to mail the webmaster.

Cryptographic export controls

While export controls on cryptographic software and hardware have relaxed in recent years, they still exist.

Sub-Topic	Links
U.S. Controls	Notification Requirements for Publicly Available Code - While Open Source encryption code still falls under the Export Administration Regulations (EAR), this page shows what needs to be done to get a license exception and comply with US law.

XML Security

This is a fast evolving area in computer security. Unfortunately this means to some extent confusion reigns.

Sub-Topic	Links
Signature Standards	XML Digital Signature - The digital signature standard developed by W3c XML Canonicalisation - used during signature processing to turn an XML document to a deterministic byte stream Exclusive Canonical XML - alternative to standard canonical XML that handles namespaces more appropriately XPath-Filter transform - a faster way to perform XPath transforms within a XML digital signature
Encryption Standards	XML Encryption - W3C standard for encryption of XML documents XML Decrypt - Standard for handling encrypted data within XML Digital Signatures
Other Standards	Security Assertion Markup Language (SAML) - This is the link to the Security Services Technical Committee at OASIS producing SAML, which is a "framework for exchanging authentication and authorisation information" XML Key Management Specification (XKMS) - A specification for interaction between clients requring encryption keys and servers that provide them. Allows for decoupling of encryption logic in a client from trust logic in a server
Other	Christian's XML Security Link Farm - Christian Geuer-Pollmann was the original author of the Java XML-Security library at Apache. This is his page of links in the XML-Security space. It's now a bit out of date, but there is some interesting stuff there.

Syndicated News Feeds

There are some fantastic RSS resources on the Internet for security news. These are some of the feeds I've found in my wanderings.

Sub-Topic	Links
General Security	Netcraft News - Netcraft provide general security news covering a wide variety of topics. Vulnwatch - Latest posts to Vulnwatch list archived at insecure.org

General Security Sites

This is a "catch all" table holding links to sites that are of interest to security practitioners.

Sub-Topic	Links
Online Magazines	Dark Reading - News and articles on computer security. Created May 2006
Information Repositories	Neohapsis Security Archives - Neohapsis is a security consulting company that keeps archives of many of the public security mailing lists. This site provides a searchable interface into the archives.