Resource

Websites 

• Bruce Schneier's blog

• Virus Bulletine

• Underground Hacking Convention

• Security of cloud computing

• TaoSecurity

• National Vulnerability Database 

• National Computer Network Emergency Response (China): CNCERT/CC

• Multi Sensor Traffic Analysis (MUSTAN)

• ACSC: Advanced Crypto Software Collection

• VoIP Security

• Anti-Phishing Working Group (APWG)

• Best Current Practice anti-DDoS -- BCP 38

Security Research Groups

• Noise Lab@Princeton

• Internet security systems@IBM

• Security research@Microsoft

• Economics and security resource

• RobustNet research group@UMichigan

• Perrig's group@CMU

• Computer Security Group@UCSB

• International Secure Systems Lab

• Web Security Research@Standford

• Webblaze@UCBerkeley

• MIT Lincoln Lab.

Tools and Dataset

• ONF - Open Networking Foundation

  • OpenFlow 

• Inference engines 

  • Datalog

  • BLOG: Bayesian Logic inference Engine

  • Overlay GHC

• Intrusion Detection 

  • MIT Lincoln Lab

  • Analysis console for Intrusion Databases

  • IDS Tools

  • Bro IDS 

  • Security Toolkits 

  • Wireshark

  • DETERLab Tools

  • Wireshark Tools

  • VoIP Security tools

• Simulators 

  • NS-2 

  • OMNeT++

• Testbed

  • Open Cirrus Cloud Computing Testbed

  • Emulab

  • PLANETLab 

  • StarBED

  • DETERLab Testbed

• Virtualization

  • Clownix

  • Virtual box 

  • Honeypot

• Visualization

  • Graphviz: Graph Drawing

• Vulnerability scanners 

  • Nessus - Vulnerability scanner 

  • NetSPA

  • Topological Vulnerability Analysis

  • MulVAL

  • OVAL: Open Vulnerability Assessment Language-based scanner

• SEED: Developing Instructional Laboratories for Computer SEcurity EDucation (Syracuse University)

International Conferences/symposiums/Workshops

• • ACNS: Applied Cryptography and Network Security

  • ACSAC: Annual Computer Security Applications Conference

  • ARES:  International Conference on Availability, Reliability and Security

  • AsiaCCS

  • ACM CCS: ACM Conference on Computer and Communications Security 

  • CSF: IEEE Computer Security Foundations Symposium

  • DSN: IEEE/IFIP International Conference on Dependable Systems and Networks 

  • DIMVA: Detections of Intrusions and Malware & Vulnerability Assessment

  • EDCC: European Dependable Computing conference

  • ESORICS: European Symposium on Research in Computer Security

  • EUROCRYPT

  • FC: Financial Cryptography and Data Security

  • ICICS: International Conference on Information and Communication Security

  • ICISC: International Conference on Information Security and Cryptology

  • ICDCS: International Conference on Distributed Computing Systems

  • ISC: Information Security Conference

  • ISPEC: International Conference on Information Security Practice and Experience

  • INFOCOM

  • IEEE CNS: IEEE Conference on Communications and Network Security 

  • Inscrypt: China International Conference on Information Security and Cryptology

  • IH: Information Hiding Conference

  • LEET: USENIX Workshop on Large-Scale Exploits and Emergent Threats

  • NDSS: ISO Network and Distributed System Security Symposium

  • NSS: Network and System Security

  • RAID: International Symposium on Recent Research in Attacks, Intrusions and Defenses

  • RecSys: ACM Conference on Recommender Systems  

  • SEC: IFIP International Information Security Conference

  • IEEE S&P: IEEE Symposium on Security & Privacy

  • SAC

  • SecureComm: International ICST conference on Security and Privacy in Communication Networks

  • SRDS

  • USENIX Security

              Ranked Crypto and Security Conferences

International Journals

• • ACM TISSEC-ACM Trans. Inform. Syst. Secur.

  • IOS JCS-Journal of Computer Security

  • Elsevier COMPSEC-Elsevier Computers & Security

  • IEEE TDSC-IEEE Transactions on Dependable and Secure Computing

  • IEEE Transactions on Reliablity

  • IEEE Trans. on Information Forensics and Security

  • Springer IJIS-Springer Int.Journal of Information Security