Information Security Training

Information security is a specialized skill-set that requires years of education and experience to master. Unfortunately, many security gurus agree that it's next to impossible to teach many of the skills necessary to become an expert. While we agree with this we'll, in any case, try to lead those willing to put in the time to expand their knowledge of information security.

Below, is a list of resources, broken down by subject, to help those with an interest in information security expand their horizons.

General Security Information

• Security Engineering — The Book - Free Online Book (with non-free paper/ebook versions)
• Center for Internet Security Benchmarks

Auditing

• The Art of Software Security Assessment - Book
• Web Security Testing Cookbook - Book

Cryptography

Encryption

• PKI Crash Course
• U.S. NSA Suite B Cryptography Guidance
• Bulletproof SSL and TLS
• Mozilla Security/Server Side TLS guide
• Mozilla SSL Configuration Generator

Network Security

• Hacking Exposed: Network Security Secrets & Solutions - Book

OS/System Security Topics

• Fedora Security Features Matrix
• Security Technical Implementation Guide (RHEL 6) (contains mainly useful tips for securing Fedora systems)
• Securing Linux Containers - research paper on securing Linux container deployments/infrastructure

Product-specific Documentation

Fedora

• Fedora Security Guide
• Security Features Matrix

Red Hat

• RHEL 7 Security Guide

Secure Programming

• Fedora Secure Coding Guidelines
• Security-related presentations by Ulrich Drepper
• 2011 CWE/SANS Top 25 Most Dangerous Software Errors
• Avoiding the Top 10 Software Security Design Flaws
• Software Assurance Maturity Model
• Security Testing Guide
• Buffer Overflow Attacks: Detect, Exploit, Prevent - Book
• OWASP free and open software security community
• OWASP Security DevGuide - Book
• Secure Programming HOWTO - book by David A. Wheeler

Free Security Training

• Pivot Project for Cyber Skills
• FSU Offensive Computer Security Class

Non-Free Security Training

• RH413: Server Hardening - goes along with the EX413 exam for certification
• SANS SEC401: Security Essentials Bootcamp Style
• Certified Ethical Hacker v9 Training Program

Memberships/Fellowship/Certifications

• Information Systems Security Association (ISSA)
• The International Information Systems Security Certification Consortium (ISC)2