NSF Cyberinfrastructure Cybersecurity Resources

This page is a collection of Trusted CI and community generated papers and other resources that are of interest to those in the NSF CI community. To suggest content for this page or make corrections, please email info@trustedci.org

Webinars/On-line Talks

NSF Cybersecurity Summits

Project Cybersecurity Documents

Workshops

 Best Practices

Communities

Security Awareness

Science DMZ Security

Online Cybersecurity Training

  • National Webcast Initiative.  A collaborative effort between the U.S. Department of Homeland Security's National Cyber Security Division and the Multi-State Information Sharing and Analysis Center (MS-ISAC), the National Webcast Initiative provides free webcasts on various cybersecurity topics. One-hour webcasts are broadcast approximately every two months, with archives going back to 2010. Topics are general so as to be of interest to a large audience, including policy decision makers and system administrators.

  • SANS Webcasts and Archives.  The SANS Institute is a private company that specializes in internet security training. SANS specializes in training and certification, but also offers free daily webcasts on various security topics presented by security experts and industry representatives. Archived webcasts dating back to 2009 are accessible by registering for a free account. Topics range from the general to the specific, so any person involved in cybersecurity, from managers to developers, should be able to find a webcast of interest.

  • Open Security Training.  Rather than providing webcasts, the Open Security Training site offers training materials for computer security classes on multiple topics. The training materials are developed by security experts and submitted to the site for use by other educators. There are approximately 20 courses ranging from beginner to advanced, some containing videos, most containing lab exercises. The beginner lessons typically give an overview of a subject and are targeted to people new to cybersecurity. The advanced lessons are typically detailed and specific to one topic of cybersecurity and thus more applicable to developers and system administrators.

  • Software Engineering Institute at Carnegie Mellon CERT podcasts.  The CERT program strives to detect and resolve computer security incidents. Carnegie Mellon provides a series of podcasts for business leaders who want to learn more about enterprise-wide security efforts. Podcast categories include risk management and security education and training. The free audio podcasts typically include a transcript and additional notes.

  • Texas A&M Engineering Extension Service (TEEX) Domestic Preparedness.  This site primarily offers DHS/FEMA certification training for emergency services, but also provides several free online courses related to information security and risk management. Classes offer continuing education credit, and can be taken by the general public. The majority of courses are general in nature to be of interest to any individual involved in cybersecurity. However, there are a few courses specific to developing secure software.

  • Information Assurance Support Environment (IASE) Training.  While specializing in "information assurance", the IASE offers free security training ranging from general (e.g., social networking, phishing) to specific (intrusions detection system analysis). Courses typically run between 30 and 90 minutes and can be completed in a browser (i.e., online), or can be ordered on CD for offline training. Topics are wide-ranging to be of interest to any individual involved in cybersecurity.

  • SecurityTube Videos on Cybersecurity.  SecurityTube is a sort of YouTube for computer security. Videos produced by SecurityTube staff focus on web security and "hack of the day", while community-submitted videos tackle various computer security topics. The search engine lists several videos related to cybersecurity (linked above), and the cybersecurity tag lists about 40 videos. There are also several "megaprimers" on topics such as pentesting and buffer overflow. Topics tend to be specific to system administrators and software developers.

  • Coursera Security Online Courses.  Coursera partners with top universities and organizations to offer free online courses across a wide range of topics. Courses are typically 4 to 10 weeks in length and require a time commitment of 6-10 hours per week. The courses related to computer security (linked above) are typically more general than "cybersecurity". As the courses are lengthy and detailed, the target audience are individuals interested in mastering the material covered in the courses.

  • US-CERT Publications.  The United States Computer Emergency Readiness Team (US-CERT) is part of the Department of Homeland Security. While it's primary mission is to respond to incidents and provide technical assistance to information systems operators, the site has a selection of technical publications related to cybersecurity. Materials tend to fall into two categories: (a) general computer security issues to interest to all individuals, and (b) technical publications meant for system and network administrators.

  • Computer Security Resource Center (CSRC) of the Computer Security Division (CSD).  The CSD is a division of the National Institute of Standards and Technology (NIST) and provides resources in the form of publications for proposed standards for securing computer and information systems. Searching for "cybersecurity" brings up several publications, including the developing Cybersecurity Framework. The proposed standards are useful for understanding the future of cybersecurity, both from a high-level overview, and from a detailed-level implementation proposal.

  • National Initiative for Cybersecurity Careers and Studies (NICCS).  The NICSS offers a search engine for various cybersecurity training resources and courses offered by companies specializing in security training and certification. While the majority of the training is not free, the search engine gives a good idea of the types of training resources offered by industry experts.

  • Center for Infrastructure Assurance and Security (CIAS) at the University of Texas at San Antonio (UTSA).  The CIAS primarily offers cybersecurity training events ranging from one-hour lectures to multi-day courses. However, they also provide an Online Library of materials which can be used by outside parties. These materials typically provide overviews of various aspects of computer security, and thus are useful for managers wanting to learn more about cybersecurity.

  • The Bro Network Security Monitor YouTube Channel. The Bro Network Security Monitor offers a YouTube channel on which users can review videos covering a number of topics related to network security. Access to this channel and its content is free, and gives a good amount of information on how to successfully defend your network.