Center for Applied Information Technology (CAIT)

Outside Resources

• Early Computer Security Papers, Part 1
• ACSA Information Security Bookshelf
• SANS
• Information Security Magazine
• CERT
• Secure Coding Practices
• Self Assessment Guide
• Information Systems Audit and Control Association
• Risk Assessment Studies
• IBM Intrution Detection Resource
• IEEE Search Engine
• National Information Assurance Training and Education Consortium
• Rainbow Series Documents
• DoD and Federal Government Policy
• Marcus J. Ranum's Website
• http://ia.gordon.army.mil/iaso/references.htm
• Early Computer Security Papers
• The National Strategy to Secure Cyberspace (February 2003)
• The President's Critical Infrastructure Protection Board
• National Infrastructure Advisory Council (DHS)
• NSA Security Configuration Guides
• The Committee on National Security Systems (CNSS)
• National Institute of Standards and Technology (NIST)
• Computer Security Resource Center (CSRC)
• Computer Security Division (CSD) Publications
• NIST Special Publications
• An Introduction to Computer Security: The NIST Handbook (SP 800-12, Oct. 1995)
• Generally Accepted Principles and Practices for Securing Information Technology Systems (SP 800-14, Sep. 1996)
• Guide for Developing Security Plans for Federal Information Systems (SP 800-18 Rev. 1, Feb. 2006)
• Security Self-Assessment Guide for Information Technology Systems (SP 800-26, Nov. 2001)
• Engineering Principles for Information Technology Security (A Baseline for Achieving Security) (SP 800-27 Rev. A, June 2004)
• Risk Management Guide for Information Technology Systems (SP 800-30, July 2002)
• Contingency Planning Guide for Information Technology Systems (SP 800-34, June 2002)
• Recommended Security Controls for Federal Information Systems (SP 800-53, Feb. 2005)
• Computer Security Incident Handling Guide (SP 800-61, Jan. 2004)
• Security Considerations in the Information System Development Life Cycle (SP 800-64 Rev. 1, June 2004)
• U.S. Department of Defense Directive (DoDD) 8500.1 — Information Assurance
• DoDD 8500.1
• Auburn University tutorial
• National Information Assurance Partnership (NIAP)
• National Operations Security Program (National Security Decision Directive 298)
• Interagency OPSEC Support Staff


• Common Criteria Evaluation and Validation Scheme (CCEVS) for IT Security


• National Information Assurance Training and Education Center (NIATEC) Web Site
• Information Security and Forensics Tools
• Information Assurance Videos
• Information Assurance Videos Created by NIATEC Students
• Standards for Developing Curricula
• Information Assurance Course Modules
• Curriculum - Ethics
• Curriculum - Law and Legal
• Publications and Texts
• Seminal IA Papers from University of California at Davis (Historic)
• Common Criteria
• Common Criteria Tools
• Government Documents
• Federal Information Processing Standards Pubs [links 1-5]
• National Computer Security Center (NCSA) [links 6-7]
• National Institute of Standards and Technology (NIST) [links 8-9]
• National Standard Training for Info Security Standards (NSTISS) [link 10]
• New Zealand Security of Information Technology Pubs [link 11]
• U.S. Department of Defense (DoD) [link 12]
• U.S. Department of Justice (DOJ) [links 13-14]
• U.S. National Security Agency (NSA) [link 15]
• U.S. Office of Management and Budgets (OMB) [link 16]
• U.S. Office of Personnel Management (OPM) [link 17]
• White House [link 18]


• Documents of Historic Significance
• National Computer Security Center (NCSC) Rainbow Series Library
• Federation of American Scientists (FAS) Intelligence Resource Program
• NIST History of Computing, Early Computer Security Papers
• Presidential and National Security Directives
• Presidential Directives (PD): Carter Administration, 1977-81
• National Security Decision Directives (NSDD): Reagan Administration, 1981-1989
• National Security Directives (NSD): Bush Administration, 1989-93
• Presidential Decision Directives (PDD): Clinton Administration, 1993-2000
• The Clinton Administration's Policy on Critical Infrastructure Protection: Presidential Decision Directive 63, May 22, 1998
• National Security Presidential Directives (NSPD): George W. Bush Administration, 2001-2006

Division of Economic and Community Outreach
Center for Applied Information Technology
Office Location: 7801 York Road, Suite 260

Phone: 410-704-4909
Fax: 410-704-4908
E-mail: cait@towson.edu