Network Security

• OWASP: top ten security flaws for web servers
• Cisco security guidelines for ISPs
• RFC 2267: Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing
• RFC 2350: Expectations for Computer Security Incident Response
• RFC 2644: Changing the Default for Directed Broadcasts in Routers
• NANOG mailing list
• CERT (Computer Emergency Response Team at CMU)
• Packet Storm, contains exploits
• Cisco: Internet Security Advisories
• Cisco Product Security Incident Response (PSIRT)
• "Essential IOS" - Features Every ISP Should Consider
• Cisco Flow Logs and Intrusion Detection at the Ohio State University