Vulnerability弱點資料庫與相關網站資源

Vulnerability弱點資料庫與相關網站資源

這篇文章主要彙整弱點資料庫的相關網路資源與工具。

OSVDB

http://www.osvdb.org/

推薦原因：集合許多的產品的弱點分析與統計分析

• http://www.securityfocus.com/bid
• http://www.coresecurity.com/corelabs-research

PacketStormSecurity

推薦原因：提供許多實用且更新的的工具訊息與下載!

• http://www.packetstormsecurity.org/
• https://packetstormsecurity.com/files/

Exploit DB

推薦原因：提供許多實用的 Exploit 測試工具與方法

http://www.exploit-db.com/

CVE and CCE Vulnerability Database

http://web.nvd.nist.gov/view/vuln/search

推薦原因：CVE 是資安界公認的漏洞標準規範，美國公布CVE的權威機構

http://www.security-database.com

http://www.securitytracker.com/

http://www.auscert.org.au/

Linux 相關資安修補

• https://access.redhat.com/security/updates/advisory/
• http://lists.centos.org/pipermail/centos-announce/
• http://www.debian.org/security/
• https://www.suse.com/support/update/
• http://www.ubuntu.com/usn

Microsoft 資安工具與資源

• http://technet.microsoft.com/en-us/security/advisory
• https://technet.microsoft.com/en-us/security/cc297183
• http://technet.microsoft.com/en-us/security/bulletin

主要推薦幾個可以衡量與評估您的 Windows 網路環境的工具

• Microsoft Baseline Security Analyzer (MBSA)
• Cloud Security Readiness Tool
• Microsoft Assessment and Planning Toolkit
• Microsoft Security Compliance Manager Tool (SCM)

Cisco

http://tools.cisco.com/security/center/publicationListing.x

MITRE

http://measurablesecurity.mitre.org/

所有連結參考

• http://measurablesecurity.mitre.org/
• http://tools.cisco.com/security/center/publicationListing.x
• http://technet.microsoft.com/en-us/security/advisory
• https://technet.microsoft.com/en-us/security/cc297183
• http://technet.microsoft.com/en-us/security/bulletin
• https://access.redhat.com/security/updates/advisory/
• http://lists.centos.org/pipermail/centos-announce/
• http://www.debian.org/security/
• https://www.suse.com/support/update/
• http://www.ubuntu.com/usn
• http://www.osvdb.org/
• http://www.securityfocus.com/bid
• http://www.coresecurity.com/corelabs-research
• http://www.packetstormsecurity.org/
• https://packetstormsecurity.com/files/
• http://www.exploit-db.com/
• http://web.nvd.nist.gov/view/vuln/search
• http://www.security-database.com
• http://www.securitytracker.com/
• http://www.auscert.org.au/
• https://access.redhat.com/security/updates/advisory/
• http://lists.centos.org/pipermail/centos-announce/
• http://www.debian.org/security/
• https://www.suse.com/support/update/
• http://www.ubuntu.com/usn