references-infosec

KO | EN

gitlite — search

#ai #typescript #llm #android #machine-learning #linux #macos #nodejs #java #windows #awesome-list #vue #mcp #openai

references-infosec

(★ 12)

Des références pour se faire une culture de sécurité informatique.

references-infosec 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Références Infosec

Des références pour se faire une culture de sécurité informatique.
Cette liste s'adresse plutôt au professionnel débutant ou à une personne encline à élargir ses connaissances.
La compréhension de la plupart des ressources listées nécessite un minimum de culture technique préalable.

Je n'inclurais pas des ouvrages plus grand public, même excellents.
Les références sur l'informatique non centrées sur la sécurité, même référentes, seront aussi évitées.

Les documents sélectionnés seront en Français ou en Anglais indifféremment.

Ce document est maintenu à jour à l'adresse: <https://github.com/FuraxFox/references-infosec>

## Articles et vidéos

Papiers scientifiques, post de blogs ou articles illustrant les connaissances de base en sécurité informatique.

### Fondamentaux

* Reflections on Trusting Trust 
    * <https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf>

* Defenders think in lists. Attackers think in graphs
    * <https://github.com/JohnLaTwC/Shared/blob/master/Defenders%20think%20in%20lists.%20Attackers%20think%20in%20graphs.%20As%20long%20as%20this%20is%20true%2C%20attackers%20win.md>

* Beyond corp: A new approach for entreprise security" 
    * <https://ai.google/research/pubs/pub43231>
    * <https://cloud.google.com/beyondcorp/>

* Lest We Remember: Cold Boot Attacks on Encryption Keys
    * <https://jhalderm.com/pub/papers/coldboot-sec08.pdf>

* Smashing the stack for fun and profit 
    * <http://phrack.org/issues/49/14.html#article> 
    * <https://www.eecs.umich.edu/courses/eecs588/static/stack_smashing.pdf>

* How to build a cyber army, Charly Miller DEFCON 2018
    * <https://youtu.be/IxSrn4wmjxM>

* Cyber-conflict vs Cyber-command, hidden dangers in American Military Solution to a large scale intelligence problem
    * <http://www.matthewmonte.net/wp-content/uploads/2022/05/Cyber-conflict-vs-Cyber-Command-hidden-dangers-in-the-American-military-solution-to-a-large-scale-intelligence-problem.pdf>

### Threat Intel

Quelques papiers importants pour comprendre l'état la réflexion sur la connaissance des attaquants

* Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains
    *  <https://www.lockheedmartin.com/content/dam/lockheed-martin/rms/documents/cyber/LM-White-Paper-Intel-Driven-Defense.pdf>

* The Diamond Model of Intrusion Analysis
    * <http://www.activeresponse.org/wp-content/uploads/2013/07/diamond.pdf>

* The Pyramid of Pain
    * <https://www.threathunting.net/files/A%20Framework%20for%20Cyber%20Threat%20Hunting%20Part%201_%20The%20Pyramid%20of%20Pain%20_%20Sqrrl.pdf>

* MITRE ATT&CK: Design and Philosophy
    * <https://www.mitre.org/sites/default/files/publications/pr-18-0944-11-mitre-attack-design-and-philosophy.pdf>

* Walking in your Enemy’s shadow: When fourth-party collecte becomes attribution hell
    * <https://www.virusbulletin.com/uploads/pdf/magazine/2017/VB2017-Guerrero-Saade-Raiu.pdf>

* Living off the land and fileless attack techniques
    * <https://www.symantec.com/content/dam/symantec/docs/security-center/white-papers/istr-living-off-the-land-and-fileless-attack-techniques-en.pdf>

* Pacific Rim: Inside the Counter-Offensive—The TTPs Used to Neutralize China-Based Threats
   * <https://news.sophos.com/en-us/2024/10/31/pacific-rim-neutralizing-china-based-threat/>

* The evolution of ransomware
    * <https://www.symantec.com/content/dam/symantec/docs/security-center/white-papers/the-evolution-of-ransomware-15-en.pdf>

* Etat de la menace rançongiciel 2020
    * <https://www.cert.ssi.gouv.fr/uploads/CERTFR-2020-CTI-001.pdf>

* Breaking Trust: Shades of crisis across an insecure software supply chain
    * <https://www.atlanticcouncil.org/programs/scowcroft-center-for-strategy-and-security/cyber-statecraft-initiative/breaking-trust/>

* Le web underground français, Cedric Pernet, Trend Micro (2016)
    * <https://documents.trendmicro.com/assets/wp/wp-the-french-underground.pdf>

### Incidents et campagnes

Une collection de rapports d'incident illustrant la richesse des modes opératoires des attaquants et de leurs outils.

#### Gouvernemental

* Penquin’s Moonlit Maze
    * <https://securelist.com/penquins-moonlit-maze/77883/>

* Black Tulip: Report of the investigation into the DigiNotar Certificate Authority breach
    * <https://www.researchgate.net/publication/269333601_Black_Tulip_Report_of_the_investigation_into_the_DigiNotar_Certificate_Authority_breach>

* APT Case RUAG, Technical Report
    * <https://www.melani.admin.ch/dam/melani/en/dokumente/2016/technical%20report%20ruag.pdf.download.pdf/Report_Ruag-Espionage-Case.pdf>

* The Untold Story of NotPetya, the Most Devastating Cyberattack in History
    * <https://www.wired.com/story/notpetya-cyberattack-ukraine-russia-code-crashed-the-world/>

* Symantec Stuxnet Dossier
    *** <https://docs.broadcom.com/doc/security-response-w32-stuxnet-dossier-11-en>

* Mandiant APT1 Exposing One of China’s Cyber Espionage Units
    * <https://www.mandiant.com/sites/default/files/2021-09/mandiant-apt1-report.pdf>

* CYBER ESPIONAGE  Against Georgian Government (Georbot Botnet)
    * <https://web.archive.org/web/20121106103723/http://dea.gov.ge/uploads/CERT%20DOCS/Cyber%20Espionage.pdf>

* APT 29 HAMMERTOS
    * <https://services.google.com/fh/files/misc/rpt-apt29-hammertoss-stealthy-tactics-define-en.pdf>

* The Dukes: 7 years of Russian cyberespionage
    * <https://www.f-secure.com/documents/996508/1030745/dukes_whitepaper.pdf>

* Use of fancy bear android malware in tracking of Ukrainian field artillery units
    * <https://www.crowdstrike.com/wp-content/brochures/FancyBearTracksUkrainianArtillery.pdf>

* Cyber Intrusion into U.S. Office of Personnel Management: In Brief 
    * <https://fas.org/sgp/crs/natsec/R44111.pdf>
    * <https://www.dni.gov/ncsc/e-Learning_CyberAware/pdf/Cyber_Aware_CaseStudy_OPM.pdf>

* The Mystery of Duqu 2.0: a sophisticated cyberespionage actor returns
    * <https://securelist.com/the-mystery-of-duqu-2-0-a-sophisticated-cyberespionage-actor-returns/70504/>

* Operation Cloud Hopper
    * <https://media.scmagazine.com/documents/292/cloud-hopper-report-final-upda_72977.pdf>
    * <https://www.pwc.co.uk/cyber-security/pdf/pwc-uk-operation-cloud-hopper-report-april-2017.pdf>

* VPN Filter
    * <https://blog.talosintelligence.com/vpnfilter/>

* Regin: nation-state ownage of GSM networks
    * <https://securelist.com/regin-nation-state-ownage-of-gsm-networks/67741/>

* Threat Analysis of BlackEnergy Malware for Synchrophasor based Real-time Control and Monitoring in Smart Grid
    * <https://ewic.bcs.org/upload/pdf/ewic_icscsr2016_paper7.pdf>

* Phishing Diplomacy
    * <https://cdn.area1security.com/reports/Area-1-Security-PhishingDiplomacy.pdf>

* Operation Blockbuster: the Sony hack
    * <https://www.usna.edu/CyberCenter/_files/documents/Operation-Blockbuster-Report.pdf>

* TRISIS/Triton/Triconnex
    * <https://dragos.com/wp-content/uploads/TRISIS-01.pdf>
    * <https://www.fireeye.com/blog/threat-research/2017/12/attackers-deploy-new-ics-attack-framework-triton.html>
    * <https://darknetdiaries.com/episode/68/>
    * <https://www.justice.gov/opa/pr/four-russian-government-employees-charged-two-historical-hacking-campaigns-targeting-critical>

* Malicious life - Responding to a cyber-attack with missiles
    * <https://malicious.life/episode/episode-54/>

* Chine vs US: renseignement et diplomatie dans le numérique de l'arrogance au trauma
    * <https://foreignpolicy.com/2020/12/21/china-stolen-us-data-exposed-cia-operatives-spy-networks/>
    * <https://foreignpolicy.com/2020/12/22/china-us-data-intelligence-cybersecurity-xi-jinping/>
    * <https://foreignpolicy.com/2020/12/23/china-tech-giants-process-stolen-data-spy-agencies/>

* Top 10 unattributed APT mysteries
    * <https://securelist.com/top-10-unattributed-apt-mysteries/107676/>

#### Criminel

* Large-scale SIM swap fraud
    * <https://securelist.com/large-scale-sim-swap-fraud/90353/>

* Roaming Mantis uses DNS hijacking to infect Android smartphones
    * <https://securelist.com/roaming-mantis-uses-dns-hijacking-to-infect-android-smartphones/85178/>

* Goodfellas, the Brazilian carding scene is after you
    * <https://securelist.com/goodfellas-the-brazilian-carding-scene-is-after-you/84263/>

* Evolution of Dridex
    * <https://securelist.com/dridex-a-history-of-evolution/78531/>

* The business model of Fin7 
    * <https://youtu.be/e3Vcp_Hr3jI>

#### Attaques sophistiquées

*  Une opération sophistiquée de waterholing démantelée en 2020 par Google
    * <https://arstechnica.com/information-technology/2021/01/hackers-used-4-0days-to-infect-windows-and-android-devices/>

* Snowblind: The invisible hand of Secret Blizzard
   * <https://blog.lumen.com/snowblind-the-invisible-hand-of-secret-blizzard/>

### Récits

* The mastermind, histoire de Paul Leroux
    * <https://magazine.atavist.com/the-mastermind>

* DarkNet Diaries: The Athens Shadow Games
	* <https://darknetdiaries.com/episode/64/>

### Techniques offensives

* Mandiant: defining cobalt strike components 
   * <https://www.mandiant.com/resources/defining-cobalt-strike-components>

## Livres

Dans les ouvrages sont exclus: les manuels, et les ouvrages dédiés à une technique marquant une période.

### Théorie

* Security Engineering, par Ross Anderson
    * <https://www.cl.cam.ac.uk/~rja14/book.html>

* Beyond Fear, par Bruce Schneier
    * <https://www.schneier.com/books/beyond_fear/>

### Organisation

* Sécurité Opérationelle, par Alexandre Fernandez Toro
    * <https://www.eyrolles.com/Informatique/Livre/securite-operationnelle-9782212144604/>

### Récits et histoire

* The Cuckoo Egg, par Cliffort Stoll
    * <https://www.goodreads.com/book/show/18154.The_Cuckoo_s_Egg>

* Dark Territory, par Fred Kaplan
    * <https://www.goodreads.com/book/show/25814289-dark-territory>

* Spam Nation, par Brian Krebs
    * <https://www.goodreads.com/book/show/18509663-spam-nation>

* Countdown to Zero Day, par Kim Zetter
    * <https://www.penguinrandomhouse.com/books/219931/countdown-to-zero-day-by-kim-zetter/9780770436193/>

* Fatal System Error, par Joseph Menn
    * <https://www.goodreads.com/book/show/7638558-fatal-system-error>

* The Codebreakers, par Simon Singh
    * <https://simonsingh.net/books/recommended-books/great-cryptography-books/the-codebreakers/>

* Sandworm, A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers, Andrew Greenberg
    * <https://www.goodreads.com/book/show/41436213-sandworm>

### Technique défensive

* The tangled web, a guide to securing modern web applications par Mihcal Zalewski
    * <http://lcamtuf.coredump.cx/tangled/>

* Serious Cryptography, par Jean-Philippe Aumasson
    * <https://nostarch.com/seriouscrypto>

* Bulletproof TLS and SSL, par Ivan Ristic
    * <https://www.feistyduck.com/books/bulletproof-ssl-and-tls/>

* Applied Security Visualisation, par Raffael Marty
    * <https://www.secviz.org/content/applied-security-visualization>

* The Practice of Network Security Monitoring, par Richard Bejtlich
    * <https://nostarch.com/nsm>

* Building Secure and Reliable Systems, par H. Adkins, B. Beyer, P. Blankinship, P. Lewandowski, A. Oprea, A Stubblefield
    * <https://landing.google.com/sre/resources/foundationsandprinciples/srs-book/>

### Technique offensive

* Hacking Exposed, par Joel Scambray, Stuart McClure, George Kurtz
    * <https://www.cylance.com/en-us/resources/events/hacking-exposed.html>

* Network Attack and Exploitation, a framework, Matthew Monte
    * <http://www.matthewmonte.net/>

* Hacking: The Art of Exploitation,  de Jon Erickson
    * <https://nostarch.com/hacking2.htm>

references-infosec

references-infosec 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

references-infosec

references-infosec 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README