Security mind maps, built to print at A3.

A library of information security mind maps covering practice labs, AWS architectures, standards and protocols. Free to use, free to share. Most are built in XMind. The Hacking Practice Lab, a list of legal places to practise penetration testing, was used on the SANS pentest poster.

28 maps
Notes

How to print & view

For printing, save the mind map using the "Image Only" link and print at A3 (11×17") @ 300dpi. Some maps are large, and the Image Only option is the easiest way to view and print them. Most maps are created with XMind (Java).

01 · Security

Information security mind maps

practice labs, standards & protocols
v5.0 · 2019 Jan Hacking Practice Lab
Hacking Practice Lab
SANS Pentest Poster · 2015, 2016 editions
Full size· Image only· URLs only
v1.0 · 2018 Feb Big Data Security
Big Data Security
Hadoop / Spark / NoSQL controls
Full size· Image only
v1.0 · 2018 Mar AWS Compute
AWS Compute
EC2, Lambda, ECS, Beanstalk
Full size· Image only
v1.0 · 2018 Mar AWS Database
AWS Database
RDS, DynamoDB, Aurora
Full size· Image only
v1.0 · 2018 Mar AWS Networking
AWS Networking
VPC, Route 53, Direct Connect
Full size· Image only
v1.0 · 2018 Mar AWS Storage
AWS Storage
S3, EBS, EFS, Glacier
Full size· Image only
v1.0 · 2017 Jul BPMN 2.0
BPMN 2.0
Business Process Modelling Notation
Full size· Image only
v1.4 · 2016 Feb Forensics Practice Lab
Forensics Practice Lab
Challenges, CTFs & sample evidence
Full size· Image only
v1.2 · 2015 Apr Code Reviews
Code Reviews
Static review checklist & flow
Full size· Image only
v0.1 draft · 2015 Aug SABSA Concepts
SABSA Concepts
Enterprise security architecture
Full size· Image only
v0.1 draft · 2015 Aug SABSA Design
SABSA Design
Architecture design layer
Full size· Image only
v0.1 draft · 2015 Aug SABSA Operations
SABSA Operations
Operational layer
Full size· Image only
v2.0 · 2015 May VMs and LiveCDs
VMs & LiveCDs
Practice environments & sources
Full size· Image only
v0.1 draft · 2014 May Forensics
Forensics
Process & tooling overview
Full size
v1.1 · 2013 Oct ISO 27001:2013
ISO 27001:2013
Information security management
Full size· Image only
v1.1 · 2013 Nov PCI DSS v3
PCI DSS v3
Payment card industry standard
Full size· Image only
v1.1 · 2013 Nov Cryptography
Cryptography
Ciphers, hashes, signatures
Full size· Image only
v1.2 · 2013 Jul PKI
PKI
Trust models, CRLs, certificates
Full size· Image only
v1.1 · 2013 May VoIP
VoIP
Protocols & security review
Full size· Image only
v1.1 · 2013 May VPN
VPN
IPsec, SSL/TLS & review
Full size· Image only
v1.1 · 2013 Nov Securing Home Computers
Securing Home Computers
Companion to the SHC paper
Full size· Image only
v1.5 · 2013 May Wireless Network Review
Wireless Network Review
Audit checklist & controls
Full size· Image only· Template
v1.6 · 2013 Jul Useful Browser Plugins
Useful Browser Plugins
For testers & researchers
Full size· Image only
v1.2 · 2012 Nov Infrastructure Testing
Infrastructure Testing
External + internal pentest map
Full size· Image only· Template
v1.1 · 2012 Nov Web Application Testing
Web Application Testing
OWASP-aligned methodology
Full size· Image only· Template
v1.0 · 2012 Jun Security Tests
Security Tests
Test taxonomy & coverage
Full size· Image only
v1.0 · 2008 Aug Worm Classification
Worm Classification
Malware taxonomy
Full size
v1.0 · 2007 Jun Virus Classification
Virus Classification
Companion to Malware 101
Full size
02 · Roadmap

Coming next

in development

● Under development

  • Architecture
  • Malware Analysis
  • AWS (multiple)

● Under development

  • Mobile Apps
  • Virtualisation Reviews
  • Application Security