Computer Security

Things I Wrote

• Security Rules of Thumb
• We don't have a Secure Network

Recommended Books

• Computer Crime - Icove, Seger, VonStorch
• Practical Unix and Internet Security - Spaf & Garfinkel
• Building Internet Firewalls - Chapman & Zwicky
• Firewalls and Internet Security - Cheswick & Bellovin
• Applied Cryptography - Schneier

General Security Issues

• COAST
• CIAC Security Web Site
• Ron Rivest's crypto-security links
• Source Code Review Guidelines
• Matt Blaze's cryptography resource on the web - crypto.com
• Welcome to Principia Cybernetica Web

Security/Crypto Software

• Transparent Cryptography - File Systems
• idea.sec.dsi.unimi.it
• SSL Accelerator
• AFS: FAQ, Beginners Guide (NIH), other pointers, Yahoo
• POP3/IMAP4: Cyrus (CMU)
• PGP: PGP Inc US Homepage, International Homepage, Public Key Server Commands (MIT)
• SSH: SSH Communications Security, Ltd., Tera Term + TTSSH, MindTerm
• Security: Encryption: Disk Encryption

Key Distribution and Authentication Systems

• Kerberos: MIT V5, public key extensions, info from ISI, outside US (KTH), on Macs.
• SDSI
• Sesame Authentication and ACL System
• Overview of Certification Systems: X.509, CA, PGP and SKIP
• Token Cards
• Biometrics

Firewalls and VPNs

• VPNs: Security With an Uncommon Touch
• Internet Firewalls FAQ (Marcus)
• Firewall Vendors List
• Firewalls Mailing List
• IP Spoofing Info (EMV)
• SKIP
• floppyfw
• SmoothWall GPL
• NetScreen
• The S/WAN for virtual private networks. John Gilmore is doing a Free SWAN for Linux
• Jasomi Networks
• NTS Tunnelbuilder (PPTP for Macs)
• Linux access on the WRT54G
• pfsense

Lock Down Machines

• NT SECURITY
• Wietse's Postfix Project
• YASSP Yet Another Solaris Security Package
• Titan

Intrussion Detection

• Intrusion Detection Systems
• N F R _ P R O D U C T S

Operating System Issues & Vulnerabilities

• Vendor Security Notices and Info: Microsoft, Sun,
• Security in UNIX: Yahoo,
• Security in NT: FAQ (KTH)
• Multivendor: ISS X-Force Vulnerability Database, Common Vulnerabilities and Exposures @ Mitre

Disclosure

• Rootshell
• http://www.insecure.org/
• L0pht Heavy Industries
• A good of a hack example: Hack PC Week

Privacy, Law, Process, Etc

• Model Security Policies
• Incident Handling_ Useful URLs

Research & Researchers

• Ross Anderson's Home Page
• ISAAC Group Home Page
• Princeton Secure Internet Programming Laboratory
• Purdue University CERIAS Homepage
• UC Davis Computer Security Laboratory
• Home page Paul B. Hill
• tbird's home on the Web

Wireless Networks

• 802.11b WLAN Wireless Security
• Kismet Wiresless Sniffer for Zaurus

Development & Technique

• Secure Programming

Unfiled Links

• Anonymous Surfing
• UnderGround-No More Secrets
• Differential
• ECPA
• PGP Products
• RSA Data Security Inc.
• COAST Hotlist Main
• Crypto Links
• Home Page For Dis Org
• SoftWinter - Shade page
• Distributed Computing Environment (DCE) Products
• PGP tools & add-ons for Windows
• The Ping o' Death Page
• Security and Hackerscene
• Bennet Yee's Security Pages
• Network Flight Recorder
• Security and Privacy Related Links
• Wietse's VMailer Project
• Commercial Encryption Export Controls
• Cipher - Newsletter of the IEEE CS TC on Security and Privacy
• AUSCERT - Australian Computer Emergency Response Team
• Cipher - Newsletter of the IEEE CS TC on Security and Privacy
• Computer Crime Squad
• Cyberspace Law - Unsolicited E-mail
• Freefire Project Tools, English, Bernd Eckenfels
• Gauntlet Support Home Page
• Hacking Links Page
• Kerberos The Network Authentication Protocol
• Security and Privacy Related Links
• Smartcard Developer Association
• SSH Communications Security, Ltd.
• SSH Library and Windows 95_NT Client
• Summary of Encryption Policy Update     
• TGG Acquire Download
• The Smart Card Forum
• U.C. Davis Computer Security Group
• Using Distributed COM with Firewalls
• Welcome to WWIOWeb
• PCCIP Report
• The Nessus Project
• Bug Sweep, TSCM, Counterintelligence, and Technical Security
• s e c u r i t y f o c u s
• Intrusion Detection FAQ
• AntiOnline - Computer Security
• SecurityPortal.com
• GNAT Box Light
• FreeS-WAN Project Home Page
• @stake Security News
• Insecure.Org
• Snort - The Open Source Network IDS News
• sshCE
• Virtual Private Network Consortium -- VPNC
• Doxpara Research!
• Security holes: Who Cares?
• Neohapsis