Network and Computer System Security Links

Web Server Security

• Security and Apache (www.linuxplanet.com/linuxplanet/tutorials/1527/1).

Organizations

• CSTC, Computer Security Technology Center
• NIST Computer Security Resource Clearinghouse
• Common Criteria Project for OS and security evaluation.
• FedCIRC: The Federal Computer Incident Response Capability, A very useful source of security information
• CERT (www.cert.org).
• First, Forum of Incident Response and Security Teams
• Vixi Enterprises, We run the MAPS (Mail Abuse Prevention System) project.
• SANS (www.sans.org).SANS has many good documents on security issues.
• Global Incident Analysis Center (www.sans.org/giac.htm).
• Commonly Probes Ports (www.sans.org/y2k/ports.htm).
• Contacting Host Owners (www.sans.org/y2k/contacting.htm).
• UNIX system Incident Handling Set by Step (www.sans.org/y2k/DDoS.htm).  It tells of many things to do in preparation for handling an incident, and steps for handling an incident after the breakin.
• Common Vulnerabilities and Exposures (CVE) (cve.mitre.org).  A LIST OF STANDARDIZED NAMES FOR VULNERABILITIES AND OTHER INFORMATION SECURITY EXPOSURES - CVE aims to standardize the names for all publicly known vulnerabilities and security exposures.
• SecurityPortal (securityportal.com).

Security WWW Sites

• (http://www.alw.nih.gov/Security/security-www.html).
• Security Focus (www.securityfocus.com/). This is a very good site.  They are a portal that points you to security related articles on many other sites.  They also maintain security exploint related bug list for many applications and operating systems.

Security Bullitins

• CIAC, Departement of Energy. Email security alert list, plus many other good links.
• (ciac.llnl.gov/ciac/CIACChainLetters.html).

Security Info

• NIST on Net Security Threats
• csrc.ncsl.nist.gov/nistpubs/800-7/node136.html Paper on Network Security. Has stuf on filtering.
• Security FAQ
• Distributed Denial of Service (DDoS) Attacks/tools (staff.washington.edu/dittrich/misc/ddos).  This is an index of link with many good links.

TCP/IP information

• Protocol Numbers (ftp://ftp.isi.edu/in-notes/iana/assignments/protocol-numbers).
• Port Numbers to Service (ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers ).  This list is for well known uses.  There are uses not listed in this list.
• ICMP (ftp://ftp.isi.edu/in-notes/iana/assignments/icmp-parameters).
• Trojans and the ports they typically use:  Note that many trojans can be configured to listen to ports other than the listed ones.
• (www.simovits.com/nyheter9902.html).
• ONCTek (www.onctek.com/trojanports.html).
• Commonly Probes Ports (www.sans.org/y2k/ports.htm).

Risk Assesment

• SRA links page (www.sra.org/privsct2.htm).

Magazines

• Network Computing (www.networkcomputing.com).
• Intrusion Detection, Take Two (www.networkcomputing.com/1023/1023f1.html) is an article on Intrusion Detection Systems (IDS).  It has reviews of a number of different systems.

Tools

• Nessus (www.nessus.org) is a free, powerful, up-to-date and easy to use remote security scanner.
• GNU Privacy Guard (www.gnupg.org).  GnuPG is a complete and free replacement for PGP. Because it does not use IDEA or RSA it can be used without any restrictions. GnuPG is a RFC2440 (OpenPGP) compliant application.
• abuseEmail (logidac.com/abuseEmail).

Firewalls

• Commercial
• MikroTik Routers & Wireless. (www.mikrotik.com).

Firewall Info

• http://dsg.stanford.edu/papers/firewall/ Paper on firewalls.
• Internet Firewalls Frequently Asked Questions by Marcus J. Ranum and Matt Curtin
• ISCA
• ICSA Certified Firewall Products

Tools

• ftp://ftp.stanford.edu/general/security-tools/swatch/ Swatch log file monitering tool.
• Tripwire (www.tripwire.com) File integrity scanner. Note: you must generate the list of file fingerprints on a known good system. This is particulairly good for fresh installs.
• Unix Network Security Tools
• SSL 3.0
• http://home.netscape.com/eng/ssl3/index.html
• CRASHME: Random input testing.
• Security Monitoring Programs
• Network Monitoring Files
• SATAN

Firewalls

• (drawbridge.tamu.edu) Drawbridge firewall.
• (www.linuxrouter.org) Linux Router Project.
• (Firewall Product Overview).

Proxy Servers for your Firewall

• Socks Web Archive

Commercial Tools

• ISS Home Page

NT Security Info

• Navy Secure Windows NT Installation and Configuration
• L0pht Heavy Industries
• http://main.succeed.net/~kill9/hack/os/nt/buglist.html

Classes

• Internet Security Firewalls

Misc Security

• Java Security [An old security hole in Java, looks like it is fixed in newer versions.]

Sorry this list isn't in any order, but I wanted to get it out relatively quickly. Some day I will be resorting it into reasonable order.

If you would like to send me sugestions of more links to add. I would much apreciate it. You may send them to bryan@visi.com.

Unsorted

• http://pgp.rivertown.net/
• Computer Security Research Laboratory at UC Davis
• http://security.cw.net/
• http://spam.abuse.net/spam/
• Unix System Security
• Underground Org
• PGP from MIT
• Latest and ?greatest? PGP
• http://www-08.nist.gov/nistpubs/ NIST Computer Security Special Publications
• The WWW Security FAQ
• PGP Key Server
• 8LGM publish vulnerability scripts
• Windows NT Resource Centre
• http://www.bugnet.com/winnt.html
• Security Related RFC's
• http://www.cert.org/ftp/tech_tips/passwd_file_protection
• http://www.cert.org/nav/whatsnew.html CERT's What's new page. I wish they would send out an email each time it's updated.
• RFC1287
• http://www.consensus.com/security/ssl-talk-faq.html
• SSH (Secure Shells)
• Pointers to Cryptographic Software
• Coast Homepage
• http://www.cs.purdue.edu/coast/hotlist/
• http://www.deter.com/unix/
• MLD's Unix Security Page
• DigiCash home page
• Dr Solomon's Computer Virus Information
• Dr. Solomon's introductory virus tutorial
• En Garde Systems
• TCP Sequence Number Prediction
• SESAME
• Finjan
• Security and Hackerscene A nice site with pointers to other sites with pointers to ...
• Virii
• The International PGP Home Page Home of PGP in Norway
• PGP Tools and Add-Ons
• Using PGP with Windows
• The Home Page of Fortified Networks Inc.
• http://www.infowar.co.uk/mnemonix/utils.htm
• Innergy, A lot of links and news groups
• NMAP -- The Network Mapper
• RFC Editor
• http://www.it.kth.se/%7Erom/ntsec.html
• Cipher - Newsletter of the IEEE CS TC on Security and Privacy
• http://www.jsiinc.com/reghack.htm
• A Page of Remailers
• McAfee
• PIPEX WorldServer
• PGP Resource Page
• http://www.nfr.net/
• http://www.novatech.net.au/frmain-t&d.htm
• http://www.ntbugtraq.com/
• http://www.ntsecurity.net/
• Mixmaster Remailer FAQ
• http://www.osp.nl/infobase/ntpass.html#crack1
• PGP The Company
• http://www.pgp.net/pgpnet/pgp-faq/
• The Applied Cryptography Case
• Trusted Product Evaluation Program - TPEP
• http://www.rootshell.com/
• RSA Data Security
• http://www.sans.org/roadmap.htm
• Lockout, fortezza vendor
• http://www.secnet.com/ntinfo/
• Security Dynamics | Home Page
• NT Security Issues
• Somarsoft - Windows NT Security Issues
• Somar's Windows NT Security page
• Symantec Virus Information
• Telstra Corporation: Computer and Network Security Reference Index
• Trusted Information Systems
• TNO-FEL: Common Criteria
• Triteal's fortezza approach
• Touch Technologies, Inc. Product Offerings
• Security Related Files
• http://www.uni-karlsruhe.de/~ig25/ssh-faq Secure Shell FAQ
• Verisign
• alpha.c2.org FAQ
• Internet Scanner User Guide and Reference Manual
• http://wwwthep.physik.uni-mainz.de/~frink/nt.html
• Internet Security Review (Online Edition, updated daily)
• US Department of Energy's Computer Incident Advisory Capability (CIAC)
• TrendMicro Virus Alerts
• Purdue University's COAST Security Archive
• ISS X-Force
• There is good information on a web server called INFOSEC

All these links are known dead. If you know where they have gone, please inform me.

Dead

• ftp://ftp.fastlane.net/pub/nomad/nw/faq.zip
• ftp://ftp.net.cmu.edu/pub/argus-1.5/ Argus network monitering tool
• ftp://ftp.win.tue.nl/pub/security/satan-1.1.1.tar.Z Good old satan...
• ftp://info.cert.org/pub/tools/iss/ ISS (Internet Security Scanner)
• Linux Security
• Encrypt Everything Pointers to crypto programs
• NSA/X31 Documents Tests of various firewalls
• Texas Collection of Computing Policies
• UNIX to NT Resource Centre
• http://netbus.hypermart.net/index_en.html
• Public Key Encryption
• The iNformaTion Web Site
• Firefox by WatchGuard Technology
• 3TECH 4/95: "Constructing Firewalls"
• The Windows NT Unofficial Home Page
• Protection of TCP/IP Based Network Elements
• Anonymity and Privacy on the Internet
• Internet Firewall FAQ
• V-ONE Corporation Publications
• Packet Filtering in Internet Firewalls
• The Rotherwick Firewall Resource