- AIX 4.3 Network Hardening - http://ist.uwaterloo.ca/security/howto/2001-01-15/
Recipes to secure network services on AIX. Download of scripts available.
- Absence of Malice - http://www.lightlink.com/fors/press/ddj9603.html
Editorial from Dr. Dobb's Journal about Randal Schwartz's felony convictions for running Crack on unauthorized machines.
- Raw IP Networking FAQ - http://www.whitefang.com/rin/
Thamer Al-Herbish's Raw IP Networking FAQ about networking below TCP/UDP and sniffing networks. Includes raw socket source code.
- Secure UNIX Programming FAQ - http://www.whitefang.com/sup
Definitions of security holes, security principles, how to access files safely, and untainting input.
- NIST Computer Security Resource Clearinghouse - http://csrc.ncsl.nist.gov/
Collects and disseminates computer security information and resources to help users, systems administrators, managers, and security professionals better protect their data and systems.
- Unix Security - http://www.spy.net/~jeeb/unix.html
Paper by Rajib K. Mitra about file permissions, daemons, stack overflows and scripts.
- Securing Debian HOWTO - http://www.debian.org/doc/manuals/securing-debian-howto/
Protecting Debian during installation and securing network services.
- G A C T - Unix Passwords - http://www.geocities.com/gactnet/computers/unixpasswd.html
To get to "ROOT" you have to have somewhere to start. For the purposes of this file, that somewhere is with the 'passwd' file.
- Adminschoice - Securing solaris OS - http://adminschoice.com/docs/securing_solaris.htm
Details some of the focus areas for security and provides suggestions to make it strong.
- Writing Safe Setuid Programs - http://nob.cs.ucdavis.edu/~bishop/secprog/index.html
Collection of papers on writing safe setuid programs by Matt Bishop.
- Auditing UNIX Systems: A Case Study - http://www.zeltser.com/auditing-unix-systems/
This report, written as a case study, presents results of a detailed information security audit of UNIX systems that belong to a fictitious company. It illustrates an approach to performing such an examination.
|
