Search | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | R | S | T | U | V | W | X | Y | Z

Index: S

S/Key password program : 10.3.1. One-Time Passwords

sabotage : (see denial of service)

SAGE (System Administrators Guild) : A.5.5. System Administrators Guild (SAGE)

SATAN package

12.2.4. Responding to Probes
B.2.4. SATAN

score keepers : 1.2.2.3. Score Keepers

screend package

6.5. Conventions for Packet Filtering Rules
B.3.1. screend

screened host architecture

4.2.2. Screened Host Architecture
9.2. Screened Host Architecture

screened subnet architecture

4.2.3. Screened Subnet Architecture
9.1. Screened Subnet Architecture
with dual-homed host architecture : 4.3.8. It's OK to Use Dual-Homed Hosts and Screened Subnets

screening routers

4.1.1. Packet Filtering
6. Packet Filtering
(see also packets, filtering)
acceptable addresses for : 6.5. Conventions for Packet Filtering Rules
choosing : 6.8. Choosing a Packet Filtering Router
configuring : 6.2. Configuring a Packet Filtering Router
proxy systems and : 7. Proxy Systems
rules for : 6.5. Conventions for Packet Filtering Rules
where to use : 6.8.8. It Should Have Good Testing and Validation Capabilities

search programs : 2.6. Other Information Services

Secure HTTP : 8.6.4. Secure HTTP

security

1.4. What Is an Internet Firewall?

8.1.1.1. SMTP for UNIX: Sendmail

8.10.4. DNS Security Problems

(see also firewalls)

against system failure : 3.5. Fail-Safe Stance

audit : 5.8.5. Running a Security Audit

of backups : 5.10. Protecting the Machine and Backups

bastion host speed and : 5.3.2. How Fast a Machine?

choke points

9.1.4.3. Choke point
9.2.3.3. Choke point

of commercial authentication systems : 10.4.3. Commercial Solutions

cryptography : 10. Authentication and Inbound Services

default deny stance : 6.2.3. Default Permit Versus Default Deny

default permit stance : 6.2.3. Default Permit Versus Default Deny

defense in depth

9.1.4.2. Defense in depth
9.2.3.2. Defense in depth

designing for network : 1.4.3. Buying Versus Building

diversity of defense

3.7. Diversity of Defense
9.1.4.7. Diversity of defense
9.2.3.7. Diversity of defense

encryption, network-level : 10.5. Network-Level Encryption

fail-safe stance

9.1.4.5. Fail-safe stance
9.2.3.5. Fail-safe stance

host : 1.3.3. Host Security

important of simplicity of : 3.8. Simplicity

incident response teams : (see incident response teams)

incidents : (see incidents)

insecure networks : 4.4.2. Insecure Networks

IRC and : 8.9.2. Internet Relay Chat (IRC)

keeping checksums secure : 13.5.3. Keeping Secured Checksums

lack of : 1.3. How Can You Protect Your Site?

least privilege

9.1.4.1. Least privilege
9.2.3.1. Least privilege

legal responsibilities : 11.2.3. External Factors That Influence Security Policies

of machine : 5.8.1. Securing the Machine

modem pools : 10.6. Terminal Servers and Modem Pools

netacl : 5.8.3.2. Using netacl to protect services

network : (see network)

operating system bugs : 5.8.1.2. Fix all known system bugs

policies for

1.4.1.1. A firewall is a focus for security decisions
11. Security Policies
reviewing : 11.1.1.5. Provision for reviews

of POP : 8.1.2. Post Office Protocol (POP)

practicing drills for : 13.5.7. Doing Drills

protecting the network internally : 4.4. Internal Firewalls

protocol, and proxying : 7.4.3. Protocol Security

regarding HTTP : 8.6.3. HTTP Security Concerns

resources for : A. Resources

responding to incidents : 13. Responding to Security Incidents

reviewing response strategies : 13.4.8. Periodic Review of Plans

SNMP : 8.12.1. Simple Network Management Protocol (SNMP)

strategies for : 3. Security Strategies

TCP Wrapper : 5.8.3.1. Using the TCP Wrapper package to protect services

terminal servers : 10.6. Terminal Servers and Modem Pools

through obscurity : 1.3.2. Security Through Obscurity

time information and : 8.13. Network Time Protocol (NTP)

universal participation : 3.6. Universal Participation

weakest link

3.4. Weakest Link
9.1.4.4. Weakest link
9.2.3.4. Weakest link

when proxying is ineffective : 7.8.2. Proxying Won't Secure the Service

when system crashes : 5.10.1. Watch Reboots Carefully

with whois service : 8.8.2. whois

X11 window system mechanisms : 8.16. X11 Window System

Sendmail

2.1. Electronic Mail
3.1. Least Privilege
8.1.1.1. SMTP for UNIX: Sendmail
(see also SMTP)
Morris worm : 8.1. Electronic Mail

servers

Archie, running : 8.7.3.4. Running an Archie server

DNS

for internal hosts : 8.10.5.2. Set up a real DNS server on an internal system for internal hosts to use
setting up fake : 8.10.5.1. Set up a `fake' DNS server on the bastion host for the outside world to use

routed : 5.8.2.4. Which services should you disable?

servers, proxy : (see proxy services)

services host : 9.2. Screened Host Architecture

services, inbound : (see inbound, services)

services, Internet : 2. Internet Services

booting : 5.8.2.4. Which services should you disable?

configuring : 8. Configuring Internet Services

contacting providers about incidents

13.1.4.3. Vendors and service providers
13.4.4.3. Vendors and service providers

default deny stance : 3.5.1. Default Deny Stance: That Which Is Not Expressly Permitted Is Prohibited

default permit stance : 3.5.2. Default Permit Stance: That Which Is Not Expressly Prohibited Is Permitted

direct access to : 7.1.1.1. Proxy services allow users to access Internet services `directly'

disabling those not required : 5.8.2. Disabling Nonrequired Services

filtering by : 6.7. Filtering by Service

information lookup services : 8.8. Information Lookup Services

installing and modifying : 5.8.3. Installing and Modifying Services

LAN-oriented : 5.6. Selecting Services Provided by the Bastion Host

NFS (Network File System) : 5.8.2.4. Which services should you disable?

protecting with TCP Wrapper : 5.8.3.1. Using the TCP Wrapper package to protect services

proxying with : 7.4. Using Proxying with Internet Services

"r" commands : 5.8.2.4. Which services should you disable?

real-time conferencing : 8.9. Real-Time Conferencing Services

RPC (Remote Procedure Call) : 5.8.2.4. Which services should you disable?

selecting for bastion host : 5.6. Selecting Services Provided by the Bastion Host

started by /etc/rc : 5.8.2.1. How are services managed?

Telnet : (see Telnet)

services, network management : (see network, management services)

services, proxy : (see proxy services)

services, store-and-forward : 7.5. Proxying Without a Proxy Server

setgid capability : 5.3.1. What Operating System?

setuid capability : 5.3.1. What Operating System?

shell scripts : 5.8.2.1. How are services managed?

shutting down

13.1.2. Disconnect or Shut Down, as Appropriate
13.4.3. Planning for Disconnecting or Shutting Down Machines

Simple Mail Transfer Protocol : (see SMTP)

Simple Network Management Protocol : (see SNMP)

single-purpose routers : 6.8.2. It Can Be a Single-Purpose Router or a General-Purpose Computer

smap package : 8.1.1.3. Improving SMTP security with smap and smapd

smapd program : 8.1.1.3. Improving SMTP security with smap and smapd

SMTP (Simple Mail Transfer Protocol)

2.1. Electronic Mail

5.6. Selecting Services Provided by the Bastion Host

7.5. Proxying Without a Proxy Server

8.1.1. Simple Mail Transfer Protocol (SMTP)

configuring

firewalls and : 8.1.1.6. Configuring SMTP to work with a firewall
in screened host architecture : 9.2.1.3. SMTP
in screened subnet architecture : 9.1.1.3. SMTP

for UNIX : (see Sendmail)

snapshots, system

13.1.5. Snapshot the System
13.4.5. Planning for Snapshots

sniffing for passwords

1.2.1.3. Information Theft
10.1.2. Packet Sniffing
10.3.1. One-Time Passwords
(see also network, taps)

SNK-004 card, TIS FWTK : 10.3.3. Challenge-Response Schemes

SNMP (Simple Network Management Protocol) : 2.10. Network Management Services

configuring : 8.12.1. Simple Network Management Protocol (SNMP)

snuffle program : 5.8.2.2. How to disable services

sockets : C.12.3. Sockets

SOCKS package

4.1.2. Proxy Services

7.6. Using SOCKS for Proxying

B.4.2. SOCKS

(see also proxy services)

functions : 7.6. Using SOCKS for Proxying

HTTP proxying on

in screened subnet architecture : 9.1.1.5. HTTP

modified finger service : 8.8.1.2. Proxying characteristics of finger

software

to automatically monitor the system : 5.9.2. Consider Writing Software to Automate Monitoring

installing on machine : 5.8.4. Reconfiguring for Production

proxying

4.1.2. Proxy Services
7.1.2.1. Proxy services lag behind nonproxied services
7.2. How Proxying Works
(see also proxy services)

router : (see routers)

viruses and : 1.4.2.4. A firewall can't protect against viruses

source address

filtering by : 6.6.1. Risks of Filtering by Source Address
forgery : 6.6.1. Risks of Filtering by Source Address

source port, filtering by : 6.7.4. Risks of Filtering by Source Port

source routing

5.8.2.5. Turning off routing
6.3.2.1. IP options

speed, processing : 5.3.2. How Fast a Machine?

spell command, UNIX : 5.8.5.3. About checksums for auditing

spies : 1.2.2.4. Spies (Industrial and Otherwise)

startup scripts : 5.8.2.1. How are services managed?

store-and-forward services : 7.5. Proxying Without a Proxy Server

subnet architecture, screened

4.2.3. Screened Subnet Architecture
9.1. Screened Subnet Architecture

subnets : C.9.2. Subnets

Sun RPC : (see RPC)

supporting Internet services : (see services, Internet)

SWATCH program

5.9.2. Consider Writing Software to Automate Monitoring
B.6.4. SWATCH

SYN (synchronize sequence numbers) bit : C.6.2. Transmission Control Protocol

syslog : 5.8.1.4. Safeguard the system logs

configuring : 8.11. syslog
example output from : 12.2.2. What Should You Watch For?
SWATCH program with : 5.9.2. Consider Writing Software to Automate Monitoring

system

autonomous : C.10. Internet Routing Architecture

crashes, watching carefully : 5.10.1. Watch Reboots Carefully

customized : 13.1.6. Restore and Recover

defense, diversity of : 3.7. Diversity of Defense

documenting after incident

13.1.5. Snapshot the System
13.4.5. Planning for Snapshots

failure of : 3.5. Fail-Safe Stance

keeping up-to-date : 12.3.2. Keeping Your Systems Up To Date

labeling and diagramming : 13.5.2. Labeling and Diagraming Your System

logging activity : (see logs)

monitoring

5.9.2. Consider Writing Software to Automate Monitoring
12.2. Monitoring Your System

operating, testing reload of : 13.5.6. Testing the Reload of the Operating System

rebuilding : 13.1.6. Restore and Recover

restoring after incident : 13.1.6. Restore and Recover

planning for : 13.4.6. Planning for Restoration and Recovery

shutting down : 13.1.2. Disconnect or Shut Down, as Appropriate

System Dynamics cards : 10.3.2. Time-based Passwords

Search | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | R | S | T | U | V | W | X | Y | Z