NETWORK SECURITY
Network Administration.
Security Policy, Risk Management

REFERENCES

SECURITY: Documents, References, Whitepapers, etc.

• AUSCERT - Australian Computer Emergency Response Team
• eSec - a leading Internet and e-commerce security provider

• comp.security.announce
• comp.security.firewalls
• comp.security.misc
• comp.security.ssh
• comp.security.unix
• alt.computer.security.web-of-trust

• ITS: Windows NT Security Information - When Windows NT completes the installation process only very basic security is in place. To increase security to an acceptable level it is necessary to make changes to the system configuration.
  
• ITS: Microsoft Security Configuration Editor - The Microsoft Configuration Editor for NT (MSSCE) provides a convenient way to apply a standard security configuration in your domain for Domain Controllers, Member Servers and Workstations. MSSCE came as part of the NT SP4. You should read the readme file for information on installation and use of the program.
  
  
• Internet Security with Windows NT Security guru Mark Edwards shares a wisdom accumulated through years in the security arena to help you protect your network from attack, detect security breaches when they occur, and recover from problems as quickly as possible. - Available Online for Free
  
  
• The Handy Security Toolkit
  How to take network security seriously
  Monitoring network security is always tricky and time consuming, no matter how you approach it. Nonetheless, it's incredibly important, and having certain tools at your disposal can help in your endeavors. Many people mistakenly think that network security means installing a firewall and forgetting about it. But security is an ongoing, everyday practice of perseverance and diligence.
  
  
• The Handy Security Toolkit Revisited
  Add torque to your network with a few new tools
  Securing your network requires more than installing a firewall and setting some access controls. Security is an ongoing process of checks and balances that requires you to be diligent and persistent, and you need a good toolkit at your disposal to perform checks and balances.
  
  
• SAGE - Windows
• http://www.ntshop.net/ - NT Shop
• http://www.sysinternals.com/ - Sysinternals
• http://www.ntbugtraq.com/ - NT Bugtraq
• http://www.ntsecurity.net/
• SECURITY - topic listing
• http://www.ntobjectives.com/ - Network Security Auditing Tools for Windows NT

• Novell Security Services
• Novell Patches & Files - NW5

• http://www.8lgm.org/Countermeasures/ - NetworkICE : Countermeasures



• http://www.ciac.org/ - CIAC : computer Incident Advisory Capability



• http://ciac.llnl.gov/ciacNT/index.html - CIAC NT : computer Incident Advisory Capability



• http://athena.fit.qut.edu.au/security/ - Security Software
  
  
• ISAAC (Internet Security, Applications, Authentication and Cryptography)
  http://www.isaac.cs.berkeley.edu/
  
  
• Welcome to SOCKS
• Dan Farmer's Security Survey of Key Internet Hosts
• Computer Related Commonwealth Law
• Bugtraq Archives by thread
• Ssh (Secure Shell) Home Page
• Security and Hackerscene
• Improving the Security of Your Site by Breaking Into it
• Security Dynamics
• VeriSign Home Page (index.html)
• Internet Security Systems, Inc. Home Page - ISS
• Lawrie's Cryptography Bibliography
• Cryptography and PGP Page at ANU RSCHP, PGP International Home Page, PGP Keyservers, ATT PGP PathServer, PGP Web of Trust stats
• SSH Secure Shell home, SSLeay and SSLapps FAQ, SOCKS
• WWW Virtual Library: Cryptography, PGP and Your Privacy
• Intl. Assoc. of Cryptologic Research (IACR) archives
• Yahoo Indexes for Cryptography, and Applied Cryptography
• Cryptanalysis info
• Gene Spafford's Computer Operations, Ausit, and Security Technology COAST site
• NIST Computer Security Resources, and the Advanced Encryption Standard (AES) Development Effort
• Bugtraq mailing list archives
• FaCTNet International Digest: archiving Free Speech. Free Thought, and Privacy Rights Issues
• IPSEC news
• Cipher, electronic newsletter of the IEEE Computer Society TC on Security & Privacy
• Crypto Export Control Archives
• Cyberlinks Computer Security page
• Tezcat Security Index
• RSA Data Security Inc. home page
• Crypto and Security Courses
• Prof. Dr. Klaus Pommerening list of the items from Schneier's Applied Cryptography disks
• Cryptix home, and their Java lib
• Dan Farmer's Internet Security Survey
• Watcher a network sniffer and spoofer tool
• Michael Peirce's page on Network Payment Mechanisms
• Digicash
• Mondex digital wallet
• Roger Clarke's home page with info on electronic commerce and privacy
• RSA Challenges, Distributed.Net, Cyberian RC5, Mersenne.org Search, SolNet DES Chal
• NSA Cryptological Museum, Bletchley Park home
• Erlang Systems
• Ericsson Computer Science Lab
• Inferno and Limbo info
• Java (Sun) home, the Java Security FAQ at Sun, JavaSoft Security page, and the RST Java Security FAQ
• Java Applets With Safety
• Mobile Code info, Distributed Hypermedia Issues from W3C
• Objective Caml, a variant of ML
• Perl5 Man
• Scheme48
• Secure Internet Programming team at Princeton
• TCL/Tk at Sunlabs
• Lojban constructed language info

• Hackersclub.com
• Rootshell
• Lopht
• Fyodor's Playhouse
• www.attrition.org/
• Attrition - Website Hack archive