UNIX System Security
Addison Wesley (Verlag)
978-0-201-56327-6 (ISBN)
- Titel ist leider vergriffen;
keine Neuauflage - Artikel merken
Issues discussed include account and password security, securing the file system, encryption and authentication systems, TCP/IP network security, the Network Information Service (NIS), NFS, RFS, workstation security, terminals and modems, and UUCP. Other chapters describe how to respond if your system is attacked and how to develop a comprehensive security policy for your organization. The book also gives comprehensive lists of freely available security software, and publications and mailing lists dealing with UNIX security. "UNIX System Security should become popular among site administrators struggling to get a handle on security needs - especially since most vendor-specific manuals don't cover those well-known security 'holes' which can cause grief." -Dr. Dobb's Journal "David A. Curry's UNIX System Security: A Guide for Users and Administrators is highly recommended.This should end the morbid joke that UNIX Security books belong to the 'thin-book' category that includes The Dan Quayle Spell Checker and The Woody Allen Family Values Guide."
-Stan Kelly-Bootle, UNIX Review "UNIX System Security: A Guide for Users and Administrators by David Curry, provides a comprehensive overview of key issues and offers practical advice for making UNIX systems more secure." -UniForum Monthly "UNIX System Security: A Guide for Users and Administrators by David A. Curry, presents a rigorous look at security issues on BDS 4 and Systme V Release 4, enlivened by references to four well-known security breakdowns from real life." -UNIXWorld "UNIX System Security is so clearly written that even some of the more complex topics become easy to understand, and there are sections that even the most inexperienced user will comprehend. Curry has provided an essential text in security for both the beginning and experienced user." -Sys Admin 0201563274B04062001
David A. Curry has been programming and administering UNIX systems since 1978. He has worked for the Research Institute for Advanced Computer Science, SRI International, and the Purdue University Engineering Computer Network. He currently serves as the Purdue Computer Emergency Response Team's representative to the Forum of Incident Response and Security Teams. 0201563274AB04062001
Preface. 1. UNIX Security Stories. The Internet Worm. The Wily Hacker. A True UNIX Trojan Horse. Attacking UNIX with Viruses. Summary. 2. Account Security. Passwords. Expiration Dates. Guest Accounts. Well-known Accounts. Group Accounts vs. Groups. Protecting an Account. Super-User. Monitoring Account Security. Summary. 3. File System Security. File Permissions. The umask Value. The write System Call. The Sticky Bit on Directories. The Set-Group-Id Bit on Directories. Set-User-Id and Set-Group-Id Shell Scripts. Devices. Backups. Monitoring File System Security. Summary. 4. Network Security. Trusted Hosts. The inetd Program. The File Transfer Protocol (FTP). Electronic Mail. Finger. Forgery and Spoofing. Network Configuration. Sophisticated Network Attacks. Monitoring Network Security. Summary. 5. NIS, NFS, and RFS. The Network Information Service (NIS). The Network File System (NFS). The Remote File Sharing Service (RFS). Summary. 6. Workstations. Single-User Mode. Super-User Access. Network Access. The PROM Monitor. Screen Access. Summary. 7. Terminals, Modems, and UUCP. Terminals. Dial-Up Modems. Terminal Servers. The UNIX-to-UNIX Copy Program (UUCP). Summary. 8. Responding to Attacks. Detection. Response. Notification. Summary. 9. Encryption and Authentication. Encryption. Authentication. Encrypting and Authenticating Electronic Mail. Summary. 10. Security Policies. Establishing Policies and Why. Access to the System. Password Policies. Proper Use. System Staff Rights and Responsibilities. Copyrights and Licenses. Ethics. Guidelines for the Secure Operation of the Internet. Summary. 11. Security Software. Obtaining Fixes and New Versions. Publicly Available Software. RSA Privacy-Enhanced Mail. The National Computer Security Center. Summary. 12. Obtaining Security Information. Computer Security Incident Response Capabilities. Forming a CSIRC. Vendor Security Notification. Mailing Lists. USENET Newsgroups. Suggested Reading. Summary. Glossary. References. Appendices. A Password Cracker. A File System Checker. Kerberos Dialogue. A Complete Security Policy. UNIX Security Checklist. Index. 0201563274T04062001
Erscheint lt. Verlag | 31.5.1992 |
---|---|
Reihe/Serie | Addison-Wesley Professional Computing Series |
Zusatzinfo | Illustrations |
Verlagsort | Harlow |
Sprache | englisch |
Maße | 243 x 239 mm |
Gewicht | 732 g |
Themenwelt | Informatik ► Betriebssysteme / Server ► Unix / Linux |
Informatik ► Theorie / Studium ► Kryptologie | |
ISBN-10 | 0-201-56327-4 / 0201563274 |
ISBN-13 | 978-0-201-56327-6 / 9780201563276 |
Zustand | Neuware |
Haben Sie eine Frage zum Produkt? |
aus dem Bereich