System Security Implementation ( HTML Format)

• System Security Roadmap
• Welcome
• Schedule
• Overview
• Notes
• Security Infrastructure
• Security Infrastructure Investment
• Management Errors
• Security Mission Statement
• Security Awareness Training
• Security Support Personnel Duties
• Auditing
• Tools
• Targeted System Binaries And Directories
• Internet Attack Methods
• Incident Response
• Management-related Security Problems
• Software Installation Practices
• Authentication Practices
• Backup Practices
• Port Filtering Practices
• Evaluating Vulnerabilities
• Common Unix Vulnerabilities
• Common Windows Vulnerabilities
• Home-user Tips
• System Administrator Best Practices
• Low-cost Security Improvements
• Security Web Sites
• Security Books
• Articles
• Cryptology
• Cryptology
• Algorithm Uses and Properties
• Algorithm Types
• Maintaining Confidentiality
• Transposition Ciphers
• Transposition Cryptanalysis
• Substitution Ciphers
• Polyalphabetic Ciphers
• Rotor Machines
• The Playfair Cipher
• SP Networks
• The Data Encryption Standard (DES)
• The Advanced Encryption Standard (AES)
• Operation Modes
• Electronic Code Book (ECB)
• Cipher Block Chaining (CBC)
• Output Feedback Mode (OFB)
• Hash Function Properties
• Common Hash Functions
• Hash Function Applications
• Asymmetric Ciphers
• The Diffie-Hellman Protocol
• Case Study: Public Key Cryptography
• A Simple Public Key System
• Bibliography
• Access Control, Firewalls and VPNs
• Hardware-based Access Control
• Operating System Access Control
• Firewall Purpose
• Security Strategies
• Security by Obscurity
• Firewall Limitations
• Firewall Technologies
• How Packet Filtering Works
• Evaluation of Packet Filtering
• Basic Packet Filtering
• Other Service Packet Filtering
• IP Packet Filtering
• How Proxying Works
• Evaluation of Proxying
• How Network Address Translation Works
• NAT Example
• Evaluation of Network Address Translation
• Firewall Architectures
• Screening Router
• Dual-homed Host
• Screened Host
• Screened Subnet
• Internal Firewall
• Personal Firewall
• Incident Levels
• Probe
• Attack
• Break-in
• Maintenance: Housekeeping
• Maintenance: Monitoring
• Maintenance: Updating
• VPN Architectures
• Tunneling
• Defence in Depth Example
• Bibliography
• Web Security and Mobile Code
• Web Security Requirements
• User Privacy: What are we Protecting?
• Data Traces
• Web Server Data
• Log File Contents
• Web Server Exploitation Attempts
• Packet Dump Output
• Password in a Packet Dump
• Malicious Applets
• The Java Sandbox Model
• Bytecode Verification
• Policy Example
• ActiveX and Code Signing
• Javascript
• Cookies
• User Authentication
• Application-layer Attacks
• Server Security and Scripting
• Scripting Exploitation Example
• Scripting Guidelines
• State Variable Manipulation
• Cross-site Scripting
• Bibliography
• Appendix A: Protecting the Internet Explorer
• Appendix B: Protecting Mozilla
• Appendix C: Protecting the Netscape Navigator
• Software Security
• Principles for Software Security
• Buffer Overflows
• How does a Buffer Overflow Work?
• Buffer Overflow Defences
• Unix Access Control
• Windows Access Control
• Race Conditions
• Problematic APIs
• Randomness and Determinism
• Applying Cryptography
• Trust Management
• Untrusted Input
• Result Verification
• Data and Privilege Leakage
• Password Authentication
• Database Security
• Application Security
• Bibliography