INTERNET SECURITY

By LINDA HERNANDEZ

SECRET KEY CRYPTOGRAPHY PUBLIC KEY CRYPTOGRAPHY KEY MANAGEMENT AND THE KEY DISTRIBUTION PROBLEM HASH FUNCTIONS KEY LENGTH USING DIGITAL SIGNATURES HOW DOES A DIGITAL SIGNATURE ADD SECURITY? POTENTIAL SECURITY RISKS WITH DIGITAL SIGNATURES ACQUIRING DIGITAL CERTIFICATES THE X 509 STANDARD CERTIFICATE AUTHORITY (CA) AND PUBLIC KEY INFRASTRUCTURE (PKI) HOW TO ACQUIRE A DIGITAL CERTIFICATE POTENTIAL SECURITY RISKS WITH DIGITAL CERTIFICATES UNDERSTANDING SSL HOW SSL IS RELATED TO HTTP HOW DOES SSL WORK? PERFORMANCE ISSUES WITH SSL POTENTIAL SECURITY RISKS WITH SSL UNDERSTANDING SSH AUTHENTICATION AND GENERAL USE ENCRYPTION ALGORITHMS USED WHAT SSH CAN AND CAN’T PROTECT YOU FROM POTENTIAL SECURITY RISKS WITH SSH UNDERSTANDING PGP USING PGP THE WEB OF TRUST POTENTIAL SECURITY RISKS WITH PGP UNDERSTANDING S/MIME ADDITIONS TO MIME HOW S/MIME WORKS POTENTIAL SECURITY RISKS WITH S/MIME UNDERSTANDING KERBEROS KERBEROS COMPONENTS HOW KERBEROS WORKS COMPARING KERBEROS AND WINDOWS POTENTIAL SECURITY RISKS WITH KERBEROS SUMMARY FAQS CHAPTER 5 ATTACKS THAT AWAIT YOUR NETWORK INTRODUCTION TYPES OF ATTACKS POOR NETWORK PERIMETER/DEVICE SECURITY NETWORK SNIFFERS SCANNER PROGRAMS NETWORK TOPOLOGY UNATTENDED MODEMS POOR PHYSICAL SECURITY APPLICATION AND OPERATING SOFTWARE WEAKNESSES SOFTWARE BUGS WEB SERVER/BROWSER-BASED ATTACKS GETTING PASSWORDS: EASY WAYS AND CRACKING PROGRAMS HUMAN FAILURE POORLY CONFIGURED SYSTEMS LEAKAGE OF INFORMATION MALICIOUS USERS WEAKNESSES IN THE IP SUITE OF PROTOCOLS LAYER 7 ATTACKS LAYER 5 ATTACKS LAYER 3/4 ATTACKS SPECIFIC ATTACKS AND HOW TO PROTECT YOURSELF FROM THEM BACK ORIFICE AND NETBUS PROTECTION MELISSA, LOVE LETTER, AND LIFE STAGES THE WORLD OF INTRUSION DETECTION WHY WAS IT DEVELOPED? WHAT INTRUSION DETECTION CAN DO FOR YOU NETWORK IDS HOST IDS WHAT CAN’T IDSS DO? DEPLOYING IN A NETWORK NETWORK VULNERABILITY ANALYSIS TOOLS INTRUSION DETECTION PACKAGES ICEPAC SECURITY SUITE CISCO SECURE INTRUSION DETECTION SYSTEM (SECURE IDS) THE SENSOR THE DIRECTOR THE POST OFFICE GENERAL OPERATION CISCO IOS FIREWALL INTRUSION DETECTION SYSTEM CISCO SECURE INTEGRATED SOFTWARE (FIREWALL FEATURE SET) CBAC (CONTEXT-BASED ACCESS CONTROL) CYBERCOP INTRUSION DETECTION PACKAGE CHAPTER 6 MICROSOFT RAS AND VPN FOR WINDOWS WHAT’S NEW IN WINDOWS PROBLEMS AND LIMITATIONS WHAT IS THE SAME? WINDOWS 2000 DISTRIBUTED SECURITY SERVICES ACTIVE DIRECTORY AND SECURITY ADVANTAGES OF ACTIVE DIRECTORY ACCOUNT MANAGEMENT MANAGING SECURITY VIA OBJECT PROPERTIES MANAGING SECURITY VIA GROUP MEMBERSHIPS ACTIVE DIRECTORY OBJECT PERMISSIONS RELATIONSHIP BETWEEN DIRECTORY AND SECURITY SERVICES DOMAIN TRUST RELATIONSHIPS THE GREAT LINK: KERBEROS TRUSTS BETWEEN DOMAINS EXTENSIBLE AUTHENTICATION PROTOCOL (EAP) REMOTE AUTHENTICATION DIAL-IN USER SERVICE (RADIUS) INTERNET PROTOCOL SECURITY (IPSEC) BUILDING AN IPSEC POLICY BUILDING AN IPSEC MMC CONSOLE SECURITY POLICIES RULES WALKTHROUGH SET UP IPSEC CONVERSATION BETWEEN TWO COMPUTERS ENABLING AUDITING OF LOGONS CREATE A CUSTOM IPSEC POLICY CONFIGURING MICROSOFT RAS AND VPN FOR WINDOWS TUNNELING BASICS VPN DEFINITIONS AND TERMINOLOGY HOW TUNNELING WORKS IP ADDRESSING SECURITY ISSUES PERTAINING TO VPNS ENCAPSULATION USER AUTHENTICATION DATA SECURITY WINDOWS 2000 SECURITY OPTIONS COMMON USES OF VPNS REMOTE USER ACCESS OVER THE INTERNET CONNECTING NETWORKS OVER THE INTERNET SHARING A REMOTE ACCESS VPN CONNECTION USING A ROUTER-TO-ROUTER CONNECTION CONNECTING COMPUTERS OVER AN INTRANET TUNNELING PROTOCOLS AND THE BASIC TUNNELING REQUIREMENTS WINDOWS 2000 TUNNELING PROTOCOLS POINT-TO-POINT TUNNELING PROTOCOL (PPTP) LAYER 2 TUNNELING PROTOCOL (L2TP) USING PPTP WITH WINDOWS HOW TO CONFIGURE A PPTP DEVICE USING L2TP WITH WINDOWS HOW TO CONFIGURE L2TP HOW L2TP SECURITY DIFFERS FROM THAT OF PPTP INTEROPERABILITY WITH NON-MICROSOFT VPN CLIENTS POSSIBLE SECURITY RISKS WEB PROXY SERVICE WINSOCK PROXY SERVICE SOCKS PROXY SERVICE REVERSE PROXY REVERSE HOSTING ACCESS CONTROL AUTHENTICATION TYPES MS PROXY CLIENT SETUP ENABLING REVERSE PROXY ALERTS MONITORING AND PERFORMANCE TRANSACTION LOG FILES APPLICATIONS DISTRIBUTED CACHING DEMILITARIZED ZONE (DMZ) SECURITY ISSUES MICROSOFT IIS SECURITY PROPER LAT CONFIGURATION MICROSOFT SECURITY BULLETINS CONFIGURATION LAB PROBLEM SOLUTION REAL-WORLD PROBLEMS AND WORK-AROUNDS