Detailed Table of Contents

A Short TOC (List of chapters) can be had here.

• 1 About this document
• 1.1 How to read this document
• 1.2 Scope / Objectives
• 1.3 Who should read this document?
• 1.4 Corrections/Mistakes
• 1.5 Copyright
• 2 Introduction
• 2.1 Why is IT security necessary?
• 2.2 Why is a security policy needed?
• 2.3 Are your systems secure now?
• 2.4 How to go about improving security
• 2.4.1 Bottom Up Approach to improving Security
• 2.4.2 Top Down Approach to improving Security
• 2.4.2.1 Overview
• 2.4.2.1.1 Formal Risk Analysis Methods (e.g. MARION)
• 2.4.2.2 Threats + impact + likelihood = risk
• 2.4.2.3 Sources of threats
• 2.4.2.4 Impact
• 2.4.2.5 Constraints Analysis
• 2.4.2.6 Risk summary
• 2.4.2.7 Counter strategy & counter measures
• 3 Security organisation
• 3.1 Overview
• 3.2 Organisational structure
• 3.3 Roles and Responsibility
• 3.4 Processes
• 3.4.1 Security Hotline/ Helpdesk
• 3.4.2 Change Management
• 3.4.3 Systems monitoring
• 3.4.4 Data Backup & Restore
• 3.4.5 System audits
• 3.4.6 Crisis Management / "Firecall" / Emergency Response Team / Disaster Planning
• 3.5 Security Marketing
• 3.6 Security Information Centre
• 4 Information Classification
• 4.1 Availability classification
• 4.2 Sensitivity classification
• 4.2.1 Concepts
• 4.2.2 Class : Public / non classified information
• 4.2.3 Class : Internal information
• 4.2.4 Class : Confidential information
• 4.2.5 Class : Secret information
• 5 Requirements on systems
• 5.1 System Model
• 5.2 Availability requirements
• 5.3 Sensitivity requirements
• 5.3.1 Class Requirements: Public / non classified data
• 5.3.2 Class Requirements: Internal data
• 5.3.3 Class Requirements: Confidential data
• 5.3.4 Class Requirements: Top Secret data
• 5.3.5 Requirements: Summary of relationship to Orange Book Classes
• 5.4 Component security checklist
• 6 Security Policy
• 6.1 Corporate Policy
• 6.2 Information Security Policy
• 6.2.1 Concepts
• 6.2.2 Classification of information
• 6.3 Personnel Security policy
• 6.3.1 Ethics
• 6.3.2 Password Policy
• 6.3.3 General Software Policy
• 6.3.4 Networks
• 6.3.5 Internet
• 6.3.6 Laptops and portable computers
• 6.4 Computer & Network Policy
• 6.4.1 System administration policy
• 6.4.1.1 Physical security
• 6.4.1.2 Access Control
• 6.4.1.3 Logon Policy
• 6.4.1.4 Assurance
• 6.4.1.5 Accountability and Audit
• 6.4.1.6 Reliability of Service
• 6.4.2 Network Policy
• 6.4.2.1 Network / Distributed Systems Policy
• 6.4.2.2 Dial-in access
• 6.4.2.3 Dial-out (PSTN/ ISDN)
• 6.4.2.4 Internet Firewall
• 6.4.2.5 Interfaces to other networks
• 6.4.2.6 Incident Response Procedure
• 6.4.3 Software Development Policy (UC)
• 6.4.3.1 General Guidelines
• 6.4.3.2 Production Guidelines
• 6.5 Business Continuity Planning (UC)
• 6.6 Enforcement
• 7 Security Mechanisms
• 7.1 Cryptography & Digital Signatures
• 7.1.1 Shared (or symmetric) Key Cryptography
• 7.1.2 Public Key Cryptography
• 7.1.3 Hashing / message digest
• 7.1.4 Applying cryptography
• 7.1.4.1 Encryption Strength
• 7.1.4.2 Legal Issues / Export restrictions (Sep.97)
• 7.1.4.3 Digital Time-stamping Service (DTS)
• 7.1.4.4 Certificates, Certification Authorities (CA) and Trusted Third Parties (TTP)
• 7.1.4.5 Emergency File Access
• 7.1.4.6 Secure Data Transmission using cryptography
• 7.1.4.6.1 Using FTP for secure file exchange
• 7.2 Sample encryption products/protocols
• 7.2.1 SSH (Jan 1997)
• 7.2.2 SSL (Secure Socket Layer) V3 (Mar.1997)
• 7.2.3 PCT V1.0
• 7.2.4 S-HTTP (Secure HTTP)
• 7.2.5 J/Crypto, CST (Sep'97)
• 7.2.6 SKIP (May'97)
• 7.2.7 IPv6 (IPng) (July 1996)
• 7.2.8 Photuris
• 7.2.9 PGP (Pretty Good Privacy) (Mar.'97)
• 7.2.10 S-Tool (UC)
• 7.2.11 SET (Secure Electronic Transmission) - June 1997
• 7.2.12 Encryption Products available outside the U.S.
• 7.3 Authentication
• 7.3.1 Summary of authentication mechanisms
• 7.3.2 Logon
• 7.3.3 Kerberos
• 7.3.4 NIS+
• 7.3.5 Remote Access Control Protocols: RADIUS, XTACACS
• 7.3.5.1 RADIUS (Remote Authentication Dial In User Service).
• 7.3.5.2 XTACACS (Enhanced Terminal Access Controller Access System)
• 7.3.5.3 TACACS+
• 7.3.6 PPP Authentication protocols: PAP, CHAP
• 7.3.7 BoKS
• 7.3.8 HTTP Basic Authentication
• 7.3.9 NT Domains / Lan Manager / SMB & NetBIOS /NetBeui /CIFS
• 7.3.10 Others
• 7.4 Access Control Lists (ACLs)
• 7.5 Mechanisms for implementing Rules & Policies
• 7.6 Availability Mechanisms
• 7.6.1 Backup & Restore
• 7.6.2 Environment
• 7.6.3 Redundancy
• 7.6.3.1 Application/service redundancy
• 7.6.3.2 RAID / Mirroring (UC)
• 7.6.3.3 System Redundancy
• 7.6.3.4 Full Hardware redundancy
• 8 Physical Security
• 8.1 Buildings
• 8.2 Transport of Data
• 8.3 Backups
• 8.4 Disks
• 8.5 Laptops / mobile computers
• 8.6 Printers
• 8.7 Computers
• 8.8 "Clean desk"

   9. Practical IT Security: Summary of Chapters 1-8

• Brief Security Checklist
• Classification Summary
• Component security checklist

• 10. Securing LAN/WAN Networks
• Network Model (OSI)
• Network Protocols
• Lan Manager / Microsoft Network / NT Domains
• TCP/IP
• Weaknesses
• Routing Protocols (TBD)
• PPP (Point to Point Protocol) (TBD)
• DNS (Domain Name Service)
• NIS, NIS + (Network Information Service)
• DHCP (Dynamic Host Configuration Protocol)
• NFS (Network File System)
• Appletalk, SNA, IPX/SPX, OSI protocols, X.25, Decnet (TBD)
• Physical network types
• Ethernet
• Leased lines
• FDDI (UC)
• ATM (TBD)
• Network Devices
• Hubs
• Bridges
• Routers
• Modems
• Gateways
• Internet Email Gateway
• External connections to WANs
• Permission for external connections
• Example Incoming connections
• Example Outgoing Connections
• Simple Internet or Bulletin board access
• Insecure subnets
• Network Management / Monitoring
• IBM Netview, HP Openview, Sun NetManager (TBD)
• 11. Other Networks
• Telephone/Fax Network (UC)
• 12. Firewalls: Securing external Network connections
• Introduction
• Reference Documentation
• Where to start?
• Policy
• Choosing a type of firewall
• Buy in or build yourself?
• Cost
• Assurance
• Risks
• Sample Architectures
• Screening Router Architecture
• Dual Homed Host Architecture
• Screened Host Architecture
• Screened Subnet (or DMZ) Architecture
• Invisible Filter Architecture
• Encrypting firewalls / Tunnels
• Administration Issues
• Ease of administration
• Backups
• Logging
• Time based access control
• Organisation
• Availability
• Configuration Issues
• OS (Operating System)
• Filtering
• Proxies
• Services
• Remote Access Servers (PSTN / ISDN)
• Sample Products
• Authentication Products (30.1.97)
• Bellcore S/Key
• OPIE (One-time Passwords In Everything)
• ACE Server (SecurID)
• Safeword
• Watchword (UC)
• Defender Security System
• Intelligent filters (screens)
• IP Filter 3.1.5 (Feb. 1997)
• SunScreen 100G V1.0 (July. 1997)
• Proxies & filters
• TAMU drawbridge
• DEC Firewall (UC)
• TIS Gauntlet & FWTK (Mar. 96)
• SOCKS 5 (21 Oct.1996)
• Firewall-1 (Jan.1997)
• Harris Firewall (UC)
• Norman Firewall (June 1996)
• WWW/HTTP proxies
• Firewall Penetration testing
• Intrusion detection
• Summary: A quick guide to firewalls
• 13. Securing Applications
• Internet/Intranet
• Introduction.
• Client side security & browsers
• Downloading from the Internet
• Java 1.01
• Javascript
• Hot Java
• ActiveX
• Netscape Navigator
• Microsoft Internet Explorer (June'97)
• Servers: WWW (World Wide Web)
• Reference Documentation
• Overview
• General
• Authentication
• Access Control
• Privacy issues / cookies
• Availability
• Redundancy
• Internet Money
• Email
• Secure email
• PGP
• PEM
• S/MIME (Mar.'97)
• General recommendations
• Email servers & systems
• Microsoft Exchange V4 (Mar.'97)
• MS-Mail (Feb.'95)
• UNIX mail (SMTP, MIME, sendmail, MMDF)
• Sendmail
• MMDF (Multi-channel Memo Distribution Facility)
• Office Automation
• MS-Office (Winword/ Excel/ PowerPoint)
• WordPerfect
• Windows Help Files
• Postscript
• Ghostscript
• MS-Schedule+ (UC)
• Host Emulators (vt100, 3270)
• Teemtalk
• X Windows (Dec.'95)
• Introduction
• General recommendations
• xhost
• xauth
• HP OpenView (TBD)
• Sun OpenWindows
• Common Desktop Environment (CDE) (UC)
• X Display Manager (XDM)
• Xterm
• Workflow Managers
• Staffware V5 (UC)
• General
• Accountability
• User identification / authorisation
• Audit Trail
• Access Control
• Object Reuse
• Secure Data Exchange
• Peer Entity authentication
• Integrity
• Confidentiality
• Non Repudiation of origin/receipt
• Availability
• Backups
• Redundancy
• EDI
• Developing Secure Applications
• UNIX Application development
• Development languages
• CGI programming
• 
  Client/Server Communication
•  14. Databases & Transaction Monitors
• Transaction monitors
• X/Open DTP
• Documentation
• Unisys Open/OLTP 4.2.2 = IMC TUXEDO 4.2.2 (for UNIXNT/PC)
• General
• Characteristics
• Compatibility
• Documentation
• Transaction Integrity
• Accountability
• User identification / authorisation
• Audit Trail
• Access Control
• Object Reuse
• Secure Data Exchange
• Peer entity authentication
• Integrity
• Confidentiality
• Data origin authentication
• Non repudiation of origin/receipt
• Availability
• Load Balancing
• Service Redundancy
• Master Redundancy
• WSH (Workstation Handler) Redundancy
• OLTP Interface to Oracle 7
• HIT (Host Integration Toolkit) 1.0
• General
• Installation
• Transaction Integrity
• Accountability
• User identification / authorisation
• Audit Trail
• Access control
• UNIX Login security
• File System
• Object Reuse
• Secure Data Exchange
• Peer Entity authentication
• Integrity
• Confidentiality
• Non repudiation of origin / receipt
• Availability
• Service Redundancy
• Databases
• General guidelines for (relational) Databases
• General
• TCSEC Evaluated Databases
• Transaction Integrity
• Accountability
• User Identification / authorisation
• Audit trail
• Access Control
• UNIX Login security
• File System
• Views and stored procedures
• Object Reuse
• Communication / Secure Data exchange
• Peer Entity authentication
• Integrity
• Confidentiality
• Data origin authentication
• Non repudiation of origin / receipt
• Availability
• Backups
• Prevention of resource abuse
• Replication
• Redundancy
• Sybase (Nov.'95)
• 4.9.x
• System 10, System 11
• Microsoft SQL server (Dec.'95)
• General
• Accountability
• Identification / authorisation
• Overview
• Recommendations
• Audit trail
• Access Control
• Views and stored procedures
• Filesystem
• Object Permissions
• Object Reuse
• Communication / Secure data exchange
• Peer Entity authentication
• Confidentiality
• Availability
• Backup / Recovery
• Recovery
• Consistency Checking
• Organisation
• Redundancy
• Monitoring
• Replication
• Mirroring
• SQL Server V6.0
• Oracle 7.1 or later (Dec.'95)
• General
• Dangers
• Documentation
• Accountability
• Identification / authorisation
• Audit Trail
• Access Control
• Discretionary Access Control
• Secure system startup
• Secure data exchange / communications
• Peer entity authentication
• Data integrity
• Data confidentiality
• Non repudiation of origin/receipt
• Access control (TBD)
• Availability
• Prevention of Resource Abuse
• Backup and restore
• Redundancy
• Replication
• 15. Operating System (OS) Overview
• Assurance
• Conformance with the TCSEC (Orange Book) requirements (Spring 1996)
• Conformance with the ITSEC requirements (June 1996)
• Recommendations

 

•  16. Securing PCs (DOS/ WfW 3.11/ Windows 95)
• 16.1 A quickie guide to securing PCs
• 16.2 General
• 16.2.1 Use of portable computers
• 16.3 Documentation
• 16.4 Assurance
• 16.4.1 Virus protection
• 16.5 Accountability
• 16.5.1 Identification / authorisation
• 16.5.2 Audit Trail (UC)
• 16.6 Access Control
• 16.6.1 Discretionary Access Control
• 16.6.2 Secure System Startup
• 16.6.3 Object reuse
• 16.7 Secure data exchange / communications
• 16.7.1 Peer Entity authentication
• 16.7.2 Data confidentiality
• 16.7.3 Non repudiation of origin / receipt
• 16.8 Network & Communications
• 16.8.1 Routing: TCP/IP
• 16.9 Availability
• 16.9.1 Backup and restore (Win95)
• 16.9.2 Prevention of Resource Abuse
• 16.9.3 Patches & Release management
• 16.9.4 Replication
• 16.9.5 Redundancy
• 16.10 PC Client Security Tools
• 16.10.1 Secure access to UNIX servers
• 16.10.1.1 F-Secure SSH (Secure Shell) V1.0
• 16.10.2 File/Directory encryption, secure deleting Tools
• 16.10.2.1 F-Secure Desktop V1.0 (Feb.'97)
• 16.10.2.2 Destroy
• 16.10.2.3 StopLight
• 16.10.2.4 Stoplock V (TBD)
• 16.10.2.5 Raxco EAC, SECUREcard (TBD)
• 16.10.2.6 RSA Secure (not yet available for Win95) UC: Dec'95

16.10.3 Anti-Virus protection

• 17. Securing Windows NT (3.5 - 4.0)
• A quick guide to securing NT
• General
• Reference Documentation
• Assurance
• Principal dangers
• Current known problems/dangers (Feb. 1997)
• NT as an Internet Firewall / Internet server
• NT workstation
• Accountability
• Identification / authentication
• NT Domains / Lan Manager 3.0
• Guest Account
• Temporary Users
• User Groups
• Rights
• User Profiles (for NT clients only)
• Domain Controllers
• Logon scripts
• Naming Services
• DNS
• DHCP
• WINS
• IP Naming service files
• System logs & Monitoring
• Performance monitor
• Auditing
• Event Auditing and the security log
• File Auditing
• Registry auditing
• Network Connection Auditing
• Clipbook Auditing
• Network Services logging
• Printer Auditing
• Access Control
• The NT Registry
• Screen Access Control
• Scheduler Access Control
• Printer Access Control
• Clipbook Access Control
• Filesystem Access Control
• Secure system startup
• Object reuse
• Secure data exchange / communications
• Network Peer entity authentication
• Trusts
• Network Data integrity
• Network Data confidentiality
• Non repudiation of origin / receipt
• Network Access control
• RPC (TBD)
• Remote configuration Utilities
• NT File Sharing
• NFS
• RAS
• SNMP
• FTP server
• Routing
• Availability
• Backup and restore
• Prevention of Resource Abuse
• Change/release management
• Server reconfiguration
• Change log
• User notification
• Patches
• SMS (Systems Management Server) 1.1
• Access Control
• Integrity
• Communications Security
• Availability
• SMS Open Questions
• Remote Consoles
• Remote Installation (TBD)
• Redundancy
• File Replication
• Disaster Recovery
• Security Tools
• Sample scripts
• Workstation Level security script (UC)
• Server Level security script
• Registry editor
• NT resource kit
• C2 Configuration Utility (NT 3.51)
• DumpAcl V2.56
• Perl
• Postmail
• Other
• Compaq Server Hardware Monitoring Tools (UC)
• Securing UNIX
• Overview
• A quick guide to securing UNIX
• General
• Documentation
• Assurance
• "C2" for SunOS
• Principal dangers / problems
• Accountability
• Identification / authorisation
• Introduction
• UNIX accounts: General Guidelines
• NIS
• NIS +
• Passwd replacements
• DES encrypted scripts
• DNS (Domain Name Service)
• Audit trail
• Monitoring system changes
• Auditing
• Sun Shield / BSM
• Log Files
• Syslog
• Process Accounting
• Solaris Accounting
• Access Control
• Printing Access Control
• Access Control to Applications
• Floppy Drive Access Control
• Device Access Control
• Login Access Control
• Job Scheduler (at / cron) Access Control
• File system security
• Secure system startup
• Object reuse
• Solaris BSM
• Unischred (Apr.'93)
• Secure data exchange / communications
• Network Peer entity authentication
• Trusted hosts
• Ssh (Secure Shell)
• Network Data confidentiality
• Network Data Integrity
• MD5
• Non repudiation of origin / receipt
• Network Access control
• Inetd (Internet demons) - inetd.conf
• RPC (portmapper/rpcbind)
• NFS
• UUCP (UNIX to UNIX copy program)
• FTP
• Anonymous ftp
• TFTP (Trivial File Transfer Protocol)
• Dial-up Access Control (TBD)
• Network components
• Routing
• SNMP
• Other: ARP, RARP, bootp, bootparams
• Availability
• Backup and restore
• Sample Backup Products
• Availability Monitoring
• Prevention of Resource Abuse
• Change/release management
• User notification
• Online notification
• /etc/issue (Solaris 2.4 & later)
• /etc/motd (Message of the Day)
• Change Logs
• Remote Installation (UC)
• Remote Consoles
• Patches
• C library patch
• HP Security Patches (UC)
• IBM AIX Security Patches (PTF: Program Temporary Fixes)
• DEC Security Patches (UC)
• IRIX (Silicon Graphics) Security Patches (UC)
• Sun Security Patches
• Redundancy
• Disk mirroring / RAID: Sample Products
• File Replication (rdist)
• Complete system redundancy
• Disaster Recovery
• Journalling File Systems
• Crash dumps
• Initial Crash dump analysis (TBD: check commands)
• X windows
• Checklists
• Unix Auditing checklist (Dec. 11, 1996)
• System Configuration
• Identification & Authentication
• Access Control
• Auditing / Logging
• Diverse
• Availability/Reliability of service
• Tools
• Monitoring Tools (UC)
• OpenVision SecureMax 3.2 (Dec. 1994)
• Raxco ESM 4.0 (Mar. 1995)
• Solaris 2: ASET (UC)
• Central Management Tools
• One-time auditing Tools (UC)
• Satan 1.1 (new version due April 1997 ?)
• Merlin
• ISS (Internet Security Scanner): Dec 1995 UC
• Pingware, Netprobe: TBD
• TAMU tiger
• Standard UNIX utilities
• UNIX Security Tools - Public Domain
• Perl (June 1996)
• Diverse Goodies
• 19 Appendix A: Acknowledgements
• 20 Appendix B: Stuff which I don't know where to put
• 20.1 Template for component security analysis
• 20.2 National Laws: Legal considerations for risk analysis
• 20.3 USA
• 20.4 Switzerland
• 20.5 Ireland
• 20.6 General
• 20.7 ITU/ISO Security standards (UC)
• 20.8 POSIX Standards (UC)
• 20.9 IDEA encryption licensing terms
• 20.10 Protecting against Snooping via Van Eck Radiation/ TEMPEST
• 20.11 The Ten Commandments of Computer Ethics
• 20.12 Windows 95 Administration problems/limitations (Feb. 26th 1996)
• 20.13 NT
• 20.13.1 NT Administration problems/limitations (Feb. 26th 1996)
• 20.13.2 Pending list with Microsoft engineering (stopped Dec.1995)
• 20.14 Types of systems
• 21 Appendix C: Reference Material
• 21.1 Security information: Where can I get it ?
• 21.1.1 A Quick guide for those in hurry!
• 21.1.2 Contacts: Email lists, Response Teams, Vendors, Patch sources
• 21.2 Security Organisations
• 21.2.1 FIRST (Forum of Incident Response and Security Teams)
• 21.2.1.1 CERT Advisories (Feb'97)
• 21.2.1.2 European Emergency Response Teams
• 21.2.1.3 AUSCERT
• 21.2.1.4 NASIRC (NASA Response Team)
• 21.2.1.5 CIAC (U.S. department of energy (DOE) Response Team) (June'96)
• 21.2.2 French Organisations (TBD)
• 21.2.3 U.S. Organisations/agencies
• 21.3 Internet Hacking Groups
• 21.4 Security standards
• 21.4.1 U.S. Standards: The Rainbow Books
• 21.4.2 The TCSEC "Orange Book"
• 21.4.2.1 Introduction
• 21.4.2.2 Contacts
• 21.4.2.3 2.0 DIVISION C: DISCRETIONARY PROTECTION
• 21.4.3 The ITSEC - "European Orange Book"
• 21.4.3.1 Overview
• 21.4.3.2 Extract from the ITSEC Introduction
• 21.4.3.3 Contacts
• 21.4.3.4 Example functionality class F-DX
• 21.4.4 ITSEM (extracts)
• 21.4.5 TTAP
• 21.4.6 Common Criteria 1.0
• 22 Appendix D: Sample scripts/utilities
• 22.1 NT Scripts (TBD)
• 22.1.1 Script to clean up NT 3.51 (TBD)
• 22.1.2 Script to send SMTP email from NT (not yet tested)
• 22.1.3 Script to monitor an NT 3.51 server for changes (TBD)
• 22.2 UNIX Scripts
• 22.2.1 /etc/syslog.conf (Tested on SunOS 4.1.3, 5.2-5.5)
• 22.2.2 monitor_processes.pl : Check that important processes are running
• 22.2.3 monitor_last.sh : Check list of logins today
• 22.2.4 kill_baddies.pl : Report, wipe or move "dangerous" files
• 22.2.5 monitor_auth.pl : Report unusual entries in Syslog files (daily)
• 22.2.6 Check NFS shares: check_mounts.sh (TBD)
• 22.2.7 SunOS 4.x: Cleaning up file permissions
• 22.2.8 Solaris 2.x: cleaning up file permissions
• 22.2.9 SunOS 4.x: installing a Firewall host
• 22.2.10 Solaris 2.x: installing a Firewall host
• 22.2.11 Setting up anonymous ftp on Solaris 2.x
• 22.2.12 Monitor_socket.pl : Wait for Sybase or Satan connections.
• 23 Appendix E: References, Abbreviations
• 23.1 Referenced documents
• 23.2 Related documents
• 23.3 Glossary / Abbreviations

 

---