Security

General

• Denial of Service (DoS) Attack Resource Page
• Firewalls and Internet Security, the Second Hundred (Internet) Years [IPJ/Cisco]
• InfoWar
• Security Technologies [Cisco]
• NTSecurity.net
• Router Configuration Tips
  • Building Bastion Routers Using Cisco IOS [Phrack Magazine]
  • Cisco Router Security Cookbook [Asbjorn]
  • Improving Security on Cisco Routers [Cisco]
  • NSA Security Recommendation Guides, Cisco Router Guides [NSA]
  • Secure IOS Template [R. Thomas]

• TACACS+ and RADIUS Comparison [Cisco]
• RFC1492 - An Access Control Protocol, Sometimes Called TACACS
• RFC2865 - Remote Authentication Dial In User Service (RADIUS)
• RFC4120 - The Kerberos Network Authentication Service (V5)
• Servers
  • Cisco Secure Access Control Server (ACS)
  • FreeRADIUS
  • Juniper Steel-Belted RADIUS [Formerly Funk]
  • Microsoft Internet Authentication Service (IAS)
  • Radiator
  • Shrubbery Networks TACACS+ Daemon

• @stake Advisories
• Bugtraq mailing list archives
• CERT Alerts
• CIAC Bulletins
• Cisco Internet Security Advisories
• Microsoft Security Advisories
• Sun Security Bulletin Archive

• Common Criteria
• FIPS - Federal Information Processing Standards
• ICSA Labs [A division of CYbertrust]

• IPSec Introduction [Cisco]
• IPSec Working Group [IETF]
• Configuring and Troubleshooting Cisco's Network-Layer Encryption [Cisco]
• Configuring and Troubleshooting Cisco's Network-Layer Encryption: IPSec and ISAKMP [Cisco]
• Understanding The IPSec Protocol Suite [Alcatel]

• BSI - Bundesamt f�r Sicherheit in der Informationstecnic [Germany]
• CERT - Computer Emergency Response Team
• CERT DK - Danish Computer Emergency Response Team
• CESG - Communications-Electronics Security Group [UK]
• CIAC - Computer Incident Advisory Capability
• COAST - Computer Operations, Audit, and Security Technology
• CSE - Communication Security Establishment [Canada]
• CSI - Computer Security Institute
• FIRST - Forum of Incident Response and Security Teams
• ISSA - Information Systems Security Association
• NSI - National Security Institute
• SAIC - Science Applications International Corp

• Internet Firewall Essentials [Network Computing]
• Firewall Review [Network Computing]
• BorderWare [BTi]
• Check Point Firewall-1
• Cisco Secure PIX Firewall
• Secure Computing Sidewinder G2
• Symantec Enterprise Firewall

• CAI eTrust Internet Defence
• Cisco IDS
• ISS RealSecure
• NFR Intrusion Management System
• Snort [Open Source]
• Symantec NetProwler

• Cisco Secure Scanner [formerly NetSonar]
• ISS Internet Scanner
• nmap - The Network Mapper [Insecure.org]
• Nessus
• SAINT - Security Administrator's Integrated Network Tool
• SARA - Security Auditor's Research Assistant
• SATAN - Security Administrators Tool for Analysing Networks
• Symentec NetRecon

• Virtual Private Networking Consortium
• VPNlabs
• Virtual Private Networks [Cisco]
• Virtual Private Networking Overview (Word) [Microsoft]
• Understanding Point-To-Point Tunneling Protocol (PPTP) [Microsoft]
• Using Point-to-Point Tunneling Protocol (Word) [Microsoft]
• What Is a VPN?, Part I [IPJ/Cisco]
• What Is a VPN?, Part II [IPJ/Cisco]