Network Security Library

Network Security Library / Misc

Old Threats Never Die: Date - Dec 19, 2007; Author - Gunter Ollmann; New threats come and go, but as many of us know new threats are often based on old threats! New strains are developed, yet old versions still create problems and noise on the Internet long after the intial threat and media hype has diminished. Unpatched machines still flourish on the Internet.
XMorphic Exploitation: Date - Nov 28, 2007; Author - Gunter Ollmann; Traditional exploitations are not all that hard to stop due to the defineable pattern or signature that can be identified. But what about code that dynamically changes or morphs to avoid detection engines?
Kerry's tips on getting a CCNA II: Date - Dec 27, 2006; Author - Kerry Thompson; This article by Kerry Thompson CCNA, CISSP helps provide some helpful information for people studying for their Cisco Certified Network Associate (CCNA) certification.
Information Security Educational Resources: Date - Dec 20, 2006; Author - M. E. Kabay; This paper by M.E. Kabay, PhD, CISSP a man with years and years of experience, is a great resource for finding educational information to further your studies in the demanding field of information security. With the growing visibility of information security in today’s hacker-beset e-commerce world, many people are becoming interested in careers as information security specialists. All indications are that there aren’t enough people with security knowledge and skills to fill all the open positions; as a result, salaries have been rising steadily in the industry. This article looks at some frequently-asked questions and provides pointers for knowledge-hungry readers. Readers should note that these questions are not necessarily quoted from specific people – some are amalgams of queries from different people. Please open the link below, if you are interested in a career in Information Security, and want to find resources to further your learning.
Analysis of a Suspicious Program: Date - Sep 06, 2006; Author - hakin9; We should always think twice before running an unknown program downloaded from the Internet. Of course not every application is dangerous, but it's all too easy to find a malicious program which will exploit our naivety - and that could cost us dearly. Let's see how we can analyse the behaviour of an unknown program before we run it.
Hacked: Who Else Is Using Your Computer?: Date - Aug 03, 2005; Author - Darren Miller; This article brings to light how people tend to be complacent with their computers and not understand the little things they have overlooked that have left themselves open to others on the Internet. Chat programs today are used by millions, and yet they offer an avenue of capability to someone wanting to do harm.
Federal Government Incident Response Team (IRT): Date - Jan 20, 2003; Author - SecurityUnit; This document examines the basic questions that must be addressed, when implementing an Incident Response Team (IRT), within an organization. It does not attempt to undertake an in-depth analysis of the requirements of an IRT, but provides a basic outline for such a team’s organization and functions. This document can be used to better understand the duties and responsibilities of an IRT, and some of the pitfalls to avoid when creating one.
The Advantages of Outsourcing Information Security Management: Date - Oct 16, 2002; Author - Andrew Bycroft; This paper by Andrew Bycroft does not fit to the network security area, but it couls be useful for IT manager.
Analysis Techniques for Detecting Coordinated Attacks and Probes: Date - Oct 16, 2002; Author - John Green; Practical explanation. Mostly for UNIX systems.
Computer Crime Investigator's Toolkit: Date - Oct 16, 2002; Author - Ronald L. Mendell; Also Practical explanation. Unix, DOS, Windows, Browsers, e-mail and networks covered.
Hackers' Tricks to Avoid Detection: Date - Oct 16, 2002; Author - Chris Prosise and Saumil Udayan Shah; Short explanation of several hacker's methods.
Examining port scan methods - Analyzing Audible Techniques: Date - Oct 16, 2002; Author - The Editor; Contains a lot of descriptions of portscan methods.
Hacking Lexicon: Date - Oct 16, 2002; Author - The Editor; It is not a "jargon file". This document clarifies many of the terms used within the context of information security.
Introduction to Network Security: Date - Oct 16, 2002; Author - Matt Curtin; Not big reference.
Sniffing (network wiretap, sniffer) FAQ: Date - Oct 16, 2002; Author - Robert Graham; Good. Very good. Not about sniffing only, but about spoofing too.
Glossary of Terms Related to Messaging & Network Security: Date - Oct 16, 2002; Author - Service Strategies Inc; Just small dictionary.
Guide To Securing Intranet And Extranet Servers: Date - Oct 16, 2002; Author - VeriSign, Inc; More about cryptography.
Automated Crime: Date - Oct 16, 2002; Author - The Editor; Some components of automated security strategy.
The Net Abuse FAQ: Date - Oct 16, 2002; Author - The Editor; About mail-spam, banners-spam, etc.
How to Handle and Identify Network Probes: Date - Oct 16, 2002; Author - Ron Gula; Very interesting paper. Useful for security experts and network admins.
Crackers and Commercial Vulnerability Scanners: Date - Oct 16, 2002; Author - The Editor; Information about (dis)licensing of such scanners :)
Maintaining Security: Date - Oct 16, 2002; Author - The Editor; Common functions
Security: Secure Internet Data Transmission.: Date - Oct 16, 2002; Author - The Editor; Sniff, spoof, encryption
Security: Keeping Hackers Out.: Date - Oct 16, 2002; Author - The Editor; Protecting and testing
Network desing - security: Date - Oct 16, 2002; Author - Peter Morrissey; Policy, risks, encryption, authentification, etc
Guide For Protecting Local Area Networks And Wide Area Networks (LANs/WANs): Date - Oct 16, 2002; Author - The Editor; A little old but with some theoretical things.
Hacker's Encyclopedia: Date - Oct 16, 2002; Author - The Editor; Many terms and their descriptions.
Computer security: Date - Oct 16, 2002; Author - Nerdsnetwork.com; Computer security and Network Security White Paper.
Introduction to Denial of Service: Date - Oct 16, 2002; Author - The Editor; Answers the most questions about DoS. With some examples for many OS.
The Social Organization Of The Computer Undergroung: Date - Oct 16, 2002; Author - The Editor; This paper examines the social organization of the "computer underground"
Approaching Zero - The Extraordinary Underworld of Hackers, Phreakers, etc: Date - Oct 16, 2002; Author - The Editor; Who they are, why they are.
Excerpts from The Encyclopedia of Networking: Date - Oct 16, 2002; Author - The Editor; Many interesting things about networks.
Understanding Concepts In Enterprise Network Security And Risk Management: Date - Oct 16, 2002; Author - The Editor; Small paper about some security flaws
The MH (Modern Hackers) DeskReference: Date - Oct 16, 2002; Author - The Editor; Something incredible and very big by Rhino9 Team - almost all kinds of practical security and hacking %-)
The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments: Date - Oct 16, 2002; Author - The Editor; Some terms about network security
Techniques Adopted By 'System Crackers' When Attempting To Break Into Corporate or Sensitive Private Networks: Date - Oct 16, 2002; Author - The Editor; Good paper. Last edition (December, 1998)
Tracing an e-mail message: Date - Oct 16, 2002; Author - The Editor; Read it if you tired of anonymous messages
NOT the Orange Book: Date - Oct 16, 2002; Author - Paul H. Merrill; A Guide to the Definition, Specification, Tasking, and Documentation for the Development of Secure Computer Systems
Improving Computer Security through Network Design: Date - Oct 16, 2002; Author - Danny Smith; Interesting article from AUSCERT(Australian CERT)
Email Bombing and Spamming: Date - Oct 16, 2002; Author - The Editor; How to detect and prevent it
INTERNET Security: Date - Oct 16, 2002; Author - The Editor; Main points
How to protect from Spoofed/Forged Email: Date - Oct 16, 2002; Author - The Editor; CERT recommendations
How to Send Fake Mail Using SMTP Servers: Date - Oct 16, 2002; Author - The Editor; Detailed description
Site Security Handbook: Date - Oct 16, 2002; Author - The Editor; General points of security
The Art of Port Scanning: Date - Oct 16, 2002; Author - The Editor; Some advises
Network Management Protocol Insecurity: SNMPv1: Date - Oct 16, 2002; Author - The Editor; Phrack article
An analysis of TCP/IP NetBIOS file-sharing protocols: Date - Oct 16, 2002; Author - The Editor; Also known as SMB or Samba
Types of Ehernet cards: Date - Oct 16, 2002; Author - The Editor; Sometimes I want to define card manufacturer by MAC-address

Network Security Library topic

[	26	]	Anti Spam	[	12	]	Anti Virus	[	44	]	Auditing
[	60	]	Auth. & Access Control	[	3	]	Content Management	[	103	]	Cryptography
[	12	]	Disaster Recovery	[	36	]	Firewalls & VPN's	[	6	]	Forensics
[	41	]	Harmless hacking book	[	1	]	Honeypots	[	14	]	Information Warfare
[	26	]	Intrusion Detection	[	7	]	Law	[	3	]	Managed Security Solutions
[	50	]	Misc	[	24	]	Mobile Code	[	32	]	NCSC&DoD Rainbow series
[	13	]	NetWare	[	33	]	Network Security	[	4	]	Patch Management
[	3	]	Phishing	[	38	]	Policy & Standards	[	25	]	Privacy
[	21	]	Software Engineering	[	2	]	Trojans	[	2	]	Underground
[	82	]	Unix Security	[	19	]	Web Security	[	39	]	Windows Security
[	6	]	Wireless Security