PSNUG Security tips
  • PCI Security Standards org
  • Novell Security Reporting
  • RootKit Scanners
  • CERT Carnegie Mellon Center for Emergency Response Team/Computing Center
  • AppArmor creator is Crispin Cowan
  • 6 ideas to avoid in computer systems security
  • How to improve java code - measure and fix crappy java code
  • Do you really want to give your credit card number to a MicroSoft IIs webserver? Use this tool to ID the web server: IDserver

    Spyware is rapidly becoming another problem area, check out these tools:

  • ad-aware | SpyBot | Spy Ware Blaster | DoxDesk- IE only
  • Computer Viruses, Worms, Trojans seem to cause the most problems: [UW virus info] [CA-InoculateIT] [Trend Micro] [ Netware and McAfee] [McAFEE] [Novell Patch list] [Symantec Security] [Command AntiVirus] [Sophos] [www.f-secure.com] [www.viruslist.ru]

    Read why MS products are so hard to secure. Check out other security weaknesses where you can actually test for some of these bugs/features.

  • SNORT | TripWire
  • syslog ng and Snare effective Log management and reporting

    Setting up the most basic Netware security you can read NetworkComputing article. To get started on a more complete security policy read the below AppNote on closing the doors mentioned further down this page. Want study or review Novell Security details? includes white papers, best practises, Application and Developer Notes

    FIREWALLS

    Now that you've read the above article about the limitations of Firewalls now read about how to go about protecting your valuable DATA from both external and internal attack, this AppNote on closing the doors will get you started devising security policies to meet your organization's needs. And now you begin to see why you'd want to manage your LAN Borders including the Internet using BorderManger. Along with protection of data on your LAN - security is about authentication, verification, cryptography so check out other Novell Security Services.

    Ease of security management is the really big benefit of Novell products. Directory Service is one of the main reasons. As complexity is rapidly increasing, so of course are all the related security problems. You need to understand security threats so you can keep up with this ever changing world. Since Netware has security as one of its design principles, you'll find Novell security products among the best. And some of these security products are actually free or included along with other products.

  • SSL Security Course Java knowledge may be needed to complete
  • secure rconsole FREE
  • [PKI Certificate Server] [PKI risks] [www.pki-page.org] [ RSA SecurID] [ RSA Keon .pdf] [PGP freeware]

    SANS System Administration Networking and Security
    SANS on Netware security white papers in the Reading Room

    [CERT] [CIAC] [CSRC] [National Infrastructure Protection Center]
    [FIRST Forum Incident Response Security Teams] [The Center for Internet Security] [insecure] [a UW Security Guy]

    [ICSA] [CSI] [securiteam] [Foundstone] [SecurityFocus] [packetstorm] [Neohapsis]

    Distributed Denial of Service (DDoS) is the newest and oldest form of Cyber Terror. This DDOS Roadmap is a living document and will be updated periodically when new or altered threats require changes to the document. Furthermore it is a consensus document -a product of the joint thinking of some of the best minds in security- and it will continue to improve if you share your experiences in implementing the prescriptions.

    IDS - Intrusion Detection Systems - that start at $20,000 don't seem to work well as of June 2002 - read. Looks like open source SNORT can at least cost much less:
    Snort | Sourcefire |

    OK, now let us use the power of a Full Service Directory to setup security policies, get IDS and then automate defenses. Provide real-time intrusion prevention that detects attempts to breach enterprise security AND automatically intercepts and stops attacks before they can do any damage. Netvision Security Policy Management

    As always we look forward to any comments to help improve our content.

    suggestions & corrections send us your suggestions!