Network Security Information

Sorry, this page is no longer actively maintained

Contents

• Security Notices
• Infrastructure Protection and Information Assurance
• Security Information
• Network Security Reference Information
• Security threats

Network Security - and other oxymorons

Security is a process not a state. My personal interest was network security. Just as there is no perfect network there are no secure networks. Networks expose systems to new risks whilst facilitating their greater usefulness. Perhaps the best to aim for is a network that, at least with the knowledge and skills we have today, provides sufficient security features and controls to support end system security to allow sufficient confidence that application security and, ultimately, information or data security can be maintained. Networks should exist to benefit system users. Networks may aid security by, for example, allowing end system monitoring and easing software updates. However, they also give easier access to end systems to crackers, viruses, worms, trojans, spyware and other malware. Network connectivity increases the complexity of systems and their software. Networks expose critical data to disclosure, loss or change. Even when we can, by some definitions, trust our users, vendors and suppliers they will make mistakes. A trusted computer or a trusted user or a trusted network, in computing terms is not one that we have reason to trust: it is one that we are trusting. We need to know how well-founded that trust is. This page lists some resources that can help with that but the resources need to be used carefully. When browsing any security resource an up-to-date patch state (operating system, browser, virus tools), an evaluated firewall and a secure anonymizing proxy are all tools to consider irrespective of whether the resources are, on the face of it, black hat or white hat. As always with security issues: don't talk to strangers and don't run untested software or software of doubtful origin on a machine that matters or that is on a network.

Security Notices

• AUSCERT Australian CERT (Computer Emergency Response Team)
• Computerworld Security Update
• Bugtraq archive
• CERT also has an update listserv
• CIAC Computer Incident Advisory Capability
• COAST
• CVE Common Vulnerabilities and Exposures. and the ICAT metabase at icat.nist.gov/icat.cfg
• DFN-CERT German Research Network CERT
• DShield.org Distributed IDS report
• FIRST Forum of Incident Response Teams
• incidents.org shows the top 10 ports being attacked and current attack trends
• The RISKS Digest an enlightening though disconcerting read
• SANS portal and also SANS Top 20 and Internet Storm Center"
• UNIRAS Unified Incident Reporting and Alert System, the UK Government CERT.

Infrastructure Protection and Information Assurance

U.S. Agencies

• National Center for Crisis and Continuity Coordination
• The NCSD, the National Cyber Security Division, is part of the IAIP (Information Analysis and Infrastructure Protection Directorate) of the U.S. Department of Homeland Security. It took over the roles of
  • CIAO Critical Infrastructure Assurance Office
  • NIPC National Infrastructure Protection Centre, a mission of the FBI
  • FedCIRC, the Federal Computer Incidenty Response Centre
  • NCS, the National Communications System
• DoD DIAP Defense-Wide Information Assurance Program
• DoD NII Networks & Information Integration

UK Agencies

• UK CESG (Communications Electronics Security Group) with interesting background papers as well as current products and practices, including brochures on PKI (Cloud Cover) and penetration testing. Incidentally, the related site about GCHQ is of interest with its claim for the largest LAN in Europe and vast supercomputer resources.
• NHTCU, the National High-Tech Crime Unit, established in 2001 to be the first UK law enforcement organisation tasked to combat computer-based crime.
• NISCC, the National Infrastructure Security Co-ordination Centre, announced in 1999 to defend the UK critical national infrastructure against electronic attack.
• Office of Surveillance Commissioners
• ITSEC UK IT Security approvals process and approved products, including background on the classification schemes.

Security Information

• Counterpane Security Bruce Schneier's company site
• c:cure was the brand name for BS7799 with added risk management and certification scheme. BS7799:1999 added ecommerce and other third-party access issues, cryptographic controls, access controls and other enhancements to the 1995 standard. BS7799 is a guide to good security practice recommending 10 key controls starting with a written security policy.
• EPIC Crypto Electronic Privacy Information Centre Cryptographic Policy
• ICSA an objective source of network security with a useful library of resources, recommended reading and links to suppliers and sources.
• Mich Kabay's site. M E Kabay is Associate Professor of Information Assurance, Norwich University, VT.
• Dave Pisitello's blog entertaining and authoritative
• grsecurity.net
• netfilter.org
• NIH Security Archive
• rtfm.com Eric Rescoria
• SANS including the SANS reading room
• Secure Computing the International Journal of Computer Security
• tldp.org
• NIH Security Archive
• comp.risks newsgroup

Network Security Reference Materials

• Protocols web site
• TCP/IP Port Knowledgebase at www.iss.net
• TCP/IP Port List by Richard Akerman
• TCP/IP Trojan and Remote Access Port List at www.doshelp.com
• Top 75 Network Security Tools from a survey of nmap users

Security Threats

They have computers, and they may have other weapons of mass destruction

Janet Reno, US Attorney General, 2/27/98.

No comment :-) ?

www.ansdell.org.uk -> networks -> network security information (security.html)