Table of Contents


Appendix B
Internet Security References

Table B.1 contains a list of the FTP sites and web sites that contain Internet security-related programs and files.
Table B.1
Web/FTP Sites
Program Site
Argus ftp://ftp.sei.cmu.edu/pub/argus-1.5
AT&T Web Sites http://www.research.att.com/ ftp://Research.att.com/dist/internet_security
Bind (DNS) ftp://gatekeeper.dec.com/pub/misc/vixie
Canadian Security Intelligence Service http://www.csis-scrs.gc.ca/
CERN WWW Consortium http://www.w3.org
CERT FTP Archive ftp://ftp.cert.org
CIA http:www.odci.gov/
CIAC ftp://ciac.llnl.gov/pub/ciac
http://ciac.llnl.gov
Ckpasswd ftp://gatekeeper.dec.com/pub/usenet/ comp.sources.unix/volume28/ckpasswd
COAST Project http://www.cs.purdue.edu/coast/coast.html (Purdue University)
ftp:/coast.cs.purdue.edu/pub
Computer Systems Consulting http://www.spy.org/
COPS ftp://ftp.cert.org/pub/tools/cops
Courtney ftp://ciac.llnl.gov/pub/ciac http://ciac.llnl.gov
Crack ftp://ftp.cert.org/pub/tools/crack
Cypherpunks ftp://ftp.csua.berkeley.edu/pub/cypherpunks http://www.csua.berkeley.edu/cypherpunks
DDN Security Bulletins ftp://nic.ddn.mil/sccFTP Archive
FAS http://www.fas.org/irp/intelwww.html
FBI http://www.fbi.gov/ http://www.first.org/first/
Fremont ftp://ftp.cs.colorado.edu/pub/cs/distribs/fremont http://www.cs.colorado.edu
Gabriel http://www.lat.com/gabe.htm
Gene Spafford http://www.cs.purdue.edu/people/spaf
Greatcircle FTP ftp://ftp.greatcircle.com/pub Archive—Firewall information
httpd http://www.ncsa.uiuc.edu
identd ftp://ftp.lysator.liu.se:/pub/ident/servers
Internet RFC Index http://www.dscc.dla.mil/v/ve/support/Internet_RFC/ index.html
Innovative Security Products Security http://www.wesecure.com/
White Paper Series ispfyi.htm
ISS http://iss.com/
Kerberos Information ftp://athena-dist.mit.edu/pub/ATHENA
Larry J. Hughes Jr. http://www.nwnet.net/~Larry/
NSA http://www.nsa.gov.8080/isso/
National Security Institutes http://nsi.org/
NCSA http://www.ncsa.com/
NEC Security tools—socks, sudo, cops ftp://ftp.inoc.dl.nec.com/pub/security
Netscape http://www.netscape.com
NIST (U.S. National Institute of Standards and Technology) ftp://csrc.ncsl.nist.gov http://cscr.ncsl.nist.gov/ http://www.tansu.com.au/Info/security.html http://www.nist.gov/
PGP http://www.pgp.com/
PGP and IDEA Archives ftp://ftp.informatik.uni-hamburg.de/ pub/virus/crypt/disk
http://web.mit.edu/network/pgp-form.html
PGP Documentation http://www.pegasus.esprit.ec.org/people/ arne/pgp.html
Raptor http://www.raptor.com
RCMP, Information Technology Security Bulletin 43 http://www.rcmp-grc.gc.ca/html/bull43-e.htm
Secutiry Papers and Documents http://www.telstra.com.au/pub/docs/security/41
Secure Telnet ftp://ftp.adfa.oz.au/pub/security/adfa-telnet
S/Key ftp://thumper.bellcore.com/pub/nmh/skey/
SNMP FTP Archives ftp://lancaster.andrew.cmu.edu/pub/snmp-dist/
socks ftp://ftp.nec.com/pub/security/socks.cstc http://www.socks.nec.com ftp://ftp.cup.hp.com/dist/socks
SRI Computer Science Lab http://www.csl.sri.com/ ftp://ftp.csl.sri.com
ssh (Secure Shell) ftp://ftp.cs.hut.fi:/pub/ssh/ http://www.cs.hut.fi/ssh
SSLref Source http://www.netscape.com
tcpdump, libpcap http://ciac.llnl.gov
tcp_wrappers ftp://ftp.win.tue.nl:/pub/security/ tcp_wrappers_6.3.shar.Z
Texas A&M University Security Archives ftp://ftp.tamu.edu ftp://Net.Tamu.edu/pub/security/TAMU
TIS FTP Archive firewall programs, information— ftp://ftp.tis.com/pub
Tripwire ftp://ftp.cs.purdue.edu/pub/spaf/COAST/Tripwire
Unix Systems Security http://stimpy.cac.washington.edu/%
Checklist 7edittrich/r870/security-checklist.html
VeriSign http://www.verisign.com
ViaCrypt http://www.viacrypt.com
Vince Cate’s Security Page—Useful list of pointers to network security sites ftp://furmint.nectar.cs.cmu.edu/security/ README.html
Wietse Venema FTP Archive ftp://ftp.win.tue.nl:/pub/security
wu-ftpd ftp://wuarchive.wustl.edu
xinetd ftp://ftp.ieunet.ie/pub/security/xinetd-2.14.tar.gz

The newsgroups shown in table B.2 are an excellent day-to-day source of information for security-minded people of all walks, both novice and expert alike. Investigate them all to start, and stay with the ones you find most useful.

Table B.2
Usenet Newsgroups
Newsgroup Description
comp.security.unix The primary newsgroup for security
comp.security.misc The second best newsgroup for security
alt.security The third best, though increasing amounts of noise
sci.crypt A lot of theory on cryptography
alt.2600 More phone hacking and vending machine breaking
comp.security.firewalls Discussion of firewalls
comp.security.announce CERT advisories
alt.security.pgp Discussion of PGP
alt.security.ripem Discussion of PEM, little traffic
comp.protocols.kerberos Discussion of Kerberos
alt.hacker Not very useful
talk.politics.crypto Interesting discussions on cryptography


Table of Contents