computer security

General

• Security theory
• security through obscurity
• security hole
• cypherpunk
• anonymous remailers
• Security Principles
• computer security engineer
• Your computer has been cracked
• Information Security
• security risk
• physical security
• we're all missing the point on computer security
• security consultant

General, attacking/attacks/attackers

• script kiddies:
  • stupid things script kiddies do
  • conversation with a script kiddie
  • l33t/3L337/31337 (elite)
  • l33t sp34k/l33tsp34k (eilte speak)
  • WaReZ d00dZ/warez kiddies
  • hax0r/h4x0r (hacker)
  • Y0u'v3 b33n Hax0r3d!
• Cracker and Hacker
• Computer virus metanode
• How to crack root and not get caught
• rootkit
• password cracker
• Trojan horse
• backdoor; trap door
• logic bomb
• social engineering

General, defense

• passwords:
  • Password protection
  • good password
  • bad password
  • choosing a password
  • passwords that suck
  • How to recover a lost linux root or Windows 2000 Administrator password
  • Password Paradigms
• File integrity checkers:
  • TripWire
  • Samhain
  • AIDE

Internet/Networking attack

• port scanner/port scanned:
  • Nessus
  • Nmap; Nmapnt
  • os-fingerprinting
• packet sniffer
• Denial of Service Attack/Denial of Service
• smurf attack
• SYN attack
• Ping storm
• Nastygram:
  • Ping O' Death
  • kamikaze packet/Christmas tree packet
  • Chernobyl packet
• Man in the middle attack

Internet/Networking defense

• Port scanning defense:
  • Nessus
  • Nmap; Nmapnt (both Nmap and Nessus were designed for finding security holes so they can be fixed, but these same tools also end up being used by attackers)
  • portsentry (port scanner blocker)
• Internet Security
• VPN (Virtual Private Network)
• Firewalls and Internet Security/firewall
• SSL; HTTPS (Secure Socket Layer and Secure HTTP)
• ssh; sftp; scp (secure remote access and file copying)
• S/MIME (Secure/Multipurpose Internet Mail Extensions)
• PKCS (Public-Key Cryptography System)
• Intrusion Detection Systems/IDS/NIDS:
  • SNORT
  • Dragon IDS
  • NetRanger
  • ISS
• Cryptography and Network Security
• IPsec (Internet Protocol Secure)
• WEP (Wired Equivalent Privacy, the 802.11b security mechanism)

Authentication

• Kerberos
• challenge-response
• X.509 certificates
• Certificate Authority
• PKI (Public Key Infrastructure)
• web of trust
• Microsoft Passport

Encryption

• public-key encryption
• PGP (Pretty Good Privacy)
• Cryptology Meta-Node

Windows security

• Back Orifice/Back Orifice 2000
• Windows 2000 Security Recommendation Guides

UNIX/Linux security

• PAM (Pluggable Authentication Module)
• NIS (Network Information Systems); NIS+; Yellow Pages
• su (set user)
• chmod (change mode); file permissions
• chgrp (change group); chown (change owner)
• SUID (set user ID); SGID (set group ID)
• Files:
  • /etc/passwd
  • /etc/hosts.allow; hosts.allow; hosts.deny
  • /etc/shutdown.allow
• How to recover a lost FreeBSD root password
• rooted
• crack root
• Ack! I forgot my root password!
• Security Enhanced Linux (NSA's improved Linux)
• libformat (protection from format string exploits)
• libsafe (protection from buffer overflow and format string exploits)
• Solaris: security lockdown script

Security risk alert and discussion lists

• CERT
• BugTraq
• VulnWatch

Companies

• Secure Computing
• Zero Knowledge Systems

Laws

• DMCA (Digital Millennium Copyright Act)
• SSSCA (Security Systems Standards and Certification Act)

Copy protection

• Watermarking
• Digital Rights Management
• CPRM (Content Protection for Recordable Media)
• CSS (Content Scrambling System)
• SDMI (Secure Digital Music Initiative)
• Safe Audio
• SCMS (Serial Copy Management System)
• Windows Product Activation

More advanced security concepts

• security model
• defense in depth
• security measures
• least privilege
• domain and type enforcement
• access control
• race condition
• ACL (access control list)
• buffer overflow; buffer overflow attack
• Format string vulnerabilities
• zero knowledge
• Trusted Computing Base
• Non-Repudiation