| Links: |
Don Hoover
This guy actually welcomes questions from users about how to recover their spyware-laden computers. He helps in forums, and has a guest book where you can ask further questions. It is so bad out there, that anybody can get infected, but by catering to the average user with little technical background, Don fills a huge void. Hats off to Don Hoover. He is doing the world a great service. |
Common Insecurities Fail Scrutiny
Analysis of TCP/IP NetBIOS file-sharing protocols. |
QChain
Command line tool from Microsoft that installs multiple hotfixes with only one reboot. |
CERT Coordination Center
Make sure you peruse this site regularly. |
Security Focus
Complete site for security issues. If you check just one site, check here. |
NTBugtraq
NT security mailing list and links to other security tools. |
Network Flight Recorder
Provides intrusion detection, network traffic, and network analysis tools. |
Building a Network Monitoring and Analysis Capability
Instructions for an intrusion detection system based on open and free tools. Check this out before you sink *any* money into more expensive intrusion detection systems. At a minimum, these tools will help you learn what you really need in an IDS, and understand the vocabulary and features of commercial systems |
IT Baseline Protection Manual
A lot of good security stuff here for many platforms, addressing many issues. Go here! |
MS Security Advisor Program
Security notices, fixes, etc. from Microsoft. |
Counterpane Systems analysis of PPTP
|
Trend Micro
Trend Micro has some very interesting and acclaimed virus protection products. We particularly enjoy their integration with popular email andgroupware software like Microsoft Exchange and Lotus Notes. |
Symantec NAV
One thing that we really like about Symantec's virus protection software is the ease of which the virus signature files and software canbe updated. We are, as always, a little wary of automatically updatingany kind of service on the server without rigorous testing; however, the automatic updates over the Internet that NAV offers seems perfect for workstations.We have had many problems with various virus software and NT 4.0; however,the Symantec product is one we have had few problems with. |
ntsecurity.net
An exhaustive resource for maintaining security for your NT serversand network. This site includes announcements of new security holes, links to services and programs to reveal and fix those security holes, and helpful tutorials on securing your network from intrusion. Highly recommended. |
ISS Security Center
In addition to being a leader in intrusion detection systems, ISS provides a most excellent database of security exploits and vulerabilities. And even better still, they have a space in their URL! :) |
Kerberos home page
Kerberos home page |
Windows 2000 Kerberos Interoperability
Windows 2000 Kerberos Interoperability |
Windows 2000 Kerberos Authentication
Windows 2000 Kerberos Authentication |
Designing an Authentication System: a Dialogue in Four Scenes
Designing an Authentication System: a Dialogue in Four Scenes |
Kerberos FAQ
Kerberos FAQ |
PAM SMB
Pam Smb allows authentication of Linux/Unix users using an SMB server (e.g. WinNT/2k, Samba) |
Security and Apache: An Essential Primer
Security and Apache: An Essential Primer |
OpenSSH home page
OpenSSH home page |
SSH Communications home page
SSH Communications home page |
Top Gun ssh for PalmOS
We kid you not! |
Nessus home page
Nessus scans your network and reports on the hosts and services it finds, as well as security vulnerabilities. |
LANguard Network Security Products
LANgaurd offers a variety of security products, including content filters, scanners, event log monitoring, and anti-virus. |
DeviceLock for Windows NT/2000/XP, the floppy lock software
DeviceLock gives network administrators control over which users can access what devices (ports, floppies, Magneto-Optical disks, etc.) on a local computer. Once DeviceLock is installed, administrators can assign permissions to LPT ports, CD-ROMs, COM ports or any other device, just as they would to share-permissions on a hard disk. |
OpenSSH key management, Part 3
Excellent document. Includes links to Parts 1 and 2. |
PortsLock
PortsLock is a personal firewall for Windows NT/2000/XP that fully supports user-level security. Once PortsLock is installed, administrators can control which users can access what TCP/IP based protocols (HTTP, FTP, SMTP, POP3, Telnet, etc.) on a local computer, depending on the time of day and day of the week. PortsLock lets you set allowed/denied TCP/UDP ports and IP-addresses for incoming and outgoing connections. |
Baseline Security Analyzer
Very nice (and free) tool from Microsoft to check out security issues on your Windows servers and workstations. |
Transparent Screen Lock for Win2000 NT and XP
Password protect your workstation or server with "Transparent Screen Lock" leaving the screen visible so that running programs can be monitored. |
