Hojmark.NET - Security

General

• Denial of Service (DoS) Attack Resource Page
• Firewalls and Internet Security, the Second Hundred (Internet) Years [IPJ] 2.2
• InfoWar
• Router Configuration Tips
  • Cisco Router Security Cookbook [Asbjorn]
  • NSA Security Recommendation Guides, Cisco Router Guides [NSA]
  • Secure IOS Template [R. Thomas]

---

AAA - Authentication, Authorization, Accounting

• TACACS+ and RADIUS Comparison [Cisco]
• RFC1492 - An Access Control Protocol, Sometimes Called TACACS
• RFC2865 - Remote Authentication Dial In User Service (RADIUS)
• RFC4120 - The Kerberos Network Authentication Service (V5)
• Servers
  • Cisco Secure Access Control Server (ACS)
  • FreeRADIUS
  • Juniper Steel-Belted RADIUS [Formerly Funk]
  • Microsoft Internet Authentication Service (IAS)
  • Radiator
  • Shrubbery Networks TACACS+ Daemon

---

Advisories

• Bugtraq mailing list archives
• CERT Advisories
• Cisco PSIRT
• Microsoft SRC

---

Certifications

• FIPS - Federal Information Processing Standards
• ICSA Labs [A division of CYbertrust]

---

Encryption

• An Introduction to IPSec Encryption [Cisco]
• IPSec Working Group [IETF]
• Configuring and Troubleshooting Cisco's Network-Layer Encryption [Cisco]
• Configuring and Troubleshooting Cisco's Network-Layer Encryption: IPSec and ISAKMP [Cisco]
• PPTP vs. L2TP vs. SSTP vs. IKEV2 vs. OpenVPN [Brad Smith]

---

Organizations

• BSI - Bundesamt f�r Sicherheit in der Informationstecnic [Germany]
• CERT - Computer Emergency Response Team
• CERT DK - Danish Computer Emergency Response Team
• COAST - Computer Operations, Audit, and Security Technology
• CSE - Communication Security Establishment [Canada]
• FIRST - Forum of Incident Response and Security Teams
• ISSA - Information Systems Security Association
• SAIC - Science Applications International Corp

---

Firewalls

• BorderWare [Today owned by WatchGuard]
• Check Point Firewall-1
• Cisco ASA (Adaptive Security Appliance, the successor to the PIX)
• McAfee Firewall Enterprise (formerly Sidewinder)
• WatchGuard Firebox

---

Intrusion Detection

• Juniper IDP
• Snort [Open Source]

---

Scanners and Tools

• nmap - The Network Mapper [Insecure.org]
• Nessus
• SAINT - Security Administrator's Integrated Network Tool
• SARA - Security Auditor's Research Assistant
• SATAN - Security Administrators Tool for Analysing Networks

---

Virtual Private Networking (VPN)

• Virtual Private Networking Consortium
• VPNlabs
• What Is a VPN?, Part I [IPJ] 1.1
• What Is a VPN?, Part II [IPJ] 1.2