UNIX System Security: A Guide for Users and System Administrators(Addison-Wesley Professional Computing Series)

Because the UNIX system was originally designed by programmers for use by other programmers, it was used in an environment of open cooperation where security was of minimal concern. Now that its use has spread to universities, businesses, and government, the confidential and sensitive nature of the data stored on UNIX systems has made the security of these systems of paramount importance. Despite all the technical papers and workshops on UNIX security, this book is unique. UNIX System Security is the first up-to-date source to provide the UNIX system user or administrator with the information needed to protect the data and system from unauthorized use. By following the procedures described in this book and making use of the C programs and shell scripts provided as examples, you can protect your UNIX system from most attackers. The author begins by examining four high-profile breaches of UNIX security as illustrations of how a UNIX system can be attacked. He then provides the information necessary to protect against these forms of attack, and offers the tools that can be used to do so.Focusing on the most recent release of Berkeley and System V UNIX, and such vendor derivatives as SunOS and ULTRIX, the book gives information that can be applied to any version of UNIX since Seventh Edition. Issues discussed include account and password security, securing the file system, encryption and authentication systems, TCP/IP network security, the Network Information Service (NIS), NFS, RFS, workstation security, terminals and modems, and UUCP. Other chapters describe how to respond if your system is attacked and how to develop a comprehensive security policy for your organization. The book also gives comprehensive lists of freely available security software, and publications and mailing lists dealing with UNIX security. "UNIX System Security should become popular among site administrators struggling to get a handle on security needs - especially since most vendor-specific manuals don't cover those well-known security 'holes' which can cause grief." -Dr. Dobb's Journal "David A. Curry's UNIX System Security: A Guide for Users and Administrators is highly recommended.This should end the morbid joke that UNIX Security books belong to the 'thin-book' category that includes The Dan Quayle Spell Checker and The Woody Allen Family Values Guide." -Stan Kelly-Bootle, UNIX Review "UNIX System Security: A Guide for Users and Administrators by David Curry, provides a comprehensive overview of key issues and offers practical advice for making UNIX systems more secure." -UniForum Monthly "UNIX System Security: A Guide for Users and Administrators by David A. Curry, presents a rigorous look at security issues on BDS 4 and Systme V Release 4, enlivened by references to four well-known security breakdowns from real life." -UNIXWorld "UNIX System Security is so clearly written that even some of the more complex topics become easy to understand, and there are sections that even the most inexperienced user will comprehend. Curry has provided an essential text in security for both the beginning and experienced user." -Sys Admin 0201563274B04062001

Table of Contents:
Preface. 1. UNIX Security Stories. The Internet Worm. The Wily Hacker. A True UNIX Trojan Horse. Attacking UNIX with Viruses. Summary. 2. Account Security. Passwords. Expiration Dates. Guest Accounts. Well-known Accounts. Group Accounts vs. Groups. Protecting an Account. Super-User. Monitoring Account Security. Summary. 3. File System Security. File Permissions. The umask Value. The write System Call. The Sticky Bit on Directories. The Set-Group-Id Bit on Directories. Set-User-Id and Set-Group-Id Shell Scripts. Devices. Backups. Monitoring File System Security. Summary. 4. Network Security. Trusted Hosts. The inetd Program. The File Transfer Protocol (FTP). Electronic Mail. Finger. Forgery and Spoofing. Network Configuration. Sophisticated Network Attacks. Monitoring Network Security. Summary. 5. NIS, NFS, and RFS. The Network Information Service (NIS). The Network File System (NFS). The Remote File Sharing Service (RFS). Summary. 6. Workstations. Single-User Mode. Super-User Access. Network Access. The PROM Monitor. Screen Access. Summary. 7. Terminals, Modems, and UUCP. Terminals. Dial-Up Modems. Terminal Servers. The UNIX-to-UNIX Copy Program (UUCP). Summary. 8. Responding to Attacks. Detection. Response. Notification. Summary. 9. Encryption and Authentication. Encryption. Authentication. Encrypting and Authenticating Electronic Mail. Summary. 10. Security Policies. Establishing Policies and Why. Access to the System. Password Policies. Proper Use. System Staff Rights and Responsibilities. Copyrights and Licenses. Ethics. Guidelines for the Secure Operation of the Internet. Summary. 11. Security Software. Obtaining Fixes and New Versions. Publicly Available Software. RSA Privacy-Enhanced Mail. The National Computer Security Center. Summary. 12. Obtaining Security Information. Computer Security Incident Response Capabilities. Forming a CSIRC. Vendor Security Notification. Mailing Lists. USENET Newsgroups. Suggested Reading. Summary. Glossary. References. Appendices. A Password Cracker. A File System Checker. Kerberos Dialogue. A Complete Security Policy. UNIX Security Checklist. Index. 0201563274T04062001

About the Author :
David A. Curry has been programming and administering UNIX systems since 1978. He has worked for the Research Institute for Advanced Computer Science, SRI International, and the Purdue University Engineering Computer Network. He currently serves as the Purdue Computer Emergency Response Team's representative to the Forum of Incident Response and Security Teams. 0201563274AB04062001