Practical UNIX Security - Feb 13, 1997

Sponsored by:

Presenters:

• Introduction
  • Overview
  • Why is security important
• Philosophy
  • Methodology
  • Risk Analysis
  • Trust
• The Enemy
  • Who is the enemy?
• Social Engineering
  • "Just type this, it's cool"
  • Accounts, the first barrier
• Physical Security
  • Keeping your console safe
  • Shoulder surfing
• Intelligence
  • Gathering Intel (not the chip)
• External threats
  • Sniffing
  • Denial of service
  • Wrappers - don't give them the chance
  • CGI attacks
  • Firewalls
• Internal threats
  • Permissions
  • Passwords
  • Shadows
  • Setuid programs
• Data Security
  • Authentication and Authorization
  • Encryption
  • Backups
• Detection
  • Auditing
  • Logging for keeps
  • Attack signatures
  • System integrity
  • Active countermeasures
• Campus Security
  • URHnet
  • Public Sites
• Common Vulnerabilities
  • X
  • Sendmail
  • Inetd
  • Library Attacks
  • NFS
  • rhosts
  • Buffer overflows
• Other resources
  • Book Recommendations
  • Papers
  • Links
• Other Workshops
  • Future Workshop Ideas
• Hacking Howto
  • Complete Hacking Algorithm