Designing Security Architectures

a two day course developed by Bernie Dixon, CISSP, for Global Knowledge

Jim Pruitt's list of interesting Security sites
attrition.com solarwinds.net samspade.org l0pht.com
cert.org sans.org rootshell.com packetstorm.securify.com
nmrc.org first.org (questionable) 2600.com (dangerous!) anonymizer.com

Sites of interest mentioned in class 10/30 - 11/1
iss.netInternet Security Services, Christopher Klaus Internet Scanner, Firewall Scanner, Web Scanner
webattack.comThe world's largest collection of Internet Tools
zonelabs.comZone Labs’ ZoneAlarm, an outstanding personal firewall that’s highly effective and easy to use.
TripWire.com file integrity watcher: Tripwire HQ Connector Bundle for Windows NT v.4.0 (Includes Tripwire 2.2.1 and Tripwire HQ Agent), $595
TripWire.org file integrity watcher: open source mimic? of commercial product for Linux

CounterPane.com Bruce Schneier's Internet Security company and cryptography site. Follow the link to Counterpane Labs for white paper on Microsoft's PPTP.

TruSecure.com say it is the renamed ICSA.net, or International Computer Security Association. Interoperabilitiy, encryption certification. Certifies IPsec implementations @ $25,000, including Contivity ver 2.11 and soon ver 3.0
Trusecure also owns Information Security Magazine, Security Digest E-Letter, Microsoft NTBugtraq list.

VPNC.org VPN Consortium Certifies IPsec implementations @ $1,000; Nortel a member

Books
TitleAuthorcomment
Practical UNIX and Internet Security p 4-7
Hacking ExposedStuart McClure, Joel Scambray, George Kurtzp L2-10

tools from NetSec course
Tool NameCostDescription
winstrobe port scanner
John the Ripper password cracker
neptune SYN flooding attack "tool" - pick IP address, port to attack.
described at www.fc.net/phrack
Internet Scanner by ISS, scans a host for vulnerabilities
NetXRay packet analyzer
RealSecure by ISS? intrusion detection - monitors network segments in real-time.

also interesting


back to dkerr | back to Links


last updated 2-18-2002 dek