A Guide to Linux Security

The web pages related to security updates for several of the Linux distributions:

• Caldera's OpenLinux: http://support.calderasystems.com/caldera?faq&15-10
• SuSE: http://www.suse.de/security/
• Red Hat: http://www.redhat.com/corp/support/errata/index.html
• Mandrake: http://www.linux-mandrake.com/en/fupdates.php3
• Debian: http://www.debian.org/security/

Mailing lists:

• BUGTRAQ: http://www.securityfocus.com/forums/bugtraq/faq.html
• XForce: http://xforce.iss.net/
• CERT: http://www.cert.org/contact_cert/certmaillist.html
• IDS (Intrusion Detection Systems): http://xforce.iss.net/maillists/

Writing More Secure Programs:

• Strcpy and You: http://www.codetalker.com/whitepapers/bugme1.html
• A Safer strncpy(): (local copy)
• Secure Programming FAQ: http://www.whitefang.com/sup/
• Designing Secure Software (Sunworld Article): http://www.sunworld.com/swol-04-1998/swol-04-security.html
• Security Code Review Guidelines: http://www.homeport.org/~adam/review.html
• How to find security holes: http://www.dnaco.net/~kragen/security-holes.html

Web Sites:

• Security Focus: http://www.securityfocus.com
• Security Portal: http://www.securityportal.com
• Packetstorm Security: -- currently down
• OpenSec: http://www.opensec.net
• Trinux Project: http://www.trinux.org
• The Linux Security HOWTO: http://metalab.unc.edu/LDP/HOWTO/Security-HOWTO.html
• CERT: http://www.cert.org
• CERIAS: http://www.cerias.purdue.edu
• freshmeat: http://freshmeat.net
• This site: http://www.nwo.net/security
• Rootshell: http://www.rootshell.com
• Technotronic: http://www.technotronic.com
• Attrition: http://www.attrition.org
• Help Net Security: http://net-security.org/
• Phrack: http://www.phrack.com

Books:

• Practical UNIX and Internet Security (Second Edition): Simson Garfinkel and Gene Spafford. Pub. 1996 (second edition) by O'Reilly and Associates, Sebastopol, CA. ISBN 1-56592-148-8.
• The UNIX System Administration Handbook (Second Edition): Evi Nemeth, Garth Snyder, Scott Seebass, and Trent R. Hein. Pub. 1995 (second edition) by Prentice Hall, Inc., Upper Saddle River, NJ. ISBN 0-13-151051-7.
• Essential Systems Administration (Second Edition): Aeleen Frisch. Pub. 1996 (second edition) by O'Reilly and Associates, Sebastopol, CA. ISBN 1-56592-127-5
• Building Internet Firewalls: D. Brent Chapman and Elizabeth Zwicky. Pub. 1995 by O'Reilly and Associates, Sebastopol, CA. ISBN 1-56592-124-0
• Firewalls and Internet Security : Repelling the Wily Hacker: William R. Cheswick, Steven M. Bellovin. Pub. 1994 by Addison-Wesley Pub Co. ISBN: 0-20-163357-4.