Security manual/books

[Edgar_8]

hi,

does anyone know where one could otain material pertatining to Unix security from?

Thanks,

[Pete Randall]

Edgar.

HP Publishing has several good references - try here:

http://www.phptr.com


HP's docs site has a whole security section:

http://www.docs.hp.com/hpux/internet/index.html


Finally, you can use the Forum's search to scan for technical documents and whitepapers on security:

http://us-support2.external.hp.com/emse/bin/doc.pl/sid=a83b38a8037d472d86?todo=search&searchtext=security&x=29&y=7&searchcriteria=allwords&searchtype=SEARCH_TECH_DOCS&searchcategory=ALL&rn=25&presort=rank


Pete

[Mark Grant]

This is quite a useful site

http://strc.comet.ucar.edu/unix/right.htm

[Pete Randall]

Edgar.

Here's a better URL for HP Publishing:

http://www.hp.com/hpbooks



Pete

[Cheryl Griffin]

Orielly's publication:
http://www.oreilly.com/catalog/puis/

Interex's collection:
http://www.interex.org/tech/security/security.html

HP's Security Whitepaper:
http://www.hp.com/products1/unix/operating/infolibrary/whitepapers/sec9906.pdf

11i Security collection:
http://www.hp.com/products1/unix/operating/security/

HP's Risk Management Services:
http://www.hp.com/hps/security/

[Kevin O'Donovan]

I got a book, "hp-ux 11i security", Prentice Hall, by Chris Wong.

Haven't spent as much time going through it as I'd like yet but it seems to cover quite a wide range of ways that someone can gain access to a machine.

You can find it on the hp.com and phptr links the other guys have above.

hope that helps,
Kevin.

[Jeff Schussele]

Hi Edgar,

HP Education uses the following manuals in it's Practical UNIX & Network Security class - H3541

Practical UNIX & Internet Security 2nd edition by Garfinkel & Spafford
and
Halting the Hacker by Donald Pipkin

But, I believe the 3rd edition of the first listed is now out & quite up-to-date. The 2nd edition is fairly out of date.

HTH,
Jeff

[GK_5]

For HPUX systems.

http://docs.hp.com/hpux/internet/index.html
http://www.hp.com/products1/unix/operating/security/index.html
http://www.software.hp.com/ISS_products_list.html

[Steven Sim Kok Leong]

Hi,

Personal favorites:

1) CERT/CC has a set of Unix security improvement modules:

http://www.cert.org/security-improvement/#unix

2) SANS Reading Room has a wonderful column specifically on Unix security:

http://www.sans.org/rr/catindex.php?cat_id=63

Hope this helps. Regards.

Steven Sim Kok Leong

[Joanne Keegan]

The book Kevin mentioned by Chris Wong is very good. I use in it my work.

Cheers,

Joanne

[Fragon]

Hi Edgar,
Here is a great eBook I get from HP:
<> (99k).

-ux

[Zeev Schultz]

Chris Wong's book is good. Especially liked Kerberos chapter.But it lacks SSH, though I saw on the Web ssh documentation by Chris. Probably to be included in the next edition.

Practical UNIX & Internet Security 2nd edition by Garfinkel & Spafford -- (or a newer edition is there) - 5 stars.

[Keith Bevan_1]

Edgar,

Many good reads are available depending on your os version.

I have HP/UX 11i and like the forementioned HP-UX 11i Security Book by Chris Wong.

Keith