Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Index: C

C programming language

1.3. History of UNIX
23.2. Tips on Avoiding Security-related Bugs
-Wall compiler option : 23.2. Tips on Avoiding Security-related Bugs

C shell : (see csh)

C2 audit : 10.1. The Basic Log Files

cables, network

12.2.4.2. Network cables
12.3.1.5. Fiber optic cable
cutting : 25.1. Destructive Attacks
tampering detectors for : 12.3.1.1. Wiretapping
wiretapping : 12.3.1.1. Wiretapping

cache, nameserver : 16.3.2. Security and Nameservice

caching : 5.6. Device Files

Caesar Cipher : 6.4.3. ROT13: Great for Encoding Offensive Jokes

calculating costs of losses : 2.3.1. The Cost of Loss

call forwarding : 14.5.4. Physical Protection of Modems

Call Trace : 24.2.4. Tracing a Connection

CALLBACK= command : 15.5.2. Permissions Commands

callbacks

14.4.2.
14.6. Additional Security for Modems
BNU UUCP : 15.5.2. Permissions Commands
Version 2 UUCP : 15.4.1.5. Requiring callback

Caller-ID (CNID)

14.4.3. Caller-ID (CNID)
14.6. Additional Security for Modems
24.2.4. Tracing a Connection

Canada, export control in : 6.7.2. Cryptography and Export Controls

carbon monoxide : 12.2.1.2. Smoke

caret (^) in encrypted messages : 6.2. What Is Encryption?

case in usernames : 3.1. Usernames

cat command

3.2.2. The /etc/passwd File and Network Databases
15.4.3. L.cmds: Providing Remote Command Execution
-ve option : 5.5.4.1. The ncheck command
-v option : 24.4.1.7. Hidden files and directories

cat-passwd command : 3.2.2. The /etc/passwd File and Network Databases

CBC (cipher block chaining)

6.4.4.2. DES modes
6.6.2. des: The Data Encryption Standard

CBW (Crypt Breaker's Workbench) : 6.6.1.1. The crypt program

CCTA IT Security & Infrastructure Group : F.3.4.39. UK: other government departments and agencies

CD-ROM : 9.1.2. Read-only Filesystems

CDFs (context-dependent files)

5.9.2. Context-Dependent Files
24.4.1.7. Hidden files and directories

ceilings, dropped : 12.2.3.1. Raised floors and dropped ceilings

cellular telephones : 12.2.1.8. Electrical noise

CERCUS (Computer Emergency Response Committee for Unclassified Systems) : F.3.4.36. TRW network area and system administrators

Cerf, Vint : 16.2. IPv4: The Internet Protocol Version 4

CERN : E.4.1. CERN HTTP Daemon

CERT (Computer Emergency Response Team)

6.5.2. Using Message Digests
27.3.5. Response Personnel?
F.3.4.1. All Internet sites
CERT-NL (Netherlands) : F.3.4.25. Netherlands: SURFnet-connected sites
mailing list for : E.1.3.4. CERT-advisory

CFB (cipher feedback) : 6.4.4.2. DES modes

CGI (Common Gateway Interface) : 18.1. Security and the World Wide Web

scripts

18.2. Running a Secure Server
18.2.3. Writing Secure CGI Scripts and Programs
18.2.4.1. Beware mixing HTTP with anonymous FTP

cgi-bin directory : 18.2.2. Understand Your Server's Directory Structure

chacl command : 5.2.5.2. HP-UX access control lists

-f option : 5.2.5.2. HP-UX access control lists
-r option : 5.2.5.2. HP-UX access control lists

change detection

9.2. Detecting Change
9.3. A Final Note

character devices : 5.6. Device Files

chat groups, harassment via : 26.4.7. Harassment, Threatening Communication, and Defamation

chdir command

23.2. Tips on Avoiding Security-related Bugs
25.2.2.8. Tree-structure attacks

checklists for detecting changes

9.2.2. Checklists and Metadata
9.2.3. Checksums and Signatures

checksums

6.5.5.1. Checksums
9.2.3. Checksums and Signatures

Chesson, Greg : 15.2. Versions of UUCP

chfn command : 8.2. Monitoring File Format

chgrp command : 5.8. chgrp: Changing a File's Group

child processes : C.2. Creating Processes

chkey command : 19.3.1.1. Proving your identity

chmod command

5.2.1. chmod: Changing a File's Permissions
5.2.4. Using Octal File Permissions
8.3. Restricting Logins
-A option : 5.2.5.2. HP-UX access control lists
-f option : 5.2.1. chmod: Changing a File's Permissions
-h option : 5.2.1. chmod: Changing a File's Permissions
-R option : 5.2.1. chmod: Changing a File's Permissions

chokes : (see firewalls)

chown command

5.7. chown: Changing a File's Owner
23.2. Tips on Avoiding Security-related Bugs

chroot system call

8.1.5. Restricted Filesystem
8.1.5.2. Checking new software
11.1.4. Trojan Horses
23.4.1. Using chroot()
with anonymous FTP : 17.3.2.6. Setting up anonymous FTP with the standard UNIX FTP server

chrootuid daemon : E.4.2. chrootuid

chsh command : 8.7.1. Integrating One-time Passwords with UNIX

CIAC (Computer Incident Advisory Capability) : F.3.4.43. U.S. Department of Energy sites, Energy Sciences Network (ESnet), and DOE contractors

CIDR (Classless InterDomain Routing)

16.2.1.1. IP networks
16.2.1.3. CIDR addresses

cigarettes : 12.2.1.2. Smoke

cipher

6.4.3. ROT13: Great for Encoding Offensive Jokes

(see also cryptography; encryption)

block chaining (CBC)

6.4.4.2. DES modes
6.6.2. des: The Data Encryption Standard

ciphertext

6.2. What Is Encryption?
8.6.1. The crypt() Algorithm

feedback (CFB) : 6.4.4.2. DES modes

CISCO : F.3.4.8. CISCO Systems

civil actions (lawsuits) : 26.3. Civil Actions

classified data and breakins

26.1. Legal Options After a Break-in
26.2.2. Federal Jurisdiction

Classless InterDomain Routing (CIDR)

16.2.1.1. IP networks
16.2.1.3. CIDR addresses

clear text : 8.6.1. The crypt() Algorithm

Clear to Send (CTS) : 14.3. The RS-232 Serial Protocol

client flooding : 16.3.2. Security and Nameservice

client/server model : 16.2.5. Clients and Servers

clients, NIS : (see NIS)

clock, system

5.1.5. File Times
17.3.14. Network Time Protocol (NTP) (UDP Port 123)
for random seeds : 23.8. Picking a Random Seed
resetting : 9.2.3. Checksums and Signatures
Secure RPC timestamp : 19.3.1.3. Setting the window

clogging : 25.3.4. Clogging

CMW (Compartmented-Mode Workstation) : "Secure" Versions of UNIX

CNID (Caller-ID)

14.4.3. Caller-ID (CNID)
14.6. Additional Security for Modems
24.2.4. Tracing a Connection

CO2 system (for fires) : 12.2.1.1. Fire

COAST (Computer Operations, Audit, and Security Technology)

E.3.2. COAST
E.4. Software Resources

code breaking : (see cryptography)

codebooks : 8.7.3. Code Books

CodeCenter : 23.2. Tips on Avoiding Security-related Bugs

cold, extreme : 12.2.1.6. Temperature extremes

command shells : (see shells)

commands

8.1.3. Accounts That Run a Single Command

(see also under specific command name)

accounts running single : 8.1.3. Accounts That Run a Single Command

in addresses : 15.7. Early Security Problems with UUCP

editor, embedded : 11.5.2.7. Other initializations

remote execution of

15.1.2. uux Command
15.4.3. L.cmds: Providing Remote Command Execution
17.3.17. rexec (TCP Port 512)

running simultaneously

23.2. Tips on Avoiding Security-related Bugs
(see also multitasking)

commands in <Directory> blocks : 18.3.2. Commands Within the <Directory> Block

COMMANDS= command : 15.5.2. Permissions Commands

commenting out services : 17.3. Primary UNIX Network Services

comments in BNU UUCP : 15.5.1.3. A Sample Permissions file

Common Gateway Interface : (see CGI)

communications

modems : (see modems)
national telecommunications : 26.2.2. Federal Jurisdiction
threatening : 26.4.7. Harassment, Threatening Communication, and Defamation

comparison copies

9.2.1. Comparison Copies
9.2.1.3. rdist

compress program : 6.6.1.2. Ways of improving the security of crypt

Compressed SLIP (CSLIP) : 16.2. IPv4: The Internet Protocol Version 4

Computer Emergency Response Committee for Unclassified Systems (CERCUS) : F.3.4.36. TRW network area and system administrators

Computer Emergency Response Team : (see CERT)

Computer Incident Advisory Capability (CIAC) : F.3.4.43. U.S. Department of Energy sites, Energy Sciences Network (ESnet), and DOE contractors

computer networks : 1.4.3. Add-On Functionality Breeds Problems

Computer Security Institute (CSI) : F.1.3. Computer Security Institute (CSI)

computers

assigning UUCP name : 15.5.2. Permissions Commands

auxiliary ports : 12.3.1.4. Auxiliary ports on terminals

backing up individual : 7.2.1. Individual Workstation

contacting administrator of : 24.2.4.2. How to contact the system administrator of a computer you don't know

cutting cables to : 25.1. Destructive Attacks

failure of : 7.1.1.1. A taxonomy of computer failures

hostnames for

16.2.3. Hostnames
16.2.3.1. The /etc/hosts file

modems : (see modems)

multiple screens : 12.3.4.3. Multiple screens

multiple suppliers of : 18.6. Dependence on Third Parties

non-citizen access to : 26.4.1. Munitions Export

operating after breakin : 24.6. Resuming Operation

portable : 12.2.6.3. Portables

remote command execution : 17.3.17. rexec (TCP Port 512)

running NIS+ : 19.5.5. NIS+ Limitations

screen savers : 12.3.5.2. X screen savers

security

culture of : D.1.10. Understanding the Computer Security "Culture"
four steps toward : 2.4.4.7. Defend in depth
physical : 12.2.6.1. Physically secure your computer
references for : D.1.7. General Computer Security
resources on : D.1.1. Other Computer References

seized as evidence : 26.2.4. Hazards of Criminal Prosecution

transferring files between : 15.1.1. uucp Command

trusting

27.1. Can you Trust Your Computer?
27.1.3. What the Superuser Can and Cannot Do

unattended

12.3.5. Unattended Terminals
12.3.5.2. X screen savers

unplugging : 24.2.5. Getting Rid of the Intruder

vacuums for : 12.2.1.3. Dust

vandalism of : (see vandalism)

virtual : (see Telnet utility)

computing base (TCB) : 8.5.3.2. Trusted computing base

conf directory : 18.2.2.1. Configuration files

conf/access.conf : (see access.conf file)
conf/srm.conf file : 18.3.1. The access.conf and .htaccess Files

confidentiality : (see encryption; privacy)

configuration

errors : 9.1. Prevention

files : 11.5.3. Abusing Automatic Mechanisms

logging : 10.7.2.2. Informational material
MCSA web server : 18.2.2.1. Configuration files
UUCP version differences : 15.2. Versions of UUCP

simplifying management of : 9.1.2. Read-only Filesystems

connections

hijacking : 16.3. IP Security

laundering : 16.1.1.1. Who is on the Internet?

tracing

24.2.4. Tracing a Connection
24.2.4.2. How to contact the system administrator of a computer you don't know

unplugging : 24.2.5. Getting Rid of the Intruder

connectors, network : 12.2.4.3. Network connectors

consistency of software : 2.1. Planning Your Security Needs

console device : 5.6. Device Files

CONSOLE variable : 8.5.1. Secure Terminals

constraining passwords : 8.8.2. Constraining Passwords

consultants : 27.3.4. Your Consultants?

context-dependent files (CDFs)

5.9.2. Context-Dependent Files
24.4.1.7. Hidden files and directories

control characters in usernames : 3.1. Usernames

cookies

17.3.21.4. Using Xauthority magic cookies
18.2.3.1. Do not trust the user's browser!

COPS (Computer Oracle and Password System)

19.5.5. NIS+ Limitations
E.4.3. COPS (Computer Oracle and Password System)

copyright

9.2.1. Comparison Copies
26.4.2. Copyright Infringement
26.4.2.1. Software piracy and the SPA
notices of : 26.2.6. Other Tips

CORBA (Common Object Request Broker Architecture) : 19.2. Sun's Remote Procedure Call (RPC)

core files

23.2. Tips on Avoiding Security-related Bugs
C.4. The kill Command

cost-benefit analysis

2.3. Cost-Benefit Analysis
2.3.4. Convincing Management

costs of losses : 2.3.1. The Cost of Loss

cp command : 7.4.1. Simple Local Copies

cpio program

7.3.2. Building an Automatic Backup System
7.4.2. Simple Archives

crack program

8.8.3. Cracking Your Own Passwords
18.3.3. Setting Up Web Users and Passwords

cracking

backing up because of : 7.1.1.1. A taxonomy of computer failures

passwords

3.6.1. Bad Passwords: Open Doors
3.6.4. Passwords on Multiple Machines
8.6.1. The crypt() Algorithm
8.8.3. Cracking Your Own Passwords
8.8.3.2. The dilemma of password crackers
17.3.3. TELNET (TCP Port 23)
logging failed attempts : 10.5.3. syslog Messages

responding to

24. Discovering a Break-in
24.7. Damage Control

using rexecd : 17.3.17. rexec (TCP Port 512)

crashes, logging : 10.7.2.1. Exception and activity reports

CRC checksums : (see checksums)

Cred table (NIS+) : 19.5.3. NIS+ Tables

criminal prosecution

26.2. Criminal Prosecution
26.2.7. A Final Note on Criminal Actions

cron file

9.2.2.1. Simple listing
11.5.1.4. Filename attacks
11.5.3.1. crontab entries
automating backups : 7.3.2. Building an Automatic Backup System
cleaning up /tmp directory : 25.2.4. /tmp Problems
collecting login times : 10.1.1. lastlog File
symbolic links in : 10.3.7. Other Logs
system clock and : 17.3.14. Network Time Protocol (NTP) (UDP Port 123)
uucp scripts in : 15.6.2. Automatic Execution of Cleanup Scripts

crontab file : 15.6.2. Automatic Execution of Cleanup Scripts

Crypt Breaker's Workbench (CBW) : 6.6.1.1. The crypt program

crypt command/algorithm

6.4.1. Summary of Private Key Systems
6.6.1. UNIX crypt: The Original UNIX Encryption Command
6.6.1.3. Example
8.6. The UNIX Encrypted Password System
18.3.3. Setting Up Web Users and Passwords

crypt function

8.6. The UNIX Encrypted Password System
8.6.1. The crypt() Algorithm
8.8.7. Algorithm and Library Changes
23.5. Tips on Using Passwords

crypt16 algorithm : 8.6.4. Crypt16() and Other Algorithms

cryptography

6. Cryptography

6.7.2. Cryptography and Export Controls

14.4.4.2. Protection against eavesdropping

checklist for : A.1.1.5. Chapter 6: Cryptography

checksums : 6.5.5.1. Checksums

digital signatures : (see digital signatures)

export laws concerning : 6.7.2. Cryptography and Export Controls

Message Authentication Codes (MACs) : 6.5.5.2. Message authentication codes

message digests : (see message digests)

PGP : (see PGP)

private-key

6.4. Common Cryptographic Algorithms
6.4.1. Summary of Private Key Systems

public-key

6.4. Common Cryptographic Algorithms
6.4.2. Summary of Public Key Systems
6.4.6. RSA and Public Key Cryptography
6.4.6.3. Strength of RSA
6.5.3. Digital Signatures
18.3. Controlling Access to Files on Your Server
18.6. Dependence on Third Parties

references on : D.1.5. Cryptography Books

and U.S. patents : 6.7.1. Cryptography and the U.S. Patent System

csh (C shell)

5.5.2. Problems with SUID
11.5.1. Shell Features
23.2. Tips on Avoiding Security-related Bugs
C.5.3. Running the User's Shell
(see also shells)
autologout variable : 12.3.5.1. Built-in shell autologout
history file : 10.4.1. Shell History
uucp command : 15.1.1.1. uucp with the C shell

.cshrc file

11.5.2.2. .cshrc, .kshrc
12.3.5.1. Built-in shell autologout
24.4.1.6. Changes to startup files

CSI (Computer Security Institute) : F.1.3. Computer Security Institute (CSI)

CSLIP (Compressed SLIP) : 16.2. IPv4: The Internet Protocol Version 4

ctime

5.1.2. Inodes
5.1.5. File Times
5.2.1. chmod: Changing a File's Permissions
7.4.7. inode Modification Times
9.2.3. Checksums and Signatures

cu command

14.5. Modems and UNIX
14.5.3.1. Originate testing
14.5.3.3. Privilege testing
-l option : 14.5.3.1. Originate testing

culture, computer security : D.1.10. Understanding the Computer Security "Culture"

current directory : 5.1.3. Current Directory and Paths

Customer Warning System (CWS) : F.3.4.34. Sun Microsystems customers

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z