Book Home

Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Index: C

Cache Array Routing Protocol (CARP): 15.5.2. Cache Array Routing Protocol (CARP)

caching proxies: 15.3.4. Proxying Characteristics of HTTP

15.5. Cache Communication Protocols

capturing intruders: 27.3. Pursuing and Capturing the Intruder

CARP (Cache Array Routing Protocol): 15.5.2. Cache Array Routing Protocol (CARP)

catastrophe logs: 10.9.4.2. System logs for catastrophes

on Unix: 11.2.1.2. System logs for catastrophe

CD-ROM drive: 10.3.3. What Hardware Configuration?

CERIAS: A.1.2. CERIAS

A.2.1. cerias.purdue.edu

CERT advisories mailing list: A.3.6. CERT-Advisory

CERT-CC (Computer Emergency Response Team Coordination Center)

FAQ: A.5.1. CERT-CC

response teams: 27.4.4.2. CERT-CC and other incident response teams

A.2.2. info.cert.org
contacting regarding incident: 27.1.5.2. CERT-CC or other incident response teams

certificate authority: C.3.2. Certificates

Certificate Revocation List (CRL): C.3.2. Certificates

CGI scripts: 15.1.1. HTTP Extensions

challenge-response system: 21.1.2. Something You Know

chargen service: 22.7. Mostly Harmless Protocols

checksums

keeping secure: 27.5.3. Keeping Secured Checksums
using Tripwire for: 11.6. Running a Security Audit

choke points: 3.3. Choke Point

24.1.4.3. Choke point
24.2.4.3. Choke point
using routers as: 8.1. What Can You Do with Packet Filtering?

choke router (see interior router)

chroot mechanism: 11. Unix and Linux Bastion Hosts

17.1.4.1. Limiting access to information

chrootuid program: B.6.3. chrootuid

CIFS (Common Internet File System): 2.4.2. File Sharing

14.4. Common Internet File System (CIFS) and Server Message Block (SMB)
14.4. Common Internet File System (CIFS) and Server Message Block (SMB)
17.4. File Sharing for Microsoft Networks

ciphertext: C.2.1. Encryption

circuit-level proxy servers: 9.3.1. Application-Level Versus Circuit-Level Proxies

Cisco routers: 8.5. Conventions for Packet Filtering Rules

client

authentication, network lesystems and: 2.4.2. File Sharing

DNS, configuring: 20.1.5.3. Internal DNS clients query the internal server

false authentication of: 13.1.4. False Authentication of Clients

13.1.10. Protecting Services

HTTP, security of: 15.2. HTTP Client Security

NFS: 17.3.3. NFS Client Vulnerabilities

port numbers: 13. Internet Services and Firewalls

RPC-based: 14.1. Remote Procedure Call (RPC)

software

converting to use SOCKS: 9.5.4. Converting Clients to Use SOCKS
for proxying: 9.2.1. Using Proxy-Aware Application Software for Proxying

SSH, authentication: 18.2.5.3. SSH client authentication

clocks

configuring: 22.5. Network Time Protocol (NTP)
setting: 2.9.4. Time Service

COAST FTP archive: A.1.2. CERIAS

code, publicly available: 13.5.1.1. It contains no publicly available code, so it's secret

command-channel attacks: 13.1.1. Command-Channel Attacks

protecting against: 13.1.10. Protecting Services

command execution: 2.5.1. Remote Terminal Access and Command Execution

command-line arguments: 13.2.3. How Well Is the Protocol Implemented?

Common Internet File System (see CIFS)

14.4. Common Internet File System (CIFS) and Server Message Block (SMB)

Common Object Request Broker Architecture (see CORBA)

Computer Emergency Response Team Coordination Center (see CERT-CC)

computer games: 23.2. Games

Computer Security Resource Clearinghouse (CSRC): A.5.3. NIST CSRC

computer viruses: 1.5.2.4. A firewall can't fully protect against viruses

conferences, security-related: A.7. Conferences

conferencing services, real-time: 2.6. Real-Time Conferencing Services

19. Real-Time Conferencing Services

configuring

audit packages: 10.10.7.1. Auditing packages

11.6. Running a Security Audit

clocks: 22.5. Network Time Protocol (NTP)

DNS: 24.2.1.7. DNS

clients: 20.1.5.3. Internal DNS clients query the internal server
in screened subnet architecture: 24.1.1.7. DNS

exterior routers: 24.1.2.2. Exterior router

FTP, in screened subnet architecture: 24.1.1.5. FTP

hardware: 10.3.3. What Hardware Configuration?

HTTP/HTTPS: 24.2.1.1. HTTP and HTTPS

in screened subnet architecture: 24.1.1.1. HTTP and HTTPS

interior routers: 24.1.2.1. Interior router

kernel: 11.5.1. Reconfigure and Rebuild the Kernel

labeling system: 27.5.2. Labeling and Diagramming Your System

machine: 10.10.6. Reconfiguring for Production

Unix: 11.5. Reconfiguring for Production

NIS (Network Information Service): 20.2. Network Information Service (NIS)

NNTP: 24.2.1.6. NNTP

in screened subnet architecture: 24.1.1.6. NNTP

packet filtering router: 8.2. Configuring a Packet Filtering Router

SMTP: 24.2.1.2. SMTP

with firewalls: 16.2.6. Configuring SMTP to Work with a Firewall
in screened subnet architecture: 24.1.1.2. SMTP

SSH, in screened subnet architecture: 24.1.1.4. SSH

Telnet, in screened subnet architecture: 24.1.1.3. Telnet

connections

between Internet and unbuilt bastion host: 10.8. Building a Bastion Host

checking network (see ping)

disconnecting: 27.1.3. Disconnect or Shut Down, as Appropriate

27.4.3. Planning for Disconnecting or Shutting Down Machines

killed by TCP: 4.3.1. TCP

multiple Internet: 6.5.6. It's OK to Use Multiple Exterior Routers

outbound: 5.4.1.1. Network address translation helps to enforce the firewall's control over outbound connections

per session: 13.4.2. One Connection per Session

content filtering: 15.2.4. What Can You Do?

of email: 16.1.2.2. Viruses and other hostilities

cookies: 15.2.1.1. Cookies

COPS (Computer Oracle and Password System): B.2.1. COPS

auditing package: 11.6. Running a Security Audit

CORBA (Common Object Request Broker Architecture): 14.5. Common Object Request Broker Architecture (CORBA) and Internet Inter-Orb Protocol (IIOP)

crashes, system: 10.12.1. Watch Reboots Carefully

CRC (cyclic redundancy counter): 11.6. Running a Security Audit

CRL (Certificate Revocation List): C.3.2. Certificates

cron process: 11.3.3. Which Services Should You Leave Enabled?

crypt program: 10.10.1.1. Next steps after disabling services

cryptographic

checksums: 10.10.7.2. Use cryptographic checksums for auditing

11.6. Running a Security Audit
C.2.2. Cryptographic Hashes, Checksums, and Message Digests

hashes: C.2.2. Cryptographic Hashes, Checksums, and Message Digests

keys

distribution of: C.3.4. Key Distribution and Exchange
size and strength of: C.5.5. Key Sizes and Strength

systems, components of: C.2. Key Components of Cryptographic Systems

cryptography: C. Cryptography

C. Cryptography

in SSL: 14.7.2. Cryptography in TLS and SSL

in TLS: 14.7.2. Cryptography in TLS and SSL

certificates: C.3.2. Certificates

trust models of: C.3.3. Certificate Trust Models

digital signatures: C.3.1. Digital Signatures

public key: C.2.1.1. Kinds of encryption algorithms

C.4.3. Sharing a Secret

random numbers: C.2.4. Random Numbers

Secure RPC and: 14.1.1. Sun RPC Authentication

CSRC (Computer Security Resource Clearinghouse): A.5.3. NIST CSRC

custom

client software for proxying: 9.2.1. Using Proxy-Aware Application Software for Proxying
system: 27.1.7. Restore and Recover
user procedures for proxying: 9.2.3. Using Proxy-Aware User Procedures for Proxying

cyclic redundancy counter (CRC): 11.6. Running a Security Audit

Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z