Practical Unix and Internet Security

By: Simson Garfinkel

Write A Review

Paperback | 7 March 2003 | Edition Number 3

Sorry, we are not able to source the book you are looking for right now.

We did a search for other books with a similar title, however there were no matches. You can try selecting from a similar category, click on the author's name, or use the search box above to find your book.

This new edition of Practical UNIX and Internet Security provides detailed coverage of modern security and networking issues. It focuses on the four most popular Unix variants: Solaris, Linux, FreeBSD, and Mac OS X. It covers: computer security basics - introduction to security problems and solutions, Unix history and lineage, and the importance of security policies as a basic element of system security; security building blocks: fundamentals of Unix passwords, users, groups, the Unix file system, cryptography, physical security, and personnel security; network security - a detailed look at modem and dialup security, TCP/IP, securing individual network services, Sun's RPC, various host and network authentication systems (e.g., NIS, NIS+, and Kerberos), NFS and other file systems, and the importance of secure programming; secure operations - keeping up to date in today's changing security world, backups, defending against attacks, performing integrity management, and auditing; and incidents - discovering a break-in, dealing with programmed threats and denial of service attacks, and legal aspects of computer security. The book also includes a variety of helpful appendixes, including a comprehensive security checklist and a detailed bibliography of paper and electronic references for further reading and research. In addition to bringing the entire book up to date, the authors have added far more information about Linux, security policy, and cryptography, and have added new sections on embedded systems, biometrics, additional Internet protocols, new authentication systems such as LDAP and PAM, and anti-theft technologies. Packed with 1000 pages of helpful text, scripts, tips, and warnings, this third edition should be a useful reference for Unix administrators and anyone concerned about keeping their systems and networks secure.

Industry Reviews

"It's almost impossible to criticize such a venerable work as this, and there can be little doubt that backed up by online resources, this will form a solid foundation and reference work for years to come." - Martin Howse, LinuxUser & Developer, Issue 30 "If you know nothing about Linux security, and only have time for one book, you should start with Practical Unix and Internet Security." - Charlie Stross, Linux Format, September

Shipping

	Standard Shipping	Express Shipping
Metro postcodes:	$9.99	$14.95
Regional postcodes:	$9.99	$14.95
Rural postcodes:	$9.99	$14.95

Orders over $89.00 qualify for free shipping.

How to return your order

At Booktopia, we offer hassle-free returns in accordance with our returns policy. If you wish to return an item, please get in touch with Booktopia Customer Care.

Additional postage charges may be applicable.

Defective items

If there is a problem with any of the items received for your order then the Booktopia Customer Care team is ready to assist you.

For more info please visit our Help Centre.

You Can Find This Book In

Non-Fiction Computing & I.T.Operating Systems UNIX Computer Networking & Communications Network Security Computer Security Data Encryption Digital Lifestyle & Online World: Consumer & User Guides Internet Guides & Online Services Computer Programming & Software Development Booktopia Publisher Services

John Wiley & Sons Publishers UK

Preface	p. xiii
Computer Security Basics
Introduction: Some Fundamental Questions	p. 3
What Is Computer Security?	p. 5
What Is an Operating System?	p. 6
What Is a Deployment Environment?	p. 8
Unix History and Lineage	p. 11
History of Unix	p. 12
Security and Unix	p. 23
Role of This Book	p. 30
Policies and Guidelines	p. 32
Planning Your Security Needs	p. 33
Risk Assessment	p. 35
Cost-Benefit Analysis and Best Practices	p. 38
Policy	p. 45
Compliance Audits	p. 53
Outsourcing Options	p. 54
The Problem with Security Through Obscurity	p. 61
Security Building Blocks
Users, Passwords, and Authentication	p. 67
Logging in with Usernames and Passwords	p. 68
The Care and Feeding of Passwords	p. 76
How Unix Implements Passwords	p. 82
Network Account and Authorization Systems	p. 91
Pluggable Authentication Modules (PAM)	p. 94
Users, Groups, and the Superuser	p. 98
Users and Groups	p. 98
The Superuser (root)	p. 105
The su Command: Changing Who You Claim to Be	p. 109
Restrictions on the Superuser	p. 117
Filesystems and Security	p. 122
Understanding Filesystems	p. 122
File Attributes and Permissions	p. 127
chmod: Changing a File's Permissions	p. 136
The umask	p. 142
SUID and SGID	p. 145
Device Files	p. 155
Changing a File's Owner or Group	p. 157
Cryptography Basics	p. 161
Understanding Cryptography	p. 161
Symmetric Key Algorithms	p. 169
Public Key Algorithms	p. 180
Message Digest Functions	p. 187
Physical Security for Servers	p. 194
Planning for the Forgotten Threats	p. 194
Protecting Computer Hardware	p. 197
Preventing Theft	p. 211
Protecting Your Data	p. 216
Story: A Failed Site Inspection	p. 226
Personnel Security	p. 230
Background Checks	p. 231
On the Job	p. 233
Departure	p. 236
Other People	p. 237
Network and Internet Security
Modems and Dialup Security	p. 241
Modems: Theory of Operation	p. 242
Modems and Security	p. 246
Modems and Unix	p. 257
Additional Security for Modems	p. 265
TCP/IP Networks	p. 267
Networking	p. 267
IP: The Internet Protocol	p. 271
IP Security	p. 290
Securing TCP and UDP Services	p. 305
Understanding Unix Internet Servers and Services	p. 306
Controlling Access to Servers	p. 314
Primary Unix Network Services	p. 329
Managing Services Securely	p. 389
Putting It All Together: An Example	p. 399
Sun RPC	p. 407
Remote Procedure Call (RPC)	p. 408
Secure RPC (AUTH_DES)	p. 411
Network-Based Authentication Systems	p. 421
Sun's Network Information Service (NIS)	p. 422
Sun's NIS+	p. 431
Kerberos	p. 438
LDAP	p. 447
Other Network Authentication Systems	p. 453
Network Filesystems	p. 456
Understanding NFS	p. 457
Server-Side NFS Security	p. 468
Client-Side NFS Security	p. 473
Improving NFS Security	p. 474
Some Last Comments on NFS	p. 483
Understanding SMB	p. 485
Secure Programming Techniques	p. 498
One Bug Can Ruin Your Whole Day...	p. 498
Tips on Avoiding Security-Related Bugs	p. 505
Tips on Writing Network Programs	p. 514
Tips on Writing SUID/SGID Programs	p. 516
Using chroot()	p. 519
Tips on Using Passwords	p. 520
Tips on Generating Random Numbers	p. 522
Secure Operations
Keeping Up to Date	p. 533
Software Management Systems	p. 533
Updating System Software	p. 538
Backups	p. 544
Why Make Backups?	p. 545
Backing Up System Files	p. 561
Software for Backups	p. 565
Defending Accounts	p. 571
Dangerous Accounts	p. 571
Monitoring File Format	p. 583
Restricting Logins	p. 584
Managing Dormant Accounts	p. 586
Protecting the root Account	p. 591
One-Time Passwords	p. 595
Administrative Techniques for Conventional Passwords	p. 600
Intrusion Detection Systems	p. 613
Integrity Management	p. 616
The Need for Integrity	p. 616
Protecting Integrity	p. 618
Detecting Changes After the Fact	p. 622
Integrity-Checking Tools	p. 630
Auditing, Logging, and Forensics	p. 641
Unix Log File Utilities	p. 642
Process Accounting: The acct/pacct File	p. 664
Program-Specific Log Files	p. 666
Designing a Site-Wide Log Policy	p. 670
Handwritten Logs	p. 673
Managing Log Files	p. 676
Unix Forensics	p. 677
Handling Security Incidents
Discovering a Break-in	p. 683
Prelude	p. 683
Discovering an Intruder	p. 686
Cleaning Up After the Intruder	p. 700
Case Studies	p. 713
Protecting Against Programmed Threats	p. 734
Programmed Threats: Definitions	p. 735
Damage	p. 746
Authors	p. 747
Entry	p. 749
Protecting Yourself	p. 750
Preventing Attacks	p. 762
Denial of Service Attacks and Solutions	p. 767
Types of Attacks	p. 767
Destructive Attacks	p. 769
Overload Attacks	p. 769
Network Denial of Service Attacks	p. 787
Computer Crime	p. 795
Your Legal Options After a Break-in	p. 795
Criminal Hazards	p. 801
Criminal Subject Matter	p. 805
Who Do You Trust?	p. 811
Can You Trust Your Computer?	p. 811
Can You Trust Your Suppliers?	p. 815
Can You Trust People?	p. 823
Appendixes
Unix Security Checklist	p. 831
Unix Processes	p. 850
Paper Sources	p. 873
Electronic Resources	p. 883
Organizations	p. 896
Index	p. 907
Table of Contents provided by Ingram. All Rights Reserved.

Practical Unix and Internet Security

Industry Reviews

Shipping

How to return your order

Defective items

You Can Find This Book In

More in Network Security

The New Age of Sexism

How the AI Revolution is Reinventing Misogyny

Cyber Defense

Advanced Strategies and Techniques to Stay Ahead of the Cyber Threats Curve

Security Standardisation Research

10th International Conference, SSR 2025, Passau, Germany, December 4â"5, 2025, Proceedings

Dark Wire

The Incredible True Story of the Largest Sting Operation Ever

The New Age of Sexism

How the AI Revolution is Reinventing Misogyny

ISC2 CISSP Certified Information Systems Security Professional Official Study Guide & Practice Tests Bundle

Sybex Study Guide

Cybersecurity All-in-One For Dummies

For Dummies

Careless People

A story of where I used to work

Password Logbook (Hip Floral)

Keep Track of Usernames, Passwords, Web Addresses in One Easy and Organized Location

Networking All-in-One For Dummies

For Dummies (Computer/Tech)

Cryptography and Network Security

8th Edition - Principles and Practice, Global Edition

Linux Basics for Hackers, 2nd Edition

Getting Started with Networking, Scripting, and Security in Kali

Hacking For Dummies

For Dummies (Computer/Tech)

The Art of Invisibility

World's Most Famous Hacker Teaches You How to Be Safe in the Age of Big Brother and Big Data

Dark Wire

The Incredible True Story of the Largest Sting Operation Ever

CompTIA Security+ Certification Kit

7th Edition - Exam SY0-701

Web Application Security

2nd Eidtion - Exploitation and Countermeasures for Modern Web Applications

Keanu Reeves is Not in Love With You

The Murky World of Online Romance Fraud

Container Security

Fundamental Technology Concepts That Protect Cloud Native Applications

Cybersecurity and the Art of Cyberwar

Security, Audit and Leadership Series

Cybersecurity and the Art of Cyberwar

Security, Audit and Leadership Series

Trust Hacked

What Firewalls, Failures, and the Frontlines Taught Me About Trust

Generative AI for Cybersecurity

Organizing for Cyber Power

Offensive Cyberspace Operations and National Security

This product is categorised by