Wednesday, January 2, 2008

Firewalls and Internet Security

What is “computer security”? Broadly speaking, security is keeping anyone from doing things
you do not want them to do to, with, on, or from your computers or any peripheral devices. This definition is, of course, much too broad. Nevertheless, it does lead us to some very important questions that must be answered by anyone who wishes to deploy an effective security mechanism. The first such question is “What resources are we trying to protect?” The answers are not always obvious. Is it the CPU cycles? At one time, that made a great deal of sense; computer time was very expensive. That is no longer true in most situations, supercomputers being a
notable exception. More seriously, a CPU—or rather, a CPU running certain software with certain configuration files—has a name, an identity, that lets it access other, more critical resources. These are often more sensitive than CPU time. A hacker who compromises or impersonates a host will usually have access to all of its resources: files, storage devices, phone lines, etc. From a practical perspective, some hackers are most interested in abusing the identity of the host, not so much to reach its dedicated resources, but to launder further outgoing connections to other, possibly more interesting, targets. Others might actually be interested in the data on your machine, whether it is sensitive company material or government secrets.


  • Introduction


  • An Overview of TCP/IP



  • Part II Building Your Own Firewall


  • Firewall Gateways


  • How to Build an Application-Level Gateway


  • Authentication


  • Gateway Tools


  • Traps, Lures, and Honey Pots


  • The Hacker's Workbench



  • Part III A Look Back


  • Classes of Attacks


  • An Evening with Berferd


  • Where the Wild Things Are: A Look at the Logs



  • Part IV Odds and Ends

  • Legal Considerations


  • Secure Communications over Insecure Networks


  • \Where Do We Go from Here?



  • Rethinking Public Key Infrastructures and Digital Certificates

    Digital Certificates, SecurityIndividuals and organizations often have a legitimate need to verify the identity or
    other attributes of the individuals they communicate or transact with. The traditional
    method for demonstrating that one meets certain qualifications is to disclose one
    or more paper-based certificates. As defined in the third edition of the American
    Heritage Dictionary of the English Language, a certificate is “a document testifying
    to the truth of something.” Photographs, handwritten signatures, and physical cues
    help the verifier to establish the identity of the holder of a certificate. Embedded
    security features (such as special paper, watermarks, ink that appears different when
    viewed from different angles, and microprinted words and other detail that is hard to replicate) serve to protect against counterfeiting and unauthorized duplication.

    Understanding OSI

    Networking, OSI standart, Network ProtocolOSI (Open Systems Interconnection) represents the totality of protocol definitions and associated additional texts which provide international standardization of many aspects of computer-to-computer communication. In theory it extends from the lowest level of signalling techniques to high-level interactions in support of specific applications.

    The work on OSI was initiated in the late 1970s, and came to a level of maturity in the late 1980s and early 1990s. At the time of writing this text, there are many OSI standards in place, and implementations of the more popular standards are available as commercial products. Wide-scale purchase and use of a wide-range of OSI products is still however not yet a reality, with the free Internet (TCP/IP-based) software still having the greater market share.

    download now

    Pro ASP.NET 2.0 in C# 2005

    ASP Free ebook


    Inside ASP.NET Web Matrix is a free ASP.NET ebook by
    Alex Homer and Dave Sussman. It has 3 parts: Part 1 – What is Web
    Matrix?, . Part 2 – Putting Web Matrix to Work and Part 3 – Configuring
    and Extending Web Matrix.

    download now

    A Litle Smalltalk


    Little Smalltalk is a minimalistic implementation of the Smalltalk programming language

    download now

    Practical SmallTalk

    Smalltalk, Object Programming Language The simplicity, effectiveness and elegance of Smalltalk comes from it's simple yet highly expressive syntax and the design of it's various libraries of 'objects'. Smalltalk was the first, and remains one of the few, pure object systems, which simply means that everything in a Smalltalk program is an object. Smalltalk is generally recognized as the second Object Programming Language (OPL) (after Simula and "object" influences from Sketchpad, the B5000 and the 220 File System, see The Early History of Smalltalk, Section I), the first Pure Object Programming Langauge, the first true Integrated Development Environment (IDE), and the first IDE that eliminated the "Edit-Compile-Link-Run-Test-Debug" build cycle by integrating them all together so that cycle turn around time can be measured in seconds and all phases can be active at once - true interactive development! All of these features and capabilities have significant positive implications and important benefits.

    An object is a collection of data grouped together in meaningful ways with related operations, or chunks of programs, that manipulate that data. It is suprising how well this way of organizing software works. Objects get work done by sending 'messages' to each other. i.e. In english this would be like Jill saying to Jack, Jack drop the ball please. In Smalltalk this might be written as jack dropTheBall. Communication via messages is something that we're all familar with in our lives. Messages can be thought of as 'verbs' that ask the receiving object to perform an operation. Messages may have objects as parameters. i.e. In english this would be like someone saying to Jack, Jack pass the ball to Jill. In Smalltalk this might be written as jack passTheBallTo: jill or even more flexibly as jack pass: theBall to: jill so that other objects, like aPen, can be passed around. A nice example of accomplishing more with less.

    Smalltalk has a powerful concept known as "blocks" which are snippets of program code that are also treated as objects, this enables them to be used like any other object. In addition blocks enable you to extend the Smalltalk language very easily in powerful ways that other popular languages only dream of.

    Smalltalk was designed to be easy to learn and use. It is an expressive language that uses a simple sub set of human languages, nouns and verbs. Something that all humans can related to. This faciliates a clean expression of solutions that map very well with human thinking. This is one of the compelling reasons that Smalltalk programs tend to be one third to one half the size of programs written in other popular languages. Smalltalk programs typically can do two to three times as much work for the same amount of code. Often Smalltalk programs can actually do a lot more with much less code. Less code to write, re-write, test and maintain means a lower cost of development, a faster time to market, and potentially a higher quality of system which lowers maintenance costs again and opens new opportunities.

    The bottom line is that Smalltalk can work for you by letting you focus on your solutions and the rewards of your business endeavours.
    source:http://www.smalltalk.org

    download now

    Play Online Game


    eXTReMe Tracker
    users online