Tech Tips

Securing Systems or Networks

General
Secure Infrastructure Design (pdf)
Securing an Internet Name Server (pdf)
Packet Filtering for Firewall Systems


Windows/UNIX Security
Choosing an Operating System
Windows 95/98 Computer Security Information
Windows NT Configuration Guidelines
Windows NT Security and Configuration Resources
UNIX Computer Security Checklist (Version 2.0)


FTP
Anonymous FTP Abuses
Anonymous FTP Configuration Guidelines
Problems With The FTP PORT Command (or Why You Don't Want Just Any PORT in a Storm)

Responding to Incidents

Windows Intruder Detection Checklist
W32/Blaster Recovery Tips
Windows NT Intruder Detection Checklist
Intruder Detection Checklist
Incident Reporting Guidelines
Steps for Recovering from a UNIX or NT System Compromise
Dealing with External Computer Security Incidents (pdf)
How the FBI Investigates Computer Crime


Communication
Finding Site Contacts

Web Security Issues

Securing Your Web Browser
Frequently Asked Questions About Malicious Web Scripts Redirected by Web Sites
Understanding Malicious Content Mitigation for Web Developers
Cross-Site Scripting Vulnerabilities (pdf)
How To Remove Meta-characters From User-Supplied Data In CGI Scripts

Email Abuse

Email Bombing and Spamming
Spoofed/Forged Email

Understanding Attacks

Denial of Service Attacks
Managing the Threat of Denial-of-Service Attacks (pdf)
Overview of Attack Trends (pdf)
Trends in Denial of Service Attack Technology (pdf)
Protecting Yourself from Password File Attacks

Technical Explanation

A Brief Tour of the Simple Network Management Protocol (pdf)
Using PGP to Verify Digital Signatures (pdf)

Home Computers

Before You Connect a New Computer to the Internet
Home Network Security

Other Reading on the CERT/CC Web Site

Results of the Security in ActiveX Workshop (pdf)
Results of the Distributed-Systems Intruder Tools Workshop pdf | html
State of the Practice of Intrusion Detection Technologies (pdf)
Securing Networks Systematically - the SKiP Method (pdf)


all publications