Search |
Symbols
| A
| B
| C
| D
| E
| F
| G
| H
| I
| J
| K
| L
| M
| N
| O
| P
| Q
| R
| S
| T
| U
| V
| W
| X
| Y
| Z
Index: D
- DAC (Discretionary Access Controls)
: 4.1.3. Groups and Group Identifiers (GIDs)
- daemon (user)
: 4.1. Users and Groups
- damage, liability for
: 26.4.6. Liability for Damage
- DARPA
: (see ARPA)
- DAT (Digital Audio Tape)
: 7.1.4. Guarding Against Media Failure
- data
- assigning owners to
: 2.4.4.1. Assign an owner
- availability of
: 2.1. Planning Your Security Needs
- communication equipment (DCE)
: 14.3. The RS-232 Serial Protocol
- confidential
- 2.1. Planning Your Security Needs
- 2.5.2. Confidential Information
- disclosure of
: 11.2. Damage
- giving away with NIS
: 19.4.5. Unintended Disclosure of Site Information with NIS
- identifying assets
: 2.2.1.1. Identifying assets
- integrity of
: (see integrity, data)
- spoofing
: 16.3. IP Security
- terminal equipment (DTE)
: 14.3. The RS-232 Serial Protocol
- Data Carrier Detect (DCD)
: 14.3. The RS-232 Serial Protocol
- Data Defense Network (DDN)
: F.3.4.20. MILNET
- Data Encryption Standard
: (see DES)
- Data Set Ready (DSR)
: 14.3. The RS-232 Serial Protocol
- Data Terminal Ready (DTR)
: 14.3. The RS-232 Serial Protocol
- database files
: 1.2. What Is an Operating System?
- databases
: (see network databases)
- date command
- 8.1.3. Accounts That Run a Single Command
- 24.5.1. Never Trust Anything Except Hardcopy
- day-zero backups
: 7.1.3. Types of Backups
- dbx debugger
: C.4. The kill Command
- DCE (data communication equipment)
: 14.3. The RS-232 Serial Protocol
- DCE (Distributed Computing Environment)
- 3.2.2. The /etc/passwd File and Network Databases
- 8.7.3. Code Books
- 16.2.6.2. Other naming services
- 19.2. Sun's Remote Procedure Call (RPC)
- 19.7.1. DCE
- dd command
- 6.6.1.2. Ways of improving the security of crypt
- 7.4.1. Simple Local Copies
- DDN (Data Defense Network)
: F.3.4.20. MILNET
- deadlock
: 23.2. Tips on Avoiding Security-related Bugs
- debug command
: 17.3.4.2. Using sendmail to receive email
- debugfs command
: 25.2.2.8. Tree-structure attacks
- DEC (Digital Equipment Corporation)
: F.3.4.9. Digital Equipment Corporation and customers
- DECnet protocol
: 16.4.3. DECnet
- decode aliases
: 17.3.4.2. Using sendmail to receive email
- decryption
: (see encryption)
- defamation
: 26.4.7. Harassment, Threatening Communication, and Defamation
- default
- accounts
: 8.1.2. Default Accounts
- deny
: 21.1.1. Default Permit vs. Default Deny
- domain
: 16.2.3. Hostnames
- permit
: 21.1.1. Default Permit vs. Default Deny
- defense in depth
: (see multilevel security)
- DELETE key
: 3.4. Changing Your Password
- deleting
- destructive attack via
: 25.1. Destructive Attacks
- files
: 5.4. Using Directory Permissions
- demo accounts
: 8.1.2. Default Accounts
- denial-of-service attacks
- 1.5. Role of This Book
- 25. Denial of Service Attacks and Solutions
- 25.3.4. Clogging
- accidental
: 25.2.5. Soft Process Limits: Preventing Accidental Denial of Service
- automatic lockout
: 3.3. Entering Your Password
- checklist for
: A.1.1.24. Chapter 25: Denial of Service Attacks and Solutions
- inodes
: 25.2.2.3. Inode problems
- internal inetd services
: 17.1.3. The /etc/inetd Program
- on networks
- 25.3. Network Denial of Service Attacks
- 25.3.4. Clogging
- via syslog
: 10.5.1. The syslog.conf Configuration File
- X Window System
: 17.3.21.5. Denial of service attacks under X
- departure of employees
: 13.2.6. Departure
- depository directories, FTP
: 17.3.2.6. Setting up anonymous FTP with the standard UNIX FTP server
- DES (Data Encryption Standard)
- 6.4.1. Summary of Private Key Systems
- 6.4.4. DES
- 6.4.5.2. Triple DES
- 8.6.1. The crypt() Algorithm
- authentication (NIS+)
: 19.5.4. Using NIS+
- improving security of
- 6.4.5. Improving the Security of DES
- 6.4.5.2. Triple DES
- des program
- 6.4.4. DES
- 6.6.2. des: The Data Encryption Standard
- 7.4.4. Encrypting Your Backups
- destroying media
: 12.3.2.3. Sanitize your media before disposal
- destructive attacks
: 25.1. Destructive Attacks
- detached signatures
: 6.6.3.6. PGP detached signatures
- detectors
- cable tampering
: 12.3.1.1. Wiretapping
- carbon-monoxide
: 12.2.1.2. Smoke
- humidity
: 12.2.1.11. Humidity
- logging alarm systems
: 10.7.1.1. Exception and activity reports
- smoke
: 12.2.1.2. Smoke
- temperature alarms
: 12.2.1.6. Temperature extremes
- water sensors
: 12.2.1.12. Water
- Deutsches Forschungsnetz
: F.3.4.14. Germany: DFN-WiNet Internet sites
- /dev directory
: 14.5.1. Hooking Up a Modem to Your Computer
- /dev/audio device
: 23.8. Picking a Random Seed
- /dev/console device
: 5.6. Device Files
- /dev/kmem device
- 5.6. Device Files
- 11.1.2. Back Doors and Trap Doors
- /dev/null device
: 5.6. Device Files
- /dev/random device
: 23.7.4. Other random number generators
- /dev/swap device
: 5.5.1. SUID, SGID, and Sticky Bits
- /dev/urandom device
: 23.7.4. Other random number generators
- device files
: 5.6. Device Files
- devices
- managing with SNMP
: 17.3.15. Simple Network Management Protocol (SNMP) (UDP Ports 161 and 162)
- modem control
: 14.5.2. Setting Up the UNIX Device
- Devices file
: 14.5.1. Hooking Up a Modem to Your Computer
- df -i command
: 25.2.2.3. Inode problems
- dictionary attack
: 8.6.1. The crypt() Algorithm
- Diffie-Hellman key exchange system
- 6.4.2. Summary of Public Key Systems
- 18.6. Dependence on Third Parties
- 19.3. Secure RPC (AUTH_DES)
- breaking key
: 19.3.4. Limitations of Secure RPC
- exponential key exchange
: 19.3.1. Secure RPC Authentication
- Digital Audio Tape (DAT)
: 7.1.4. Guarding Against Media Failure
- digital computers
: 6.1.2. Cryptography and Digital Computers
- Digital Equipment Corporation (DEC)
: F.3.4.9. Digital Equipment Corporation and customers
- Digital Signature Algorithm
: (see DSA)
- digital signatures
- 6.4. Common Cryptographic Algorithms
- 6.5. Message Digests and Digital Signatures
- 6.5.5.2. Message authentication codes
- 9.2.3. Checksums and Signatures
- checksums
: 6.5.5.1. Checksums
- detached signatures
: 6.6.3.6. PGP detached signatures
- with PGP
: 6.6.3.4. Adding a digital signature to an announcement
- Digital UNIX
- 1.3. History of UNIX
- (see also Ultrix)
- directories
- 5.1.1. Directories
- 5.1.3. Current Directory and Paths
- ancestor
: 9.2.2.2. Ancestor directories
- backing up by
: 7.1.3. Types of Backups
- CDFs (context-dependent files)
: 24.4.1.7. Hidden files and directories
- checklist for
: A.1.1.4. Chapter 5: The UNIX Filesystem
- dot, dot-dot, and /
: 5.1.1. Directories
- FTP depositories
: 17.3.2.6. Setting up anonymous FTP with the standard UNIX FTP server
- immutable
: 9.1.1. Immutable and Append-Only Files
- listing automatically (Web)
: 18.2.2.2. Additional configuration issues
- mounted
: 5.5.5. Turning Off SUID and SGID in Mounted Filesystems
- mounting secure
: 19.3.2.5. Mounting a secure filesystem
- nested
: 25.2.2.8. Tree-structure attacks
- NFS
: (see NFS)
- permissions
: 5.4. Using Directory Permissions
- read-only
: 9.1.2. Read-only Filesystems
- restricted
- 8.1.5. Restricted Filesystem
- 8.1.5.2. Checking new software
- root
: (see root directory)
- SGI and sticky bits on
: 5.5.6. SGID and Sticky Bits on Directories
- Web server structure of
- 18.2.2. Understand Your Server's Directory Structure
- 18.2.2.2. Additional configuration issues
- world-writable
: 11.6.1.1. World-writable user files and directories
- <Directory> blocks
- 18.3.1. The access.conf and .htaccess Files
- 18.3.2. Commands Within the <Directory> Block
- 18.3.2.1. Examples
- disaster recovery
: 12.2.6.4. Minimizing downtime
- disk attacks
- 25.2.2. Disk Attacks
- 25.2.2.8. Tree-structure attacks
- disk quotas
: 25.2.2.5. Using quotas
- diskettes
: (see backups; media)
- dismissed employees
: 13.2.6. Departure
- disposing of materials
: 12.3.3. Other Media
- Distributed Computing Environment
: (see DCE)
- DNS (Domain Name System)
- 16.2.6. Name Service
- 16.2.6.2. Other naming services
- 17.3.6. Domain Name System (DNS) (TCP and UDP Port 53)
- 17.3.6.2. DNS nameserver attacks
- nameserver attacks
: 17.3.6.2. DNS nameserver attacks
- rogue servers
: 16.3.2. Security and Nameservice
- security and
: 16.3.2. Security and Nameservice
- zone transfers
- 17.3.6. Domain Name System (DNS) (TCP and UDP Port 53)
- 17.3.6.1. DNS zone transfers
- documentation
- 2.5. The Problem with Security Through Obscurity
- 23.2. Tips on Avoiding Security-related Bugs
- domain name
: 16.2.3. Hostnames
- Domain Name System
: (see DNS)
- domainname command
: 19.4.3. NIS Domains
- domains
: 19.4.3. NIS Domains
- dormant accounts
- 8.4. Managing Dormant Accounts
- 8.4.3. Finding Dormant Accounts
- dot (.) directory
: 5.1.1. Directories
- dot-dot (..) directory
: 5.1.1. Directories
- Double DES
: 6.4.5. Improving the Security of DES
- double reverse lookup
: 16.3.2. Security and Nameservice
- DOW USA
: F.3.4.10. DOW USA
- downloading files
: 12.3.4. Protecting Local Storage
- logging
- 10.3.3. xferlog Log File
- 10.3.5. access_log Log File
- downtime
: 12.2.6.4. Minimizing downtime
- due to criminal investigations
: 26.2.4. Hazards of Criminal Prosecution
- logging
: 10.7.2.1. Exception and activity reports
- drand48 function
: 23.7.3. drand48 ( ), lrand48 ( ), and mrand48 ( )
- drills, security
: 24.1.3. Rule #3: PLAN AHEAD
- drink
: 12.2.2.1. Food and drink
- DSA (Digital Signature Algorithm)
- 6.4.2. Summary of Public Key Systems
- 6.5.3. Digital Signatures
- DTE (data terminal equipment)
: 14.3. The RS-232 Serial Protocol
- du command
: 25.2.2.1. Disk-full attacks
- dual universes
: 5.9.1. Dual Universes
- ducts, air
: 12.2.3.2. Entrance through air ducts
- dump/restore program
- 7.1.3. Types of Backups
- 7.4.3. Specialized Backup Programs
- 7.4.4. Encrypting Your Backups
- dumpster diving
: 12.3.3. Other Media
- duress code
: 8.7.2. Token Cards
- dust
: 12.2.1.3. Dust
Search |
Symbols
| A
| B
| C
| D
| E
| F
| G
| H
| I
| J
| K
| L
| M
| N
| O
| P
| Q
| R
| S
| T
| U
| V
| W
| X
| Y
| Z
Copyright © 1999
O'Reilly & Associates, Inc.
All Rights Reserved.