Index

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

# Index: D

DAC (Discretionary Access Controls) : 4.1.3. Groups and Group Identifiers (GIDs)
daemon (user) : 4.1. Users and Groups
damage, liability for : 26.4.6. Liability for Damage
DARPA : (see ARPA)
DAT (Digital Audio Tape) : 7.1.4. Guarding Against Media Failure
data
  assigning owners to : 2.4.4.1. Assign an owner
  availability of : 2.1. Planning Your Security Needs
  communication equipment (DCE) : 14.3. The RS-232 Serial Protocol
  confidential
    2.1. Planning Your Security Needs
    2.5.2. Confidential Information
  disclosure of : 11.2. Damage
  giving away with NIS : 19.4.5. Unintended Disclosure of Site Information with NIS
  identifying assets : 2.2.1.1. Identifying assets
  integrity of : (see integrity, data)
  spoofing : 16.3. IP Security
  terminal equipment (DTE) : 14.3. The RS-232 Serial Protocol
Data Carrier Detect (DCD) : 14.3. The RS-232 Serial Protocol
Data Defense Network (DDN) : F.3.4.20. MILNET
Data Encryption Standard : (see DES)
Data Set Ready (DSR) : 14.3. The RS-232 Serial Protocol
Data Terminal Ready (DTR) : 14.3. The RS-232 Serial Protocol
database files : 1.2. What Is an Operating System?
databases : (see network databases)
date command
  8.1.3. Accounts That Run a Single Command
  24.5.1. Never Trust Anything Except Hardcopy
day-zero backups : 7.1.3. Types of Backups
dbx debugger : C.4. The kill Command
DCE (data communication equipment) : 14.3. The RS-232 Serial Protocol
DCE (Distributed Computing Environment)
  3.2.2. The /etc/passwd File and Network Databases
  8.7.3. Code Books
  16.2.6.2. Other naming services
  19.2. Sun's Remote Procedure Call (RPC)
  19.7.1. DCE
dd command
  6.6.1.2. Ways of improving the security of crypt
  7.4.1. Simple Local Copies
DDN (Data Defense Network) : F.3.4.20. MILNET
deadlock : 23.2. Tips on Avoiding Security-related Bugs
debug command : 17.3.4.2. Using sendmail to receive email
debugfs command : 25.2.2.8. Tree-structure attacks
DEC (Digital Equipment Corporation) : F.3.4.9. Digital Equipment Corporation and customers
DECnet protocol : 16.4.3. DECnet
decode aliases : 17.3.4.2. Using sendmail to receive email
decryption : (see encryption)
defamation : 26.4.7. Harassment, Threatening Communication, and Defamation
default
  accounts : 8.1.2. Default Accounts
  deny : 21.1.1. Default Permit vs. Default Deny
  domain : 16.2.3. Hostnames
  permit : 21.1.1. Default Permit vs. Default Deny
defense in depth : (see multilevel security)
DELETE key : 3.4. Changing Your Password
deleting
  destructive attack via : 25.1. Destructive Attacks
  files : 5.4. Using Directory Permissions
demo accounts : 8.1.2. Default Accounts
denial-of-service attacks
  1.5. Role of This Book
  25. Denial of Service Attacks and Solutions
  25.3.4. Clogging
  accidental : 25.2.5. Soft Process Limits: Preventing Accidental Denial of Service
  automatic lockout : 3.3. Entering Your Password
  checklist for : A.1.1.24. Chapter 25: Denial of Service Attacks and Solutions
  inodes : 25.2.2.3. Inode problems
  internal inetd services : 17.1.3. The /etc/inetd Program
  on networks
    25.3. Network Denial of Service Attacks
    25.3.4. Clogging
  via syslog : 10.5.1. The syslog.conf Configuration File
  X Window System : 17.3.21.5. Denial of service attacks under X
departure of employees : 13.2.6. Departure
depository directories, FTP : 17.3.2.6. Setting up anonymous FTP with the standard UNIX FTP server
DES (Data Encryption Standard)
  6.4.1. Summary of Private Key Systems
  6.4.4. DES
  6.4.5.2. Triple DES
  8.6.1. The crypt() Algorithm
  authentication (NIS+) : 19.5.4. Using NIS+
  improving security of
    6.4.5. Improving the Security of DES
    6.4.5.2. Triple DES
des program
  6.4.4. DES
  6.6.2. des: The Data Encryption Standard
  7.4.4. Encrypting Your Backups
destroying media : 12.3.2.3. Sanitize your media before disposal
destructive attacks : 25.1. Destructive Attacks
detached signatures : 6.6.3.6. PGP detached signatures
detectors
  cable tampering : 12.3.1.1. Wiretapping
  carbon-monoxide : 12.2.1.2. Smoke
  humidity : 12.2.1.11. Humidity
  logging alarm systems : 10.7.1.1. Exception and activity reports
  smoke : 12.2.1.2. Smoke
  temperature alarms : 12.2.1.6. Temperature extremes
  water sensors : 12.2.1.12. Water
Deutsches Forschungsnetz : F.3.4.14. Germany: DFN-WiNet Internet sites
/dev directory : 14.5.1. Hooking Up a Modem to Your Computer
  /dev/audio device : 23.8. Picking a Random Seed
  /dev/console device : 5.6. Device Files
  /dev/kmem device
    5.6. Device Files
    11.1.2. Back Doors and Trap Doors
  /dev/null device : 5.6. Device Files
  /dev/random device : 23.7.4. Other random number generators
  /dev/swap device : 5.5.1. SUID, SGID, and Sticky Bits
  /dev/urandom device : 23.7.4. Other random number generators
device files : 5.6. Device Files
devices
  managing with SNMP : 17.3.15. Simple Network Management Protocol (SNMP) (UDP Ports 161 and 162)
  modem control : 14.5.2. Setting Up the UNIX Device
Devices file : 14.5.1. Hooking Up a Modem to Your Computer
df -i command : 25.2.2.3. Inode problems
dictionary attack : 8.6.1. The crypt() Algorithm
Diffie-Hellman key exchange system
  6.4.2. Summary of Public Key Systems
  18.6. Dependence on Third Parties
  19.3. Secure RPC (AUTH_DES)
  breaking key : 19.3.4. Limitations of Secure RPC
  exponential key exchange : 19.3.1. Secure RPC Authentication
Digital Audio Tape (DAT) : 7.1.4. Guarding Against Media Failure
digital computers : 6.1.2. Cryptography and Digital Computers
Digital Equipment Corporation (DEC) : F.3.4.9. Digital Equipment Corporation and customers
Digital Signature Algorithm : (see DSA)
digital signatures
  6.4. Common Cryptographic Algorithms
  6.5. Message Digests and Digital Signatures
  6.5.5.2. Message authentication codes
  9.2.3. Checksums and Signatures
  checksums : 6.5.5.1. Checksums
  detached signatures : 6.6.3.6. PGP detached signatures
  with PGP : 6.6.3.4. Adding a digital signature to an announcement
Digital UNIX
  1.3. History of UNIX
  (see also Ultrix)
directories
  5.1.1. Directories
  5.1.3. Current Directory and Paths
  ancestor : 9.2.2.2. Ancestor directories
  backing up by : 7.1.3. Types of Backups
  CDFs (context-dependent files) : 24.4.1.7. Hidden files and directories
  checklist for : A.1.1.4. Chapter 5: The UNIX Filesystem
  dot, dot-dot, and / : 5.1.1. Directories
  FTP depositories : 17.3.2.6. Setting up anonymous FTP with the standard UNIX FTP server
  immutable : 9.1.1. Immutable and Append-Only Files
  listing automatically (Web) : 18.2.2.2. Additional configuration issues
  mounted : 5.5.5. Turning Off SUID and SGID in Mounted Filesystems
  mounting secure : 19.3.2.5. Mounting a secure filesystem
  nested : 25.2.2.8. Tree-structure attacks
  NFS : (see NFS)
  permissions : 5.4. Using Directory Permissions
  read-only : 9.1.2. Read-only Filesystems
  restricted
    8.1.5. Restricted Filesystem
    8.1.5.2. Checking new software
  root : (see root directory)
  SGI and sticky bits on : 5.5.6. SGID and Sticky Bits on Directories
  Web server structure of
    18.2.2. Understand Your Server's Directory Structure
    18.2.2.2. Additional configuration issues
  world-writable : 11.6.1.1. World-writable user files and directories
<Directory> blocks
  18.3.1. The access.conf and .htaccess Files
  18.3.2. Commands Within the <Directory> Block
  18.3.2.1. Examples
disaster recovery : 12.2.6.4. Minimizing downtime
disk attacks
  25.2.2. Disk Attacks
  25.2.2.8. Tree-structure attacks
disk quotas : 25.2.2.5. Using quotas
diskettes : (see backups; media)
dismissed employees : 13.2.6. Departure
disposing of materials : 12.3.3. Other Media
Distributed Computing Environment : (see DCE)
DNS (Domain Name System)
  16.2.6. Name Service
  16.2.6.2. Other naming services
  17.3.6. Domain Name System (DNS) (TCP and UDP Port 53)
  17.3.6.2. DNS nameserver attacks
  nameserver attacks : 17.3.6.2. DNS nameserver attacks
  rogue servers : 16.3.2. Security and Nameservice
  security and : 16.3.2. Security and Nameservice
  zone transfers
    17.3.6. Domain Name System (DNS) (TCP and UDP Port 53)
    17.3.6.1. DNS zone transfers
documentation
  2.5. The Problem with Security Through Obscurity
  23.2. Tips on Avoiding Security-related Bugs
domain name : 16.2.3. Hostnames
Domain Name System : (see DNS)
domainname command : 19.4.3. NIS Domains
domains : 19.4.3. NIS Domains
dormant accounts
  8.4. Managing Dormant Accounts
  8.4.3. Finding Dormant Accounts
dot (.) directory : 5.1.1. Directories
dot-dot (..) directory : 5.1.1. Directories
Double DES : 6.4.5. Improving the Security of DES
double reverse lookup : 16.3.2. Security and Nameservice
DOW USA : F.3.4.10. DOW USA
downloading files : 12.3.4. Protecting Local Storage
  logging
    10.3.3. xferlog Log File
    10.3.5. access_log Log File
downtime : 12.2.6.4. Minimizing downtime
  due to criminal investigations : 26.2.4. Hazards of Criminal Prosecution
  logging : 10.7.2.1. Exception and activity reports
drand48 function : 23.7.3. drand48 ( ), lrand48 ( ), and mrand48 ( )
drills, security : 24.1.3. Rule #3: PLAN AHEAD
drink : 12.2.2.1. Food and drink
DSA (Digital Signature Algorithm)
  6.4.2. Summary of Public Key Systems
  6.5.3. Digital Signatures
DTE (data terminal equipment) : 14.3. The RS-232 Serial Protocol
du command : 25.2.2.1. Disk-full attacks
dual universes : 5.9.1. Dual Universes
ducts, air : 12.2.3.2. Entrance through air ducts
dump/restore program
  7.1.3. Types of Backups
  7.4.3. Specialized Backup Programs
  7.4.4. Encrypting Your Backups
dumpster diving : 12.3.3. Other Media
duress code : 8.7.2. Token Cards
dust : 12.2.1.3. Dust

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.