Index

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

# Index: C

C programming language
  1.3. History of UNIX
  23.2. Tips on Avoiding Security-related Bugs
  -Wall compiler option : 23.2. Tips on Avoiding Security-related Bugs
C shell : (see csh)
C2 audit : 10.1. The Basic Log Files
cables, network
  12.2.4.2. Network cables
  12.3.1.5. Fiber optic cable
  cutting : 25.1. Destructive Attacks
  tampering detectors for : 12.3.1.1. Wiretapping
  wiretapping : 12.3.1.1. Wiretapping
cache, nameserver : 16.3.2. Security and Nameservice
caching : 5.6. Device Files
Caesar Cipher : 6.4.3. ROT13: Great for Encoding Offensive Jokes
calculating costs of losses : 2.3.1. The Cost of Loss
call forwarding : 14.5.4. Physical Protection of Modems
Call Trace : 24.2.4. Tracing a Connection
CALLBACK= command : 15.5.2. Permissions Commands
callbacks
  14.4.2.
  14.6. Additional Security for Modems
  BNU UUCP : 15.5.2. Permissions Commands
  Version 2 UUCP : 15.4.1.5. Requiring callback
Caller-ID (CNID)
  14.4.3. Caller-ID (CNID)
  14.6. Additional Security for Modems
  24.2.4. Tracing a Connection
Canada, export control in : 6.7.2. Cryptography and Export Controls
carbon monoxide : 12.2.1.2. Smoke
caret (^) in encrypted messages : 6.2. What Is Encryption?
case in usernames : 3.1. Usernames
cat command
  3.2.2. The /etc/passwd File and Network Databases
  15.4.3. L.cmds: Providing Remote Command Execution
  -ve option : 5.5.4.1. The ncheck command
  -v option : 24.4.1.7. Hidden files and directories
cat-passwd command : 3.2.2. The /etc/passwd File and Network Databases
CBC (cipher block chaining)
  6.4.4.2. DES modes
  6.6.2. des: The Data Encryption Standard
CBW (Crypt Breaker's Workbench) : 6.6.1.1. The crypt program
CCTA IT Security & Infrastructure Group : F.3.4.39. UK: other government departments and agencies
CD-ROM : 9.1.2. Read-only Filesystems
CDFs (context-dependent files)
  5.9.2. Context-Dependent Files
  24.4.1.7. Hidden files and directories
ceilings, dropped : 12.2.3.1. Raised floors and dropped ceilings
cellular telephones : 12.2.1.8. Electrical noise
CERCUS (Computer Emergency Response Committee for Unclassified Systems) : F.3.4.36. TRW network area and system administrators
Cerf, Vint : 16.2. IPv4: The Internet Protocol Version 4
CERN : E.4.1. CERN HTTP Daemon
CERT (Computer Emergency Response Team)
  6.5.2. Using Message Digests
  27.3.5. Response Personnel?
  F.3.4.1. All Internet sites
  CERT-NL (Netherlands) : F.3.4.25. Netherlands: SURFnet-connected sites
  mailing list for : E.1.3.4. CERT-advisory
CFB (cipher feedback) : 6.4.4.2. DES modes
CGI (Common Gateway Interface) : 18.1. Security and the World Wide Web
  scripts
    18.2. Running a Secure Server
    18.2.3. Writing Secure CGI Scripts and Programs
    18.2.4.1. Beware mixing HTTP with anonymous FTP
cgi-bin directory : 18.2.2. Understand Your Server's Directory Structure
chacl command : 5.2.5.2. HP-UX access control lists
  -f option : 5.2.5.2. HP-UX access control lists
  -r option : 5.2.5.2. HP-UX access control lists
change detection
  9.2. Detecting Change
  9.3. A Final Note
character devices : 5.6. Device Files
chat groups, harassment via : 26.4.7. Harassment, Threatening Communication, and Defamation
chdir command
  23.2. Tips on Avoiding Security-related Bugs
  25.2.2.8. Tree-structure attacks
checklists for detecting changes
  9.2.2. Checklists and Metadata
  9.2.3. Checksums and Signatures
checksums
  6.5.5.1. Checksums
  9.2.3. Checksums and Signatures
Chesson, Greg : 15.2. Versions of UUCP
chfn command : 8.2. Monitoring File Format
chgrp command : 5.8. chgrp: Changing a File's Group
child processes : C.2. Creating Processes
chkey command : 19.3.1.1. Proving your identity
chmod command
  5.2.1. chmod: Changing a File's Permissions
  5.2.4. Using Octal File Permissions
  8.3. Restricting Logins
  -A option : 5.2.5.2. HP-UX access control lists
  -f option : 5.2.1. chmod: Changing a File's Permissions
  -h option : 5.2.1. chmod: Changing a File's Permissions
  -R option : 5.2.1. chmod: Changing a File's Permissions
chokes : (see firewalls)
chown command
  5.7. chown: Changing a File's Owner
  23.2. Tips on Avoiding Security-related Bugs
chroot system call
  8.1.5. Restricted Filesystem
  8.1.5.2. Checking new software
  11.1.4. Trojan Horses
  23.4.1. Using chroot()
  with anonymous FTP : 17.3.2.6. Setting up anonymous FTP with the standard UNIX FTP server
chrootuid daemon : E.4.2. chrootuid
chsh command : 8.7.1. Integrating One-time Passwords with UNIX
CIAC (Computer Incident Advisory Capability) : F.3.4.43. U.S. Department of Energy sites, Energy Sciences Network (ESnet), and DOE contractors
CIDR (Classless InterDomain Routing)
  16.2.1.1. IP networks
  16.2.1.3. CIDR addresses
cigarettes : 12.2.1.2. Smoke
cipher
  6.4.3. ROT13: Great for Encoding Offensive Jokes
  (see also cryptography; encryption)
  block chaining (CBC)
    6.4.4.2. DES modes
    6.6.2. des: The Data Encryption Standard
  ciphertext
    6.2. What Is Encryption?
    8.6.1. The crypt() Algorithm
  feedback (CFB) : 6.4.4.2. DES modes
CISCO : F.3.4.8. CISCO Systems
civil actions (lawsuits) : 26.3. Civil Actions
classified data and breakins
  26.1. Legal Options After a Break-in
  26.2.2. Federal Jurisdiction
Classless InterDomain Routing (CIDR)
  16.2.1.1. IP networks
  16.2.1.3. CIDR addresses
clear text : 8.6.1. The crypt() Algorithm
Clear to Send (CTS) : 14.3. The RS-232 Serial Protocol
client flooding : 16.3.2. Security and Nameservice
client/server model : 16.2.5. Clients and Servers
clients, NIS : (see NIS)
clock, system
  5.1.5. File Times
  17.3.14. Network Time Protocol (NTP) (UDP Port 123)
  for random seeds : 23.8. Picking a Random Seed
  resetting : 9.2.3. Checksums and Signatures
  Secure RPC timestamp : 19.3.1.3. Setting the window
clogging : 25.3.4. Clogging
CMW (Compartmented-Mode Workstation) : "Secure" Versions of UNIX
CNID (Caller-ID)
  14.4.3. Caller-ID (CNID)
  14.6. Additional Security for Modems
  24.2.4. Tracing a Connection
CO2 system (for fires) : 12.2.1.1. Fire
COAST (Computer Operations, Audit, and Security Technology)
  E.3.2. COAST
  E.4. Software Resources
code breaking : (see cryptography)
codebooks : 8.7.3. Code Books
CodeCenter : 23.2. Tips on Avoiding Security-related Bugs
cold, extreme : 12.2.1.6. Temperature extremes
command shells : (see shells)
commands
  8.1.3. Accounts That Run a Single Command
  (see also under specific command name)
  accounts running single : 8.1.3. Accounts That Run a Single Command
  in addresses : 15.7. Early Security Problems with UUCP
  editor, embedded : 11.5.2.7. Other initializations
  remote execution of
    15.1.2. uux Command
    15.4.3. L.cmds: Providing Remote Command Execution
    17.3.17. rexec (TCP Port 512)
  running simultaneously
    23.2. Tips on Avoiding Security-related Bugs
    (see also multitasking)
commands in <Directory> blocks : 18.3.2. Commands Within the <Directory> Block
COMMANDS= command : 15.5.2. Permissions Commands
commenting out services : 17.3. Primary UNIX Network Services
comments in BNU UUCP : 15.5.1.3. A Sample Permissions file
Common Gateway Interface : (see CGI)
communications
  modems : (see modems)
  national telecommunications : 26.2.2. Federal Jurisdiction
  threatening : 26.4.7. Harassment, Threatening Communication, and Defamation
comparison copies
  9.2.1. Comparison Copies
  9.2.1.3. rdist
compress program : 6.6.1.2. Ways of improving the security of crypt
Compressed SLIP (CSLIP) : 16.2. IPv4: The Internet Protocol Version 4
Computer Emergency Response Committee for Unclassified Systems (CERCUS) : F.3.4.36. TRW network area and system administrators
Computer Emergency Response Team : (see CERT)
Computer Incident Advisory Capability (CIAC) : F.3.4.43. U.S. Department of Energy sites, Energy Sciences Network (ESnet), and DOE contractors
computer networks : 1.4.3. Add-On Functionality Breeds Problems
Computer Security Institute (CSI) : F.1.3. Computer Security Institute (CSI)
computers
  assigning UUCP name : 15.5.2. Permissions Commands
  auxiliary ports : 12.3.1.4. Auxiliary ports on terminals
  backing up individual : 7.2.1. Individual Workstation
  contacting administrator of : 24.2.4.2. How to contact the system administrator of a computer you don't know
  cutting cables to : 25.1. Destructive Attacks
  failure of : 7.1.1.1. A taxonomy of computer failures
  hostnames for
    16.2.3. Hostnames
    16.2.3.1. The /etc/hosts file
  modems : (see modems)
  multiple screens : 12.3.4.3. Multiple screens
  multiple suppliers of : 18.6. Dependence on Third Parties
  non-citizen access to : 26.4.1. Munitions Export
  operating after breakin : 24.6. Resuming Operation
  portable : 12.2.6.3. Portables
  remote command execution : 17.3.17. rexec (TCP Port 512)
  running NIS+ : 19.5.5. NIS+ Limitations
  screen savers : 12.3.5.2. X screen savers
  security
    culture of : D.1.10. Understanding the Computer Security "Culture"
    four steps toward : 2.4.4.7. Defend in depth
    physical : 12.2.6.1. Physically secure your computer
    references for : D.1.7. General Computer Security
    resources on : D.1.1. Other Computer References
  seized as evidence : 26.2.4. Hazards of Criminal Prosecution
  transferring files between : 15.1.1. uucp Command
  trusting
    27.1. Can you Trust Your Computer?
    27.1.3. What the Superuser Can and Cannot Do
  unattended
    12.3.5. Unattended Terminals
    12.3.5.2. X screen savers
  unplugging : 24.2.5. Getting Rid of the Intruder
  vacuums for : 12.2.1.3. Dust
  vandalism of : (see vandalism)
  virtual : (see Telnet utility)
computing base (TCB) : 8.5.3.2. Trusted computing base
conf directory : 18.2.2.1. Configuration files
  conf/access.conf : (see access.conf file)
  conf/srm.conf file : 18.3.1. The access.conf and .htaccess Files
confidentiality : (see encryption; privacy)
configuration
  errors : 9.1. Prevention
  files : 11.5.3. Abusing Automatic Mechanisms
    logging : 10.7.2.2. Informational material
    MCSA web server : 18.2.2.1. Configuration files
    UUCP version differences : 15.2. Versions of UUCP
  simplifying management of : 9.1.2. Read-only Filesystems
connections
  hijacking : 16.3. IP Security
  laundering : 16.1.1.1. Who is on the Internet?
  tracing
    24.2.4. Tracing a Connection
    24.2.4.2. How to contact the system administrator of a computer you don't know
  unplugging : 24.2.5. Getting Rid of the Intruder
connectors, network : 12.2.4.3. Network connectors
consistency of software : 2.1. Planning Your Security Needs
console device : 5.6. Device Files
CONSOLE variable : 8.5.1. Secure Terminals
constraining passwords : 8.8.2. Constraining Passwords
consultants : 27.3.4. Your Consultants?
context-dependent files (CDFs)
  5.9.2. Context-Dependent Files
  24.4.1.7. Hidden files and directories
control characters in usernames : 3.1. Usernames
cookies
  17.3.21.4. Using Xauthority magic cookies
  18.2.3.1. Do not trust the user's browser!
COPS (Computer Oracle and Password System)
  19.5.5. NIS+ Limitations
  E.4.3. COPS (Computer Oracle and Password System)
copyright
  9.2.1. Comparison Copies
  26.4.2. Copyright Infringement
  26.4.2.1. Software piracy and the SPA
  notices of : 26.2.6. Other Tips
CORBA (Common Object Request Broker Architecture) : 19.2. Sun's Remote Procedure Call (RPC)
core files
  23.2. Tips on Avoiding Security-related Bugs
  C.4. The kill Command
cost-benefit analysis
  2.3. Cost-Benefit Analysis
  2.3.4. Convincing Management
costs of losses : 2.3.1. The Cost of Loss
cp command : 7.4.1. Simple Local Copies
cpio program
  7.3.2. Building an Automatic Backup System
  7.4.2. Simple Archives
crack program
  8.8.3. Cracking Your Own Passwords
  18.3.3. Setting Up Web Users and Passwords
cracking
  backing up because of : 7.1.1.1. A taxonomy of computer failures
  passwords
    3.6.1. Bad Passwords: Open Doors
    3.6.4. Passwords on Multiple Machines
    8.6.1. The crypt() Algorithm
    8.8.3. Cracking Your Own Passwords
    8.8.3.2. The dilemma of password crackers
    17.3.3. TELNET (TCP Port 23)
    logging failed attempts : 10.5.3. syslog Messages
  responding to
    24. Discovering a Break-in
    24.7. Damage Control
  using rexecd : 17.3.17. rexec (TCP Port 512)
crashes, logging : 10.7.2.1. Exception and activity reports
CRC checksums : (see checksums)
Cred table (NIS+) : 19.5.3. NIS+ Tables
criminal prosecution
  26.2. Criminal Prosecution
  26.2.7. A Final Note on Criminal Actions
cron file
  9.2.2.1. Simple listing
  11.5.1.4. Filename attacks
  11.5.3.1. crontab entries
  automating backups : 7.3.2. Building an Automatic Backup System
  cleaning up /tmp directory : 25.2.4. /tmp Problems
  collecting login times : 10.1.1. lastlog File
  symbolic links in : 10.3.7. Other Logs
  system clock and : 17.3.14. Network Time Protocol (NTP) (UDP Port 123)
  uucp scripts in : 15.6.2. Automatic Execution of Cleanup Scripts
crontab file : 15.6.2. Automatic Execution of Cleanup Scripts
Crypt Breaker's Workbench (CBW) : 6.6.1.1. The crypt program
crypt command/algorithm
  6.4.1. Summary of Private Key Systems
  6.6.1. UNIX crypt: The Original UNIX Encryption Command
  6.6.1.3. Example
  8.6. The UNIX Encrypted Password System
  18.3.3. Setting Up Web Users and Passwords
crypt function
  8.6. The UNIX Encrypted Password System
  8.6.1. The crypt() Algorithm
  8.8.7. Algorithm and Library Changes
  23.5. Tips on Using Passwords
crypt16 algorithm : 8.6.4. Crypt16() and Other Algorithms
cryptography
  6. Cryptography
  6.7.2. Cryptography and Export Controls
  14.4.4.2. Protection against eavesdropping
  checklist for : A.1.1.5. Chapter 6: Cryptography
  checksums : 6.5.5.1. Checksums
  digital signatures : (see digital signatures)
  export laws concerning : 6.7.2. Cryptography and Export Controls
  Message Authentication Codes (MACs) : 6.5.5.2. Message authentication codes
  message digests : (see message digests)
  PGP : (see PGP)
  private-key
    6.4. Common Cryptographic Algorithms
    6.4.1. Summary of Private Key Systems
  public-key
    6.4. Common Cryptographic Algorithms
    6.4.2. Summary of Public Key Systems
    6.4.6. RSA and Public Key Cryptography
    6.4.6.3. Strength of RSA
    6.5.3. Digital Signatures
    18.3. Controlling Access to Files on Your Server
    18.6. Dependence on Third Parties
  references on : D.1.5. Cryptography Books
  and U.S. patents : 6.7.1. Cryptography and the U.S. Patent System
csh (C shell)
  5.5.2. Problems with SUID
  11.5.1. Shell Features
  23.2. Tips on Avoiding Security-related Bugs
  C.5.3. Running the User's Shell
  (see also shells)
  autologout variable : 12.3.5.1. Built-in shell autologout
  history file : 10.4.1. Shell History
  uucp command : 15.1.1.1. uucp with the C shell
.cshrc file
  11.5.2.2. .cshrc, .kshrc
  12.3.5.1. Built-in shell autologout
  24.4.1.6. Changes to startup files
CSI (Computer Security Institute) : F.1.3. Computer Security Institute (CSI)
CSLIP (Compressed SLIP) : 16.2. IPv4: The Internet Protocol Version 4
ctime
  5.1.2. Inodes
  5.1.5. File Times
  5.2.1. chmod: Changing a File's Permissions
  7.4.7. inode Modification Times
  9.2.3. Checksums and Signatures
cu command
  14.5. Modems and UNIX
  14.5.3.1. Originate testing
  14.5.3.3. Privilege testing
  -l option : 14.5.3.1. Originate testing
culture, computer security : D.1.10. Understanding the Computer Security "Culture"
current directory : 5.1.3. Current Directory and Paths
Customer Warning System (CWS) : F.3.4.34. Sun Microsystems customers

Search | Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Copyright © 1999 O'Reilly & Associates, Inc. All Rights Reserved.