Top: Publications: Papers

Intrusion_Detection

• TCP Wrapper
  Venema, Wietse; Gzip'd Postscript; 13k ``Wietse's paper describing his TCP Wrapper concept, the basis for the TCP Wrappers security and logging suite.
  
• The COPS Security Checker System
  Farmer & Spafford; 1994; GZip'd Postscript; 45k ``The original Usenix paper from 1990 republished by CERT in 1994.
  
• The corporate threat posed by email Trojans
  Describing what Trojans are and why they pose a danger to corporate networks, this paper discusses the need and method to protect your network from the threat of Trojans.
  
• There be Dragons
  Bellovin, Steven M.; 1992; GZip'd Postscript; 58k ``Another Bellovin paper discussing the various attacks made on att.research.com. This paper is also the source for this page's title.
  
• Thinking About Firewalls
  Ranum, Marcus; Gzip'd Postscript; 30k ``A general overview of firewalls, with tips on how to select one to meet your needs.
  
• Unix Security Checklist
  AUSCERT, Australian Computer Emergency Response Team; 1995; ASCII Text; 89k ``A comprehensive checklist for securing your Unix box.
  
• VPN Labs
  VPN Labs is an open community for researching, reviewing, and discussing Virtual Private Networks. Find a VPN solution, learn about key VPN topics, download VPN and firewall software.
  
• Why Bayesian filtering is the most effective anti-spam technology
  This white paper describes how Bayesian filtering works and explains why it is the best way to combat spam.
  
• Why one virus engine is not enough
  This white paper explains the importance of response time, shows the response time differences between virus engines, and explains why having multiple scanners at mail server level decreases the average response time and therefore the chance of virus infection.
  
• Why you need an email exploit detection engine
  This white paper explains what email exploits are, provides examples of common email exploits, and discusses why a non signature-based approach (i.e., not a virus engine) is needed to protect against email exploits.
  

[ 1 2 3 4 ]