E-Mail Virus Protection Handbook

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9781928994237 | 1928994237
Cover: Paperback
Copyright: 12/6/2000

eBook

Available Instantly

Online: 1825 Days

Downloadable: Lifetime Access

*To support the delivery of the digital material to you, a digital delivery fee of $3.99 will be charged on each digital item.

$50.34*

A guide for systems administrators and end-users to protecting their systems from e-mail viruses. Shows how to secure an operating system from attack by knowing what is lurking in the e-mail through a better understanding of the e-mail server systems, clients, and servers involved. Softcover.

Introduction

xxvi

Understanding the Threats: E-mail Viruses, Trojans, Mail Bombers, Worms, and Illicit Servers

(30)

Introduction

(1)

Essential Concepts

(4)

Servers, Services, and Clients

(1)

Authentication and Access Control

(1)

Hackers and Attack Types

(1)

What Do Hackers Do?

(1)

Attack Types

(2)

Overview of E-mail Clients and Servers

(3)

Understanding a Mail User Agent and a Mail Transfer Agent

(2)

The Mail Delivery Agent

(1)

When Are Security Problems Introduced?

(1)

History of E-mail Attacks

(5)

The MTA and the Robert Morris Internet Worm

(1)

MDA Attacks

(1)

Analyzing Famous Attacks

(2)

Case Study

(1)

Learning from Past Attacks

(1)

Viruses

(1)

Worms

(2)

Types of Worms

(1)

Trojans

(1)

Illicit Servers

(2)

Differentiating between Trojans and Illicit Servers

(1)

E-mail Bombing

(1)

Sniffing Attacks

(2)

Carnivore

(1)

Spamming and Security

(1)

Common Authoring Languages

(1)

Protecting Your E-mail

(5)

Protecting E-mail Clients

(1)

Third-party Applications

(1)

Encryption

(3)

Hash Encryption and Document Signing

(1)

Protecting the Server

(1)

Summary

(1)

FAQs

(2)

Securing Outlook 2000

(44)

Introduction

(1)

Common Targets, Exploits, and Weaknesses

(6)

The Address Book

(1)

The Mail Folders

(1)

Visual Basic Files

(1)

Attacks Specific to This Client

(1)

No Attachment Security

(1)

Default Settings Are Not Secure

(1)

Zone Security

(1)

Word 2000 as the Outlook E-mail Editor

(1)

Security Updates

(3)

Enabling Filtering

(2)

Junk E-mail

(2)

Filtering Keywords

(1)

Mail Settings and Options

(26)

HTML Messages

(1)

Zone Settings

(2)

Attachment Security

(3)

Attachment Security After Applying Outlook E-mail Security Update

(3)

Enabling S/MIME

(2)

Why You Should Use Public Key Encryption

(1)

Installing and Enabling Pretty Good Privacy (PGP)

(1)

Installing PGP

(4)

Understanding Public Key Encryption

(3)

Generating a Key Pair

(2)

Exchanging Keys

(2)

Key Distribution Sites

(1)

Summary

(1)

FAQs

(4)

Securing Outlook Express 5.0 and Eudora 4.3

(44)

Introduction

(1)

Outlook Express for Windows

(9)

Security Settings

(1)

Secure Mail

(2)

Security Zones

(2)

Attachments

(3)

Outlook Express for Macintosh

(6)

Junk Mail Filter

(3)

Message Rules

(1)

Attachments

(1)

Case Study: Automated Virus Scanning of Mail Attachments

(1)

Eudora for Windows and Macintosh

(4)

Security

(1)

Attachments

(2)

Filtering

(2)

Enabling PGP for both Outlook Express and Eudora

(18)

Sending and Receiving PGP-Secured Messages

(1)

Eudora for Windows

(4)

Outlook Express for Windows

101

(2)

Eudora for Macintosh

103

(2)

Outlook Express for Macintosh

105

(2)

Automatic Processing of Messages

107

(1)

File Attachments and PGP

108

(1)

Case Study: Securing File Attachments with PGP

109

(4)

Summary

113

(2)

FAQs

115

(4)

Web-based Mail Issues

119

(28)

Introduction

120

(2)

Choices in Web-based E-mail Services

121

(1)

Why Is Web-based E-mail So Popular?

122

(1)

The Cost of Convenience

122

(17)

Specific Weaknesses

124

(1)

Internet Architecture and the Transmission Path

124

(2)

Reading Passwords

126

(2)

Case Study

128

(3)

Specific Sniffer Applications

131

(2)

Code-based Attacks

133

(1)

The PHF Bug

134

(1)

Hostile Code

135

(1)

Taking Advantage of System Trusts

135

(1)

Cracking the Account with a ``Brute Force'' or Dictionary Application

136

(1)

Physical Attacks

137

(1)

Cookies and Their Associated Risks

138

(1)

Solving the Problem

139

(4)

Using Secure Sockets Layer (SSL)

139

(1)

Secure HTTP

139

(1)

Practical Implementations

140

(1)

Local E-mail Servers

141

(1)

Using PGP with Web-based E-mail

141

(1)

Making Yourself Anonymous

142

(1)

Summary

143

(1)

FAQs

144

(3)

Client-Side Anti-Virus Applications

147

(48)

Introduction

148

(41)

McAfee VirusScan 5

150

(1)

Availability of VirusScan

151

(1)

Updates of Virus Definition Files

152

(1)

Installation of VirusScan 5

152

(4)

Configuration of VirusScan 5

156

(7)

Norton AntiVirus 2000

163

(1)

Availability of Norton AntiVirus 2000

163

(1)

Updates of Norton AntiVirus 2000 Definition Files

164

(1)

Installation of Norton AntiVirus 2000

165

(2)

Configuration of Norton AntiVirus 2000

167

(9)

Trend Micro PC-cillin 2000

176

(1)

Availability of Trend Micro PC-cillin 2000

176

(1)

Updates of PC-cillin Virus Definition Files

177

(1)

Installation of Trend Micro PC-cillin 2000

178

(3)

Configuration of Trend Micro PC-cillin 2000

181

(4)

Trend PC-cillin 2000 Configuration Settings

185

(3)

Trend Micro PC-cillin 2000 Links

188

(1)

Summary

189

(1)

FAQs

190

(5)

Mobile Code Protection

195

(32)

Introduction

196

(5)

Dynamic E-mail

196

(1)

Active Content

197

(1)

Taking Advantage of Dynamic E-mail

197

(1)

Composing an HTML E-mail

198

(1)

Inserting Your Own HTML File

198

(2)

Sending an Entire Web Page

200

(1)

Dangers

200

(1)

No Hiding Behind the Firewall

201

(1)

Mobile Code

201

(1)

Java

202

(9)

Security Model

203

(1)

Playing in the Sandbox

203

(2)

Playing Outside the Sandbox

205

(1)

Points of Weakness

205

(1)

Background Threads

206

(1)

Hogging System Resources

206

(1)

I Swear I Didn't Send That E-mail

207

(1)

Scanning for Files

207

(1)

How Hackers Take Advantage

207

(1)

Spam Verification

207

(1)

Theft of Processing Power

208

(1)

Unscrupulous Market Research

208

(1)

Applets Are Not That Scary

208

(1)

Precautions You Can Take

208

(3)

JavaScript

211

(4)

Security Model

211

(1)

Points of Weakness

212

(1)

How Hackers Take Advantage

213

(1)

Web-Based E-mail Attacks

213

(1)

Are Plug-in Commands a Threat?

213

(1)

Social Engineering

213

(1)

Precautions to Take

214

(1)

ActiveX

215

(6)

Security Model

215

(1)

Safe for Scripting

216

(1)

Points of Weakness

217

(1)

How Hackers Can Take Advantage

218

(1)

Preinstalled ActiveX Controls

218

(1)

Bugs Open the Door

219

(1)

Intentionally Malicious ActiveX

219

(1)

My Mistake...

220

(1)

Trojan Horse Attacks

220

(1)

Precautions to Take

220

(1)

VBScript

221

(4)

Security Model

222

(1)

Points of Weakness

222

(1)

VBScript, Meet ActiveX

222

(1)

How Hackers Take Advantage

223

(1)

Social Engineering Exploits

223

(1)

VBScript-ActiveX Can Double Team Your Security

223

(1)

Precautions to Take

224

(1)

Summary

225

(1)

FAQs

226

(1)

Personal Firewalls

227

(68)

Introduction

228

(1)

What Is a Personal Firewall?

228

(8)

Blocks Ports

230

(1)

Block IP Addresses

230

(1)

Access Control List (ACL)

231

(1)

Execution Control List (ECL)

232

(1)

Intrusion Detection

233

(1)

Personal Firewalls and E-mail Clients

234

(1)

Levels of Protection

235

(1)

False Positives

235

(1)

Network Ice BlackICE Defender 2.1

236

(12)

Installation

236

(3)

Configuration

239

(9)

E-mail and BlackICE

248

(1)

Aladdin Networks' eSafe, Version 2.2

248

(21)

Installation

248

(4)

Configuration

252

(17)

E-mail and ESafe

269

(1)

Norton Personal Firewall 2000 2.0

269

(14)

Installation

270

(4)

Configuration

274

(9)

ZoneAlarm 2.1

283

(9)

Installation

284

(3)

Configuration

287

(4)

E-mail and ZoneAlarm

291

(1)

Summary

292

(1)

FAQs

292

(3)

Securing Windows 2000 Advanced Server and Red Hat Linux 6 for E-mail Services

295

(38)

Introduction

296

(1)

Updating the Operating System

296

(3)

Microsoft Service Packs

296

(1)

Red Hat Linux Updates and Errata Service Packages

297

(2)

Disabling Unnecessary Services and Ports

299

(6)

Windows 2000 Advanced Server---Services to Disable

299

(1)

The Server Service

300

(2)

Internet Information Services (IIS)

302

(2)

Red Hat Linux---Services to Disable

304

(1)

Ineted.conf

304

(1)

Rlogin

305

(1)

Locking Down Ports

305

(6)

Well-Known and Registered Ports

306

(2)

Determining Ports to Block

308

(1)

Blocking Ports in Windows

308

(2)

Blocking Ports in Linux

310

(1)

Inetd Services

310

(1)

Stand-Alone Services

310

(1)

Maintenance Issues

311

(16)

Microsoft Service Pack Updates, Hot Fixes, and Security Patches

312

(1)

Case Study

313

(1)

Red Hat Linux Errata: Fixes and Advisories

314

(2)

Case Study

316

(1)

Windows Vulnerability Scanner (ISS System Scanner)

317

(3)

Linux Vulnerability Scanner (WebTrends Security Analyzer)

320

(5)

Logging

325

(1)

Windows 2000 Advanced Server

325

(1)

Linux

325

(1)

Common Security Applications

326

(1)

Firewall Placement

327

(3)

Summary

330

(1)

FAQs

331

(2)

Microsoft Exchange Server 5.5

333

(34)

Introduction

334

(13)

Securing the Exchange Server from Spam

334

(1)

Configuring the IMS To Block E-mail Attacks

335

(6)

Exchange and Virus Attacks: Myths and Realities

341

(2)

Learning from Recent Attacks

343

(2)

Case Study: Preparing for Virus Attacks

345

(2)

Exchange Maintenance

347

(4)

Service Packs

347

(4)

Plug-ins and Add-ons

351

(1)

Third-party Add-ons

351

(12)

Microsfot Utilities

352

(1)

Content Filtering

353

(3)

Case Study: Content Scanning

356

(1)

Attachment Scanning

357

(2)

Recovery

359

(1)

Backing Up Data

360

(3)

Restoring Data

363

(1)

Summary

363

(2)

FAQs

365

(2)

Sendmail and IMAP Security

367

(30)

Introduction

368

(1)

Sendmail and Security: A Contradiction in Terms?

368

(13)

Sendmail's History

368

(2)

Threats to SendMail Security

370

(1)

Anatomy of a Buffer Overflow

370

(1)

A Buffer Overflow Illustrated

371

(1)

Sendmail and the Root Privilege

372

(1)

Fixes

373

(1)

Stay Current

373

(1)

Stay Informed

374

(1)

Protect Your Resources

375

(1)

Minimize Risk

375

(2)

Alternatives: Postfix and Qmail

377

(1)

Postfix

377

(1)

Qmail

378

(1)

Comparing Your Options

379

(1)

Configuring Sendmail

380

(1)

Internet Message Access Protocol (IMAP)

381

(10)

The IMAP Advantage

381

(2)

Understanding IMAP Implementations

383

(1)

UW IMAP

383

(1)

Cyrus IMAP

384

(1)

One IMAP, Many Choices

385

(1)

Administering the Server

385

(1)

The Users

385

(1)

The Mail Store

386

(1)

Protecting the Messages

387

(1)

Strengthening Authentication

387

(1)

Securing Access

388

(2)

From the Client Side

390

(1)

IMAP Summary

390

(1)

Recovery

391

(3)

Backing Up Data

392

(1)

Restoring Data

393

(1)

The Bottom Line on Backup

393

(1)

Summary

394

(1)

FAQs

394

(3)

Develoying Server-side E-mail Content Filters and Scanners

397

(40)

Introduction

398

(1)

Overview of Content Filtering

398

(6)

Filtering by Sender

403

(1)

Filtering by Receiver

403

(1)

Subject Headings and Message Body

404

(1)

Overview of Attachment Scanning

404

(4)

Attachment Size

407

(1)

Attachment Type (Visual Basic, Java, ActiveX)

407

(1)

McAfee GroupShield

408

(11)

Installation of GroupShield

408

(4)

Configuration

412

(6)

Specific Settings

418

(1)

Trend Micro ScanMail for Exchange Server

419

(6)

Installation of ScanMail

419

(2)

Configuration

421

(1)

Specific Settings

422

(2)

Additional ScanMail Offerings

424

(1)

Content Technologies' MAILsweeper for Exchange 5.5

425

(3)

Installation of MAILsweeper

425

(2)

Configuration

427

(1)

Specific Settings

428

(1)

Firewall and E-mail Content Scanning

428

(3)

Content Technologies' MIMEsweeper for CheckPoint's Firewall-1

429

(1)

Axent Raptor Firewall

430

(1)

Attack Detection and System Scanning

431

(4)

Attacks

431

(2)

Real-time, Third-party Services

433

(1)

Evinci

434

(1)

Security

434

(1)

Summary

435

(1)

FAQs

435

(2)

Appendix: Secrets

437

(10)

Lesser-known Shortcuts

438

(1)

Under-documented Features and Functions

438

(3)

Disable an ActiveX Control

440

(1)

For Experts Only (Advanced features)

441

(3)

Web Pages on Mobile Code Security Topics

441

(1)

Outlook Web Access (OWA)

442

(1)

Using SendMail To Refuse E-mails with the Love Letter Virus

442

(2)

Troubleshooting and Optimization Tips

444

(3)

Index

447

Please wait while the item is added to your bag...

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

E-Mail Virus Protection Handbook

Summary

Table of Contents

Supplemental Materials

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

E-Mail Virus Protection Handbook

Summary

Table of Contents

Supplemental Materials

Digital License