Firewalls : A Complete Guide

, by Goncalves, Marcus

Write a Review

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9780071356398 | 0071356398
Cover: Paperback
Copyright: 11/1/1999

Sorry, this item is currently not available.

Summary

Author Biography

Supplemental Materials

Huge market - anyone with a web presence is concerned about network security. All corporate networks use firewall protection.

Preface

xvii

Acknowledgments

xxiii

Part 1 Introducing TCP/ IP and the Need for Security: Firewalls

(228)

Internetworking Protocols and Standards: An Overview

(46)

Internet Protocol (IP)

(6)

How IP Addressing Works

(1)

IP Security Risks

(4)

User Datagram Protocol (UDP)

(3)

Attacking UDP Services: SATAN at Ease

(1)

ISS for UNIX and Windows NT

(2)

Transmission Control Protocol (TCP)

(4)

IP Addresses

(4)

Extending IP Addresses Through CIDR

(6)

TCP/IP Security Risks and Countermeasures

(5)

IPSEC --- An IETF IP Security Countermeasure

(1)

IPSO --- A DOD IP Security Countermeasure

(1)

Routing Information Protocol (RIP)

(1)

MBONE --- The Multicast Backbone

(3)

Internet Control Message Protocol (ICMP)

(1)

Internet Group Management Protocol (IGMP)

(1)

Open Shortest-Path First (OSPF)

(1)

Border Gateway Protocol Version 4 (BGP-4)

(1)

Address Resolution Protocol

(1)

Reverse Address Resolution Protocol (RARP)

(1)

Security Risks of Passing IP Datagrams Through Routers

(1)

Simple Network Management Protocol (SNMP)

(1)

Watch Your ISP Connection

(1)

The Internet Protocol Next Generation or IPv6

(3)

Address Expansion

(1)

Automatic Configuration of Network Devices

(1)

Security

(1)

Real-Time Performance

(1)

Multicasting

(1)

IPv6 Security

(1)

Network Time Protocol (NTP)

(1)

Dynamic Host Configuration Protocol (DHCP)

(1)

Windows Sockets

(1)

Domain Name System (DNS)

(1)

Limiting DNS Information

(1)

Firewalls Concepts

(8)

The Flaws in Firewalls

(1)

Fun with DMZs

(1)

Authentication Issues

(1)

Trust at the Perimeter

(1)

Intranets

(2)

Basic Connectivity

(28)

What Happened to TTY

(2)

What is the Baudot Code?

(1)

UNIX to UNIX CoPy (UUCP)

(2)

SLIP and PPP

(1)

Rlogin

(2)

Virtual Terminal Protocol (Telnet)

(11)

Columbia University's Kermit: A Secure and Reliable Telnet Server

(6)

Telnet Services Security Considerations

(1)

A Systems Manager Approach to Network Security

(3)

Telnet Session Security Checklist

(1)

Trivial File Transfer Protocol (TFTP)

(2)

TFTP Security Considerations

(1)

File Transfer Protocol (FTP)

(1)

Some of the Challenges of Using Firewalls

(4)

Increasing Security on IP Networks

(1)

Cryptography: Is It Enough?

(64)

Introduction

(1)

Symmetric Key Encryption (Private Keys)

(13)

Data Encryption Standard (DES)

(2)

International Data Encryption Algorithm (IDEA)

(2)

CAST

(1)

Skipjack

(6)

RC2/RC4

(1)

Asymmetric Key Encryption/Public Key Encryption

(3)

RSA

(1)

Digital Signature Standard (DSS)

(1)

Message Digest Algorithms

(4)

MD2, MD4, and MD5

(4)

Secure Hash Standard/Secure Hash Algorithm (SHS/SHA)

100

(1)

Certificates

100

(10)

Certificate Servers

101

(9)

Key Management

110

(12)

Kerberos

111

(10)

Key-Exchange Algorithms (KEA)

121

(1)

Cryptanalysis and Attacks

122

(5)

Ciphertext-Only Attack

123

(1)

Known-Plaintext Attack

123

(1)

Chosen-Plaintext Attack

123

(1)

Adaptive-Chosen-Plaintext Attack

123

(1)

Man-in-the-Middle Attack

124

(1)

Chosen-Ciphertext Attack

124

(1)

Chosen-Key Attack

124

(1)

Rubber-Hose Cryptanalysis

125

(1)

Timing Attack

125

(2)

Cryptography Applications and Application Programming Interfaces (APIs)

127

(14)

Data Privacy and Secure Communications Channel

128

(2)

Authentication

130

(1)

Authenticode

131

(1)

NT Security Support Provider Interface (SSPI)

132

(3)

Microsoft Cryptographic API (CryptoAPI)

135

(6)

Firewalling Challenges: The Basic Web

141

(32)

HTTP

142

(11)

The Basic Web

144

(3)

What to Watch for on the HTTP Protocol

147

(1)

Taking Advantage of S-HTTP

148

(1)

Using SSL to Enhance Security

149

(1)

Be Careful When Caching the Web!

150

(1)

Plugging the Holes: A Configuration Checklist

151

(1)

A Security Checklist

151

(1)

Novell's HTTP: Better Be Careful

152

(1)

Watch for UNIX-Based Web Server Security Problems

152

(1)

URI/URL

153

(3)

File URLs

154

(1)

Gopher URLs

155

(1)

News URLs

155

(1)

Partial URLs

155

(1)

CGI

156

(17)

Firewalling Challenges: The Advanced Web

173

(40)

Extending the Web Server: Increased Risks

174

(22)

ISAPI

175

(8)

NSAPI

183

(2)

Servlets

185

(3)

Server-Side ActiveX Server

188

(2)

Web Database Gateways

190

(2)

Security of E-Mail Applications

192

(2)

Macromedia's Shockwave

194

(2)

Code in Web Pages

196

(17)

Java Applets

197

(4)

ActiveX Controls and Security Threats

201

(8)

Adopting an Object-Oriented Technology

209

(4)

The API's Security Holes and Its Firewall Interactions

213

(16)

Sockets

214

(5)

BSD Sockets

218

(1)

Java APIs

219

(1)

Java Can Help Unite Diverse Platforms in Manufacturing and Commercial Environments

220

(22)

Java Can Help Integrate ERP with Controls

222

(1)

Java Can Help Integrate ERP with Controls

223

(1)

Java Computing Benefits for Manufacturing

223

(2)

JCAF Simplifies Manufacturing Applications Development

225

(1)

JCAF Simplifies Manufacturing Applications Development

226

(1)

Providing Back-End Services via Middleware

227

(1)

Java-Enabled Applications Can Help Unify a Manufacturing Enterprise

228

(5)

Can Jini Fulfill Manufacturing and Enterprise Wishes?

233

(2)

Enterprise JavaBeans Offer Accessibility and Scalability

235

(3)

Java/CORBA Versus DCOM

238

(1)

Key Java Product Suppliers

239

(3)

Perl Modules

242

(2)

CGI Scripts

244

(1)

ActiveX

245

(2)

ActiveX DocObjects

246

(1)

Distributed Processing

247

(1)

XDR/RPC

248

(1)

RPC

248

(1)

COM/DCOM

249

Part 2 Firewall Implementations and Limitations

229

(190)

What is an Internet/Intranet Firewall After All?

253

(40)

What Are Firewalls After All?

254

(2)

The Purpose of a Firewall

256

(2)

The Firewall Role of Protection

257

(1)

Firewalls Providing Access Control

258

(1)

The Security Role of a Firewall

258

(1)

Promoting Privacy with a Firewall

259

(1)

Advantages and Disadvantages of Firewalls

260

(1)

Access Restrictions

260

(1)

Back-Door Challenges: The Modem Threat

260

(1)

Risk of Inside Attacks

261

(1)

Firewall Components

261

(10)

Network Security Policy

261

(7)

Packet Filtering

268

(3)

Procuring a Firewall

271

(7)

Needs Assessment

271

(2)

Buying a Firewall

273

(1)

Building a Firewall

274

(1)

Setting It Up

275

(3)

General Considerations When Installing a Firewall

278

(4)

Defining a Security Policy with a Firewall Product

279

(3)

Administrating a Firewall

282

(3)

Management Expertise

283

(1)

System Administration

284

(1)

Circuit-Level Gateways and Packet Filters

285

(1)

Packet Filtering

285

(1)

Application Gateways

285

(1)

IP-Level Filtering

286

(1)

Firewalling with Cyberwalls

286

(7)

Why Should You Consider Cyberwalls?

288

(5)

How Vulnerable Are Internet Services?

293

(42)

Protecting and Configuring Vulnerable Services

294

(20)

Electronic Mail Security Threats

294

(1)

Simple Mail Transfer Protocol (SMTP)

295

(6)

Post Office Protocol (POP)

301

(2)

Multipurpose Internet Mail Extensions (MIME)

303

(11)

File Transferring Issues

314

(5)

File Transfer Protocol (FTP)

315

(3)

Trivial File Transfer Protocol (TFTP)

318

(1)

File Service Protocol (FSP)

318

(1)

UNIX-to-UNIX Copy Protocol (UUCP)

318

(1)

The Network News Transfer Protocol (NNTP)

319

(2)

The Web and the HTTP Protocol

321

(3)

Proxying HTTP

322

(1)

HTTP Security Holes

323

(1)

Security of Conferencing

324

(1)

Watch These Services

325

(7)

Gopher

325

(1)

Finger

326

(1)

Whois

327

(1)

Talk

327

(1)

IRC

328

(1)

DNS

328

(1)

Network Management Station (NMS)

329

(1)

Simple Network Management Protocol (SNMP)

329

(1)

traceroute

330

(1)

Network File System (NFS)

331

(1)

Confidentiality and Integrity

332

(3)

Setting Up a Firewall Security Policy

335

(22)

Assessing Your Corporate Security Risks

336

(7)

Data Security

340

(3)

Understanding and Estimating the Threat

343

(3)

The Virus Threat

343

(1)

Outside Threats

344

(2)

Inside Threat

346

(1)

A Word About Security Holes

346

(2)

Setting Up a Security Policy

348

(9)

A Security Policy Template

349

(8)

Putting It Together: Firewall Design and Implementation

357

(30)

Reviewing the Basics

358

(3)

Selecting a Firewall

361

(2)

Considerations About the Security Policy

363

(4)

Issues to Consider About Physical Security

365

(1)

Issues to Consider About Access Control

365

(1)

Issues to Consider About Authentication

366

(1)

Issues to Consider About Encryption

366

(1)

Issues to Consider About Security Auditing

366

(1)

Issues to Consider About Training

367

(1)

Responding to an Incident: Your Network Under Attack

367

(1)

Dealing with an Incident

368

(5)

Network Information Service As a Cracking Tool

370

(1)

Remote Login/Shell Service As a Cracking Tool

370

(1)

Network File System As a Cracking Tool

371

(1)

File Transfer Protocol Service As a Cracking Tool

372

(1)

To Do List in Case of an Incident

373

(3)

Assess the Situation

373

(1)

Cut Off the Link

374

(1)

Analyze the Problem

375

(1)

Take Action

375

(1)

Catching an Intruder

376

(1)

Reviewing Security

376

(1)

Prosecuting the Hacker: What the Legal System Has to Say

377

(7)

What the Legal System Has to Say

379

(2)

The Current Regulations

381

(3)

Protecting Your Corporate Site

384

(3)

Preventing Break-Ins at Your Site

385

(2)

Proxy Servers

387

(16)

SOCKS

396

(3)

Tcpd, the TCP Wrapper

399

(4)

Setting Up and Configuring the Proxy Server

399

(4)

Firewall Maintenance

403

(12)

Keeping Your Firewall in Tune

406

(2)

Monitoring Your System

408

(2)

Monitoring the Unmonitored Threats

409

(1)

Preventive and Curative Maintenance

410

(3)

Preventing Security Breaches on Your Firewall

412

(1)

Identifying Security Holes

413

(1)

Recycling Your Firewall

413

(2)

Firewall Toolkits and Case Studies

415

(4)

Case Studies: Implementing Firewalls

417

(1)

Firewalling a Big Organization: Application-Level Firewall and Package Filtering, a Hybrid System

417

(1)

Firewalling a Small Organization: Packet Filtering or Application-Level Firewall, a Proxy Implementation

418

(1)

Firewalling in a Subnet Architecture

418

(1)

Part 3 Firewall Resource Guide

419

(212)

Types of Firewalls and Products on the Market

421

(210)

Check Point's Firewall-1 --- Stateful Inspection Technology

422

(14)

FireWall-1's Inspection Module

423

(2)

Stateful Inspection: Under the Hood

425

(11)

CYCON's Labyrinth Firewall --- The ``Labyrinth-like'' System

436

(14)

An Integrated Stateful Inspection

438

(12)

NetGuard's Guardian Firewall System --- MAC Layer Stateful Inspection

450

(8)

Unprecedented Internet Management Tools

452

(6)

CyberGuard's CyberGuard Firewall --- Hardening the OS

458

(9)

The Trusted Operating System

461

(1)

Intuitive Remote Graphical User Interface (GUI)

462

(1)

Dynamic Stateful Rule Technology

462

(4)

Certifiable Technology

466

(1)

Systems Requirements

466

(1)

Raptor's Firewall --- An Application-Level Architecture

467

(14)

Enforcing Security at All Levels of the Network

468

(6)

Management Enhancements of Raptor Firewall 6.0 for NT

474

(1)

Reliance on Dedicated Security Proxies

475

(1)

Using Raptor's Firewalls Eagle Family

476

(5)

Systems Requirements

481

(1)

Milkyway's SecurIT FIREWALL, a Factory-Hardened BSDI Kernel

481

(14)

A Bulletproof Firewall

483

(10)

Systems Requirements

493

(2)

WatchGuard Technologies' Watchguard Firebox System --- Combining All Major Firewall Approaches into a Firebox

495

(15)

WatchGuard at a Glance

496

(2)

WatchGuard Security Management System

498

(2)

WatchGuard's Firebox

500

(1)

WatchGuard's Global Console

501

(1)

WatchGuard Graphical Monitor

502

(1)

The WatchGuard Reporting System

503

(2)

WatchGuard WebBlocker

505

(1)

WatchGuard WebBlocker

506

(1)

WatchGuard SchoolMate

507

(1)

WatchGuard's VPN Wizard

508

(1)

Systems Requirements

509

(1)

AltaVista Software's Firewall 98 --- The Active Firewall

510

(9)

AltaVista Firewall: Always in Motion

510

(2)

Services: A Matter of Security

512

(1)

Security: Supporting SSL

513

(1)

Management Features: Remote Management Through Tunneling

514

(1)

URL and Java Blocking

515

(1)

Enhanced Proxy

515

(1)

Powerful and Flexible Authentication

516

(1)

Dual DNS Server

517

(1)

DMZ Support

517

(1)

Configuration

518

(1)

Hardware Requirements

518

(1)

ANS Communication's InterLock Firewall, a Dual-Homed Application Level Gateway

519

(11)

ANS InterLock

520

(2)

ANS InterLock Service

522

(1)

InterLock's Access Controls

523

(4)

InterLock's Access Management

527

(1)

ANS InterLock Service for Intrusion Detection

528

(2)

Summary of InterLock's Security Features

530

(1)

Global Technology's Gnat Box Firewall --- A Firewall in a Floppy Disk

530

(16)

Getting to Know GNAT Box Firewall

532

(4)

Standard Features

536

(1)

What Is the GNAT Box Firewall?

537

(9)

Network-1 Software and Technology's Firewall/Plus, a High-Performance Multi-Protocol Firewall

546

(14)

About Firewall/Plus

547

(2)

Installation, Setup, and Use of FireWall/Plus

549

(1)

Selecting a Default Rule Base for FireWall/Plus

550

(1)

Performance Statistics

551

(1)

Additional and Advanced Filtering

551

(4)

Summary of Features of FireWall/Plus

555

(1)

Network-1 CyberWall/PLUS

555

(4)

Systems Requirements

559

(1)

Trusted Information Systems's Gauntlet Internet, an Application Proxy-Based Firewall

560

(6)

TIS Gauntlet Internet Firewalls

561

(2)

A Firewall Transparent to the User

563

(2)

Extending Firewall Protection to Remote Offices

565

(1)

Gauntlet PC Extender

565

(1)

Technologic's Interceptor Firewall, an Intuitive Firewall

566

(9)

An Overview of Technologic's Interceptor

567

(2)

Interceptor's Components

569

(5)

Systems Requirements

574

(1)

Sun's Sunscreen EFS Firewall, a Stateful Inspection Firewall

575

(12)

The SunScreen Model

575

(3)

Secure Access Control

578

(1)

Ease of Administration

579

(1)

SunScreen SPF-200 and SunScreen EFS Security Solutions

579

(2)

SunScreen SPF-200

581

(1)

SunScreen EFS

582

(2)

System Requirements

584

(1)

Solstice FireWall-1 3.0

584

(3)

Secure Computing's Borderware Firewall: Combining Packet Filters and Circuit-Level Gateways

587

(12)

The BorderWare Firewall Server

588

(5)

BorderWare Application Services

593

(4)

Security Features

597

(2)

Ukiah Software's NetRoad FireWALL: A Multi-Level Architecture Firewall

599

(8)

NetRoad FireWALL for Windows NT and NetWare

599

(5)

NetWare and NT Firewall Support

604

(1)

The Future Evolution of the NetRoad FireWALL Platform

605

(1)

System Requirements

606

(1)

Secure Computing's Sidewinder Firewall: A Type Enforcement Security

607

(11)

The Patented Type Enforcement Security

608

(3)

Remote Management

611

(1)

Access Controls

611

(4)

Extensive Event Monitoring

615

(1)

Advanced Filtering

616

(2)

IBM's eNetwork Firewall: Another Type Enforcement Security

618

(13)

The IBM Firewall V3.1 for AIX

618

(7)

IBM's Main Firewall Features

625

(2)

Communicating Through Virtual Private Networks (VPNs)

627

(1)

Administering the Firewall

628

(1)

System Requirements

629

(2)

Appendix A List of Firewall Resellers and Related Tools

631

(16)

Glossary

647

(16)

Bibliography

663

(4)

Index

667

Please wait while the item is added to your bag...

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

Firewalls : A Complete Guide

Summary

Author Biography

Table of Contents

Supplemental Materials

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

Firewalls : A Complete Guide

Summary

Author Biography

Table of Contents

Supplemental Materials

Digital License