Source: http://www.rediris.es/cert/doc/unixsec/node38.html
Timestamp: 2019-04-21 05:15:02+00:00

Document:
Technical Report L14-4-A, National Security Agency/Central Security Service, Octubre 1985.
Ross J. Anderson and Markus Kuhn.
Tamper resistance - a cautionary note.
In Proceedings of the 2nd USENIX Workshop on Electronic Commerce, pages 1-11. The USENIX Association, Noviembre 1996.
Taimur Aslam, Ivan Krsul, and Eugene H. Spafford.
Use of a taxonomy of security faults.
Technical Report TR-96-051, Purdue University Department of Computer Science, 1996.
Stefan Axelsson, Ulf Lindqvist, Ulf Gustafson, and Erland Jonsson.
An approach to Unix Security Logging.
In Proceedings of the 21st National Information Systems Security Conference, pages 62-75. National Institute of Standards and Technology/National Computer Security Center, Octubre 1998.
Computer security threat monitoring and surveillance.
Technical report, James P. Anderson Co., Abril 1980.
Communications of the ACM, 37:32-40, Noviembre 1994.
Enviado a la lista cypherpunks@cyberpass.net por William H. Geiger III en septiembre, 1997.
Maximum Security: a hacker´s guide to protecting your Internet site and network.
Maximum Linux Security: a hacker´s guide to protecting your Linux Server and Workstation.
R. J. Anderson, R. M. Needham, and A. Shamir.
Lecture Notes in Computer Science, 1525:73-82, 1998.
Network Scanning Techniques, Noviembre 1999.
Charon: Kerberos Extensions for Authentication over Secondary Networks.
PhD thesis, Department of Electrical Engineering and Computer Science, Massachusetts Institute of Technology, 1993.
Research in intrusion-detection systems: A survey.
Technical Report 98-17, Chalmers University of Technology, Diciembre 1998.
Sheila L. Brand et al.
Technical Report DOD 5200.28-STD, Department of Defense, Diciembre 1985.
Technical Report NCSC-TG-004, National Computer Security Center, Octubre 1988.
Maximum RPM: Taking the Red Hat Package Manager to the limit.
Red Hat Software, Inc., 1997.
F. Bouchier, J.S. Ahrens, and G. Wells.
Laboratory evaluation of the IriScan prototype biometric identifier.
Technical Report SAND96-1033, Sandia National Laboratories, Abril 1996.
Roland Büschkes and Mark Borning.
In Proceedings of Workshop on Intrusion Detection and Network Monitoring. The USENIX Association, Abril 1999.
Michael Beck, Harold Bohme, Mirko Dzladzka, Ulrich Kunitz, Robert Magnus, and Dirk Verworner.
John Barkley, Lisa Carnahan, Karen Olsen, and John Wack.
Improving security in a network environment.
In John Barkley, editor, Security in Open Systems, chapter 10. National Institute of Standards and Technology (NIST), Julio 1994.
Matt Bishop and Michael Dilger.
Checking for race conditions in file accesses.
Computing System, 9(2):131-152, Primavera 1996.
Computer Communications Review, 19(2):32-48, Abril 1989.
In Proceedings of the Third USENIX Security Symposium, pages 1-16. The USENIX Association, Septiembre 1992.
Packets found on an internet.
Computer Communications Review, 23(3):26-31, Julio 1993.
RFC1498: Defending against sequence number attacks, Mayo 1996.
Dirk Balfanz and Edward W. Felten.
Hand-held computers can be better smart cards.
In Proceedings of the 8th USENIX Security Symposium. The USENIX Association, Agosto 1999.
W. Bender, D. Gruhl, N. Morimoto, and A. Lu.
IBM Systems Journal, 35(3,4), 1996.
AIX 4.3 bastion host guidelines, Junio 2001.
How to write a setuid program.
A Security Analysis of the NTP Protocol, 1990.
In D.T. Lindsay and W.L. Price, editors, Proceedings of the 7th International Conference on Information Security, pages 150-158, Mayo 1991.
Anatomy of a proactive password changer.
In Proceedings of USENIX Unix Security III. The USENIX Association, 1992.
Race conditions, files and security flaws; or the tortoise and the hare redux.
Technical Report CSE-95-8, University of California at Davis, 1995.
Matt Bishop and Daniel V. Klein.
Improving system security via proactive password checking.
Computers & Security, 14(3):233-249, 1995.
In Proceedings of the 1st ACM Conference on Computer and Communications Security, pages 9-16. ACM, Noviembre 1993.
Limitations of the Kerberos Authentication System.
In Proceedings of the Winter 1991 USENIX Conference, pages 253-267. The USENIX Association, Enero 1991.
Bill Ball, David Pitts, and William Ball.
Red Hat Linux 7 Unleashed.
Internet Activities Board, Julio 1991.
StackGuard: automatic adaptative detection and prevention of buffer-overflow attacks.
In Proceedings of the 7th USENIX Security Symposium. The USENIX Association, Enero 1998.
Bryan Costales and Eric Allman.
O´Reilly & Associates, 2nd edition, Enero 1997.
O´Reilly & Associates, Marzo 1997.
Vulnerabilidad y seguridad de los sistemas informáticos.
William R. Cheswick and Steven M. Bellovin.
Firewalls and Internet Security: Repelling the wily hacker.
D.B. Cornish and R. V. Clarke.
The Reasoning Criminal: Rational Choice Perspectives on Offending.
G.F. Couloris, J. Dollimore, and T. Kindberg.
Distributed Systems. Concepts and design.
Addison Wesley, 2nd edition, 1994.
Rémy Card, Eric Dumas, and Frack Mével.
Programación Linux 2.0: API de sistema y funcionamiento del núcleo.
Data Remanence in Automated Information Systems.
Technical Report NCSC-TG-025, National Computer Security Center, Septiembre 1991.
CERT Advisory CA-99-02. Trojan Horses.
Technical report, Computer Emergency Response Team, Marzo 1999.
Glosario de términos de Criptología.
Centro Superior de Información de la Defensa, 1991.
Stephen Ciullo and Daniel Hinojosa.
HP-UX kernel tuning and performance guide.
Network (In)Security through IP packet filtering.
In Proceedings of the third USENIX Security Symposium, pages 63-76. The USENIX Association, Septiembre 1992.
An evening with Berferd, in which a cracker is lured, endured, and studied.
In Proceedings of the Winter USENIX Conference. The USENIX Association, Enero 1992.
Andrew Cherry, Mark W. Henderson, William K. Nickless, Robert Olson, and Gene Rackow.
Pass or fail: A new test for password legitimacy, 1992.
Bruce Corbridge, Robert Henig, and Charles Slater.
Packet filtering in an IP router.
In Proceedings of the Fifth LISA Conference, pages 227-232. The USENIX Association, Octubre 1991.
M. Ruschitzka C. Ko and K. Levitt.
In Proceedings of the 1997 IEEE Symposium on Security and Privacy, pages 175-187. IEEE Computer Society, Mayo 1997.
A note on non-secret encryption.
Technical report, CESG, Noviembre 1973.
Computer viruses: theory and experiments.
In 7th DoD/NBS Computer Security Conference Proceedings, pages 240-263, Septiembre 1984.
Simulating Cyber Attacks, Defenses and Consequences.
National Research Council Committee on Information Systems Trustworthiness.
Technical Report 010851-A00, Apollo Computer, Inc. (Hewlett Packard), Junio 1988.
Internetworking with TCP/IP. Volume 1: Principles, Protocols & Architecture.
Prentice Hall, 3rd edition, 1995.
Intrusion Detection Systems buyer´s guide.
In Keith M. Jackson and Jan Hruska, editors, Computer Security Reference Book, chapter 24, pages 311-332. Butterworth-Heinemann, 1992.
Kaare Christian and Susan Richter.
Inside Internet Security: What hackers don´t want you to know.
Crispin Cowan, Perry Wagle, Calton Pu, Steve Beattie, and Jonathan Walpole.
Buffer Overflows: Attacks and Defenses for the Vulnerability of the Decade.
In Proceedings of the SANS 2000 Conference. The SANS Institute, 2000.
O´Reilly & Associates, 1st edition, Noviembre 1995.
How crackers crack passwords, or what passwords to avoid.
Technical Report UCID-21515, Lawrence Livermore National Laboratory, Septiembre 1988.
Phrack Magazine, 7(48), Junio 1996.
Iris recognition for personal identification, 1997.
Recognizing persons by their iris patterns.
In Biometrics: Personal Identification in Networked Society, pages 103-121. Kluwer, 1998.
Examining portscan methods - Analysing Audible Techniques, January 2001.
Drew Dean, Edward W. Felten, and Dan S. Wallach.
In Proceedings of the IEEE Symposium on Security and Privacy, 1996.
W. Diffie and M. E. Hellman.
IEEE Transactions on Information Theory, IT-22:644-654, Noviembre 1976.
W. Diffie and M.E. Hellman.
Exhaustive cryptanalysis of the NBS data encryption standad.
Solaris 2 FAQ, Octubre 1999.
Vasanthan Dasan, Alex Noordergraaf, and Lou Ordorica.
The Solaris Fingerprint Database - A Security Tool for Solaris Operating Environment Files.
D. W. Davies and W. L. Price.
Security for Computer Networks: An Introduction to Data Security in Teleprocessing and Electronic Funds Transfer.
John Wiley and Sons, New York, 1984.
Experience with viruses on UNIX systems.
In USENIX Computing Systems, volume 2, 1989.
The possibility of Non-Secret digital encryption.
Technical report, CESG, Enero 1970.
M.W. Eichin and J.A. Rochlis.
In IEEE Security and Privacy, pages 326-343, 1989.
Intrusion Detection: Network Security beyond the Firewall.
John Wiley and Sons, 1998.
In Keith M. Jackson and Jan Hruska, editors, Computer Security Reference Book, chapter 10, pages 37-73. Butterworth-Heinemann, 1992.
Edward W. Felten, Dirk Balfanz, Drew Dean, and Dan S. Wallach.
Web Spoofing: an Internet Con Game.
Technical Report 540-96, Princeton University Department of Computer Science, 1996.
Revisado en febrero de 1997.
The human side of computer security.
Technical Report CIAC-2316 R.0, Department of Energy Computer Incident Advisory Capability - CIAC, Agosto 1995.
David C. Feldmeirer and Philip R. Karn.
UNIX password security - ten years later.
In G. Brassard, editor, CRYPTO89, pages 44-63. Springer-Verlag, 1990.
Lecture Notes in Computer Science No. 435.
Back to the Basics: Solaris and inetd.conf, Marzo 2000.
Back to the Basics: Solaris default processes and init.d, part III, Junio 2000.
Dan Farmer, Brad Powell, and Matthew Archibald.
In Proceedings of the 12th Systems Administration Conference - LISA´98. The USENIX Association, Diciembre 1998.
O'Reilly & Associates, 1st edition, Mayo 1998.
Remote OS detection via TCP/IP Stack Fingerprinting, Octubre 1998.
Virgil D. Gligor et al.
Technical Report NCSC-TG-030, National Computer Security Center, Noviembre 1993.
In Ámbito Jurídico de las Tecnologías de la Información. Consejo General del Poder Judicial, 1996.
Seguridad (e inseguridad) en Java.
Seguridad en Informática y Comunicaciones, (20), Junio 1996.
O'Reilly & Associates, Enero 1995.
Barbara Guttman and Robert Bagwill.
Technical report, National Institute of Standards and Technology, Julio 1997.
Marcus Goncalves and Steven Brown.
Check Point Firewall-1 Administration Guide.
Berny Goodheart and James Cox.
The Magic Garden Explained: The Internals of Unix System V Release 4, an Open Systems Design.
Eric Guerrino, Mike Kahn, and Ellen Kapito.
User authentication and encryption overview, 1997.
T.D. Garvey and Teresa F. Lunt.
In Proceedings of the 14th National Computer Security Conference, pages 372-385, Octubre 1991.
Network Intrusion Detection Systems FAQ v. 0.8.3, Marzo 2000.
Prentice Hall and Sun Microsystems Press, 1st edition, 1999.
Firewall and Proxy Server HOWTO.
Simson Garfinkel and Eugene H. Spafford.
Practical Unix & Internet Security.
O'Reilly & Associates, 2nd edition, Abril 1996.
O'Reilly & Associates, 1st edition, Junio 1997.
H. Gobioff, S. Smith, J.D. Tygar, and B. Yee.
Smart cards in hostile environments.
In Proceedings of the 2nd USENIX Workshop on Electronic Commerce. The USENIX Association, Noviembre 1996.
CGI Programming on the World Wide Web.
O'Reilly & Associates, 1st edition, Marzo 1996.
Louis Claude Guillou, Michel Ugon, and Jean-Jacques Quisquater.
The smart card - a standardized security device dedicated to public cryptology.
In Contemporary Cryptology - The Science of Information Integrity, pages 561-614. IEEE Press, 1992.
Secure deletion of data from magnetic and solid-state memory.
In Sixth USENIX Security Symposium Proceedings. The USENIX Association, Julio 1996.
Open-Source Security Testing Methodology Manual v2.0.
Technical report, The Ideahamster Organization, Febrero 2002.
The S/KEY one time password system.
In Proceedings of the ISOC Symposium on network and distributed systems security, Febrero 1994.
L. Todd Heberlein and Matt Bishop.
In Proceedings of the 19th National Information Systems Security Conference, pages 371-377, Octubre 1996.
Richard C. Hollinger and John P. Clark.
Computers and Security, 7(4), 1988.
Matthew S. Hecht, Abhai Johri, Radhakrishna Aditham, and T. John Wei.
Experience adding C2 Security Features to Unix.
In USENIX Conference Proceedings, pages 133-146. The USENIX Association, Verano 1988.
Richard Heady, George Luger, Arthur Maccabe, and Mark Servilla.
The architecture of a Network Level Intrusion Detection System.
Technical Report CS90-20, University of New Mexico, Agosto 1990.
Bao Ha, Tina Nguyen, et al.
Managing HP-UX software with SD-UX.
HP-UX Patch Management: a guide to patching HP-UX 10.x systems.
Managing Systems and Workgroups: A Guide for HP-UX System Administrators.
In Proceedings of the 1991 Symposium on Research in Security and Privacy, pages 8-20. IEEE Computer Society, Mayo 1991.
In Seminar on Network Security: Authorization and Access Control in Open Network Environment, 1998.
Kevin J. Houle and George M. Weaver.
Trends in Denial of Service attack technology.
Technical report, CERT Coordination Center, Carnegie Mellon University, Octubre 2001.
AIX Version 4.3 Problem Solving Guide and Reference.
AIX Version 4.3 System Management Guide: Communication and Networks.
AIX Version 4.3 System Management Guide: Operating System and Devices.
AIX 4.3 Elements of Security. Effective and Efficient Implementation.
IBM Certification Study Guide. AIX Problem Determination Tools and Techniques.
In Proceedings of the 1993 Symposium on Security and Privacy, pages 16-28. IEEE Computer Society, Mayo 1992.
Stack Smashing: What to do?
David Icove, Karl Seger, and William VonStorch.
Computer Crime. A Crimefighter's handbook.
David W. Chapman Jr. and Andy Fox.
Philippe Janson, Gene Tsudik, and Moti Yung.
Scalability and flexibility in authentication services: The KryptoKnight Approach.
In Proceedings of INFOCOM´97. IEEE Computer Society, 1997.
Harold S. Javitz and Alfonso Valdes.
The NIDES Statistical Component: Description and Justification.
Technical report, SRI International, Marzo 1993.
Seductions of Crime: Moral and Sensual Attractions in Doing Evil.
NSTAT: A Model-Based Real-Time Network Intrusion Detection System.
Technical Report TRCS97-18, University of California, Junio 1998.
Gershon Kedem and Yuriko Ishihara.
Brute force attack on Unix passwords with SIMD computer.
The Linux Network Administrators´ Guide.
David Koblas and Michelle Koblas.
In Proceedings of the Third Unix Security Symposium, pages 77-83. The USENIX Association, Septiembre 1992.
Stealth Scanning - Bypassing Firewalls and SATAN Detectors, Diciembre 1995.
In Unix Security Workshop, pages 5-14. The USENIX Association, Agosto 1990.
R. Kohno, R. Meidan, and L.B. Milstein.
Spread Spectrum Access Methods for Wireless Communications.
IEEE Communications Magazine, 33:58-67, Enero 1995.
Execution Monitoring of Security-Critical Programs in a Distributed System: A Specification-Based Approach.
PhD thesis, University of California at Davis, 1996.
Brian W. Kernighan and Rob Pike.
Gene H. Kim and Eugene H. Spafford.
Technical Report CSD-TR-93-071, Purdue University, Noviembre 1993.
Experiences with Tripwire: using integrity checkers for intrusion detection.
In Systems Administration, Networking and Security Conference III. The USENIX Association, Abril 1994.
Writing, supporting and evaluating Tripwire: a publically available security tool.
In Proceedings of the USENIX Applications Development Symposium. The USENIX Association, 1994.
Sandeep Kumar and Eugene Spafford.
An Application of Pattern Matching in Intrusion Detection.
Technical Report CSD-TR-94-013, Purdue University, Marzo 1994.
Micki Krause and Harold F. Tipton.
Handbook of Information Security Management.
Classification and Detection of Computer Intrusions.
PhD thesis, Purdue University, Agosto 1995.
Teresa F. Lunt et al.
A real-time intrusion detection expert system (IDES). final technical report.
Technical report, SRI International, Febrero 1992.
A note on the Confinement Problem.
Communications of the ACM, 16(10):613-615, Octubre 1973.
Password authentication with insecure communication.
Communications of the ACM, 24(11):770-772, Noviembre 1981.
Dependability: Basic concepts and terminology.
Carl E. Landwher, Alan R. Bull, John P. McDermott, and William S. Choi.
A taxonomy of computer program security flaws, with examples.
ACM Computing Surveys, 3(26), Septiembre 1994.
Operating Systems Review, 9(5):192-196, Noviembre 1975.
Intrusion Detection Systems: an Introduction to the detection and prevention of computer abuse.
PhD thesis, University of Wollongong, 1995.
Seguridad bajo control: `outsourcing vs. in house', las claves para evaluar.
Seguridad en Informática y Comunicaciones, (49), Abril 2002.
Detecting Intruders in Computer Systems.
In Proceedings of the Sixth Annual Symposium and Technical Displays on Physical and Electronic Security, 1990.
Roger Merckling and Anne Anderson.
RFC 57.0: Smart Card Introduction, Marzo 1994.
Port Scanning without the SYN flag.
A simple scheme to make passwords based on One-Way functions much harder to crack.
Computers & Security, 15(2):171-176, 1996.
Author of computer `virus' is son of U.S. electronic security expert.
The New York Times, 5 Noviembre 1988.
A family´s passion for computers, gone sour.
The New York Times, 11 Noviembre 1988.
In Handbook for the Computer Security Certification of Trusted Systems. Naval Research Laboratory, Enero 1995.
Texture analysis of the human iris for high security authentication.
Technical Report Image Processing 304-529, Department of Electrical Engineering, McGill University, Diciembre 1997.
Linux and random source bleaching.
The Social Organization of the Computer Underground.
PhD thesis, Northern Illinois University, 1989.
Java Security: Hostile Applets, Holes and Antidotes.
Barton P. Miller, Lars Fredriksen, and Bryan So.
An empirical study of the reliability of Unix utilities.
Communications of the ACM, 33(12):32-44, Diciembre 1990.
Solaris 7 System Administration Guide, Volume I, Octubre 1998.
Ira S. Moskowitz and Myong H. Kang.
Covert Channels - Here to Stay?
In Proceedings of COMPASS´94, pages 235-243. IEEE Press, Junio 1994.
Andrew D. McDonald and Markus G. Kuhn.
StegFS: A Steganographic File System for Linux.
In Andreas Pfitzmann, editor, Information Hiding, pages 461-475. Springer-Verlag, 1999.
Barton P. Miller, David Koski, Cjin Pheow Lee, Vivekananda Maganty, Ravi Murthy, Ajitkumar Natarajan, and Jeff Steidl.
Fuzz revisited: A re-examination of the reliability of Unix utilities and services.
Jim Mauro and Richard McDougall.
Solaris Internals: Core Kernel Architecture.
Prentice Hall and Sun Microsystems Press, 1st edition, 2000.
S.P. Miller, B.C. Neuman, J.I. Schiller, and J.H. Saltzer.
Kerberos Authentication and Authorization System.
In Project Athena Technical Plan, chapter E.2.1. Massachusetts Institute of Technology, Diciembre 1987.
Simple and flexible datagram access control for Unix-based gateways.
In Proceedings of the USENIX Summer Conference, pages 203-221. The USENIX Association, 1989.
A Weakness in the 4.2BSD Unix TCP/IP Software.
Technical Report CSTR-117, AT&T Bell Laboratories, 1985.
Get acquainted with Linux Security and Optimization System.
Technical report, Open Network Architecture, Enero 2000.
Sead Muftic, Ahmed Patel, Peter Sanders, Rafael Colon, Jan Heijnsdijk, and Unto Pulkkinen.
John Wiley and Sons, 1993.
Nimisha V. Mehta and Karen R. Sollins.
Communications of the ACM, 22(11), Noviembre 1979.
Refik Molva, Gene Tsudik, Els Van Herrenweghen, and Stefano Zatti.
KryptoKnight Authentication and Key Distribution Service.
In Proceedings of ESORICS 92, Octubre 1992.
Alfred J. Menezes, Paul C. van Oorschot, and Scott A. Vanstone.
Alex Noordergraaf and Glenn Brunette.
The Solaris Security Toolkit - Installation, Configuration and Usage Guide.
The Solaris Security Toolkit - Internals.
The Solaris Security Toolkit - Quick Start.
The Solaris Security Toolkit - Release Notes.
Network Intrusion Detection: An Analyst´s Handbook.
R.M. Needham and M.D. Schroeder.
Using encryption for authentication in large networks of computers.
Communications of the ACM, 21(12):993-999, Diciembre 1978.
Evi Nemeth, Garth Snyder, and Scott Seebass.
Alex Noordergraaf and Keith Watson.
Solaris Operating Environment Network Settings for Security.
A structured approach to computer security.
Technical Report 122, Chalmers University of Technology, 1992.
Phrack Magazine, 7(49), Noviembre 1996.
Information Processing Systems - OSI RM.
Technical Report 97 7498-2, ISO/TC, 1988.
Technical Report NBS FIPS PUB 81, U.S. Department of Commerce, Dicembre 1980.
Technical Report NIST FIPS PUB 185, U.S. Department of Commerce, Mayo 1984.
Tim O´Reilly and Grace Todino.
O'Reilly & Associates, Marzo 1988.
Department of the US Army Headquarters.
Technical Report FM-34-40-2, United States Army, Septiembre 1990.
Sams Publishing, 1st edition, 1994.
Demonstrating the elements of information security with threats.
In Proceedings of the 17th National Computer Security Conference, pages 421-430, 1994.
Cisco Router OSPF Design and Implementation Guide.
W. Timothy Polk and Lawrence E. Bassham.
Security issues in the Database Language SQL, Julio 1993.
La tarjeta inteligente como medio de identificación electrónica y acceso a servicios de seguridad: la experiencia de la FNMT-RCM.
Seguridad en Informática y Comunicaciones, (39), Abril 2000.
P.A. Porras and R.A. Kemmerer.
In Proceedings of the 1991 Symposium on Research in Security and Privacy, pages 36-51. IEEE Computer Society, Mayo 1991.
In Proceedings of the 8th Computer Security Application Conference, pages 220-229, Noviembre 1992.
La pratique de l´audit informatique.
Norman E. Proctor and Peter G. Neumann.
Architectural implications of Covert Channels.
In Proceedings of the 15th National Computer Security Conference, pages 28-43, Octubre 1992.
STAT: A State Transition Analysis Tool for Intrusion Detection.
PhD thesis, University of California, Junio 1992.
Marty Poniatowski and Martin Poniatowski.
HP-UX 11i System Administration Handbook and Toolkit.
Marcus J. Ranum and Frederick M. Avolio.
A toolkit and methods for internet firewalls.
In Proceedings of the Technical Summer Conference, pages 37-44. The USENIX Association, Junio 1994.
Computer virus awareness for UNIX.
NCSA News, 3:8, Mayo 1992.
The plausibility of UNIX virus attacks.
Technical report, Cybersoft, Inc., 1993.
Computer viruses in Unix networks.
Technical report, Cybersoft, Inc., 1995.
In Proceedings of the Second SANS Conference, Abril 1993.
Firewalls Frequently Asked Questions, 1995.
Intrusion Detection: Challenges and Myths.
Technical report, Network Flight Recorder, Inc., 1998.
A. Ribagorda, A. Calvo, and M.A. Gallardo.
Seguridad en Unix: Sistemas Abiertos e Internet.
HP Certified: HP-UX System Administration.
Breaking confidences: Organizational influences on insider trading.
The Sociological Quarterly, 30:185-204, 1989.
An overview of some the current spoofing threats, Julio 2001.
In UNIX System Manager's Manual, 4.3 BSD, Virtual VAX-11 Version, pages 17:1-3. University of California, Berkeley, CA, Abril 1986.
The MD4 message digest algorithm.
In Crypto´90 Abstracts, pages 281-291, Agosto 1990.
The MD5 message digest algorithm, Abril 1992.
Internet Request for Comments 1321.
Technical report, NetMAINE, P.O. BOX 8258, Portland, ME 04104-8258, USA, 1994.
In Proceedings of the 13th Systems Administration Conference - LISA´99. The USENIX Association, Noviembre 1999.
Covert Channels in the TCP/IP Protocol Suite, 1996.
Here´s how to stop computer vandals.
The Chicago Tribune, 7 Noviembre 1988.
Linux ipchains HOWTO, v. 1.0.8.
Linux 2.4 Packet Filtering HOWTO v. 1.2.
James A. Reeds and Peter J. Weinberger.
File security and the UNIX system crypt command.
AT&T Bell Labs Technical Journal, 63(8):1673-1683, Octubre 1984.
Corey Sandler, Tom Badgett, and Larry Lefkowitz.
VAX Security: Protecting the System and the Data.
A historical look at firewall technologies.
In Proceedings of 1989 Winter USENIX Conference. The USENIX Association, Febrero 1989.
SVR4 may become the first truly secure Unix.
Shiuhpyng Winston Shieh and Virgil D. Gligor.
A pattern-oriented intrusion model and its applications.
In Proceedings of the 1991 IEEE Computer Society Symposium on Research in Security and Privacy, pages 327-342. IEEE Computer Society, Mayo 1991.
John F. Shoch and Jon A. Hupp.
The worm programs - early experience with a distributed computation.
Communications of the ACM, 25(3):172-180, Marzo 1982.
Karanjit Siyan and Chris Hare.
Internet y seguridad en redes.
Bell Systems Technology Journal, 28:657-715, 1949.
Security code review guidelines, 2000.
In Proceedings of the 4th Systems Administration Conference - LISA´90. The USENIX Association, Octubre 1990.
Bruce Schneier and John Kelsey.
The AIX Error Logging Facility.
Sys Admin, 10(6), Junio 2001.
Gresham Sykes and David Matza.
Techniques of Neutralization: A Theory of Delinquency.
In Marvin E. Wolfgang et al., editors, The Sociology of Crime and Delinquency, pages 292-299. John Wiley and Sons, 2nd edition, 1970.
In Keith M. Jackson and Jan Hruska, editors, Computer Security Reference Book, chapter 33, pages 417-436. Butterworth-Heinemann, 1992.
Stack Smashing Vulnerabilities in the Unix Operating System, 1997.
The Threat of Information Theft by Reception of Electromagnetic Radiation from RS-232 Cables.
Computers and Security, 9(1), 1990.
The Internet Worm program: An analysis.
Technical Report CSD-TR-823, Purdue University Department of Computer Science, 1988.
Communications of the ACM, 32(6):678-687, 1989.
Are computer hacker break-ins ethical?
Technical Report CSD-TR-994, Purdue University, Julio 1990.
Technical Report CSD-TR-933, Purdue University Department of Computer Science, 1991.
OPUS: Preventing weak password choices.
In Proceedings of the 14th National Computer Security Conference, pages 446-455, Octubre 1991.
Intrusion Detection for Check Point FireWall-1.
Information technology - Code of practice for information security management.
Technical Report BS ISO/IEC 17799:2000, British Standard Publishing Limited, Diciembre 2000.
TCP/IP Illustrated Volume I: The Protocols.
Security architectures based on active firewall components, 1998.
Building a bastion host using HP-UX 10.
Building a bastion host using HP-UX 11.
Communications of the ACM, 31(5):484-497, Mayo 1988.
An introduction to Intrusion Detection.
Crossroads: The ACM Student Magazine, 2(4), Abril 1996.
In Keith M. Jackson and Jan Hruska, editors, Computer Security Reference Book, chapter 11, pages 75-90. Butterworth-Heinemann, 1992.
Operating Systems: Design and Implementation.
Communications of the ACM, 27(8), Agosto 1984.
2600: The Hacker Quartely, 17(3), Primavera 2000.
In Proceedings of SIGCOMM/SIGOPS Interprocess Communication Workshop, pages 11-23. ACM, 1975.
A Practical Guide to Solaris Security.
Technical report, Sun Microsystems (UK), Marzo 1994.
Real World Linux Security: Intrusion Prevention, Detection and Recovery.
Prentice Hall, 1st edition, 2000.
G. Winfield Treese and Alec Wolman.
X through the firewall, and other applications relays.
In Proceedings of the USENIX Summer Conference. The USENIX Association, Junio 1993.
Rebecca Thomas and Jean Yates.
A User Guide to the Unix System.
IBM Certification Study Guide. AIX v4.3 System Administration.
Electromagnetic Radiation from Video Display Units: An Eavesdropping Risk?
Computers and Security, 4(4), 1985.
TCP Wrapper: Network monitoring, access control and booby traps.
In Proceedings of the 3rd USENIX Unix Security Symposium, pages 85-92. The USENIX Association, Septiembre 1992.
Guide to safe X, Febrero 1994.
Robert van Kralingen, Corien Prins, and Jan Grijpink.
Using your body as a key: legal aspects of biometrics, 1997.
Playing redir games with ARP and ICMP, Septiembre 1997.
Carl van Schaik and Paul Smeddle.
A Steganographic File System Implementation for Linux.
Technical report, University of Cape Town (South Africa), Octubre 1998.
R. G. van Schyndel, A. Z. Tirkel, and C. F. Osborne.
In International Conference on Image Processing, volume 2, pages 86-90. IEEE, 1994.
Essential Checkpoint Firewall-1: An Installation, Configuration, and Troubleshooting Guide.
John P. Wack and Lisa J. Carnahan.
Keeping your site comfortably secure: an introduction to Internet Firewalls.
Technical report, National Institute of Standards and Technology (NIST), Diciembre 1994.
Ira S. Winkler and Brian Dealy.
Information security technology?...Don´t rely on it. A case study in social engineering.
In Proceedings of the 5th USENIX Unix Security Symposium. The USENIX Association, Junio 1995.
Non-Secret encryption using a finite field.
Technical report, CESG, Enero 1974.
Thoughts on cheaper Non-Secret encryption.
Technical report, CESG, Agosto 1976.
In Proceedings of the 1991 Symposium on Research in Security and Privacy, pages 2-7. IEEE Computer Society, Mayo 1991.
In Proceedings of the 1991 Symposium on Research in Security and Privacy, pages 21-34. IEEE Computer Society, Mayo 1991.
SSH - Secure login connetions over the Internet.
In Proceedings of the 6th USENIX Security Symposium, pages 37-42. The USENIX Association, Julio 1996.
New Riders, 2nd edition, 2001.
The Official PGP User´s Guide.
PGP: Source Code and Internals.

References: V. 
 V. 
 v. 
 V. 
 v. 
 v.