UNIX Network Programming
CS494            Class 24   11/18/99

Topics

• IP security -- defenses
• lecture slides (postscript, 169K)

Handouts

Required reading

• Thinking about Firewalls
• Kerberos: An Authentication Service for Open Network Systems

Additional reading

• good collection of first papers
• Network (In)Security Through IP Packet Filtering
• Virtual Private Networks
• IETF security projects and IP security architecture RFC 1825 and IP AH RFC 2402 and IP ESP RFC 2406
• intrusion detection products 8/98 and shadow project ids with tcpdump
• kerberos or PGP or ssh or opie or S/key
• CERT or bugtraq
• Dunigan's gaggle of security links