18 May 2007 reference monthly calendar of postings
posted by alecm in Reference

This is a posting in the Security Community 'Reference' Category ; the function of postings that are placed in this category is to aggregate links to other, useful postings in a single meta-posting which can be referenced via a link in the Security Community Blog sidebar, and which will be re-posted on the blog each time it is refreshed by a member of the security community.

This posting is a list of monthly postings to the security community blog; this is posted here as a move towards a simpler method of navigating past blog postings without necessarily resorting to the sidebar calendar. Dates in the future are included as a convenience to the administrators.

2007

jan 2007, feb 2007, mar 2007, apr 2007, may 2007, jun 2007, jul 2007, aug 2007, sep 2007, oct 2007, nov 2007, dec 2007.

2006

jan 2006, feb 2006, mar 2006, apr 2006, may 2006, jun 2006, jul 2006, aug 2006, sep 2006, oct 2006, nov 2006, dec 2006.

2005

jan 2005, feb 2005, mar 2005, apr 2005, may 2005, jun 2005, jul 2005, aug 2005, sep 2005, oct 2005, nov 2005, dec 2005.

Permalink | Comments [0]

18 May 2007 reference security videos
posted by alecm in Reference

This posting is a list of security video blogs which have been posted to the community.

The 5 Cent Tour of Solaris Role-Based Access Control
- Bart Blanquart
A Personal View On Web2.0 Security (video)
- Alec Muffett
Hacking A Topbox: Security Components
- Alec Muffett

tags: rbac security slotd solaris training videos

Permalink | Comments [2]

18 May 2007 reference security blueprints
posted by alecm in Reference

This posting is a list of Sun Security Blueprints.

As-per the description at the BluePrints Home Page

Sun BluePrints OnLine articles are maintained in this archive for the benefit and historical reference of our readers. Details of the recommendations set forth in these articles may not reflect Sun's latest hardware and software releases. Caution, careful analysis and common sense should be exercised when applying these Sun BluePrints articles to newer products and software releases.

Nonetheless, the provision of the entire, historical archive of BluePrints makes a useful corpus of security reference material, certain themes of IT security being invariant through time.

See the security blueprint full listing for the master copy of this list, with article synopses.

2008

Understanding the Security Capabilities of Solaris Zones Software (December 2008)
-by Glenn Brunette and Jeff Victor
Security Advantages of the Solaris Zones Software (December 2008)
-by Christoph Schuba
Designing an Adaptive Security Architecture (November 2008)
-by Joel Weise
Cryptographic Solutions for Financial Services: Using the Sun Crypto Accelerator 6000 Card (February 2008)
-by Serge Nadon and Joel Weise

2007

Tuning Symantec Brightmail AntiSpam on UltraSPARC T1 and T2 Processor-Powered Servers (December 2007)
-by Alan Yoshida, Ramin Moazeni and Steve Gaede

Using the Cryptographic Accelerators in the UltraSPARC T1 and T2 Processors (November 2007)
-by Ning Sun and Chi-Chang Lin

2006

Tuning Symantec Brightmail AntiSpam on the Sun Fire T2000 Server (October 2006)
-by Alan Yoshida, Ramin Moazeni and Steve Gaede

Privilege Bracketing in the Solaris 10 Operating System (April 2006)
-by Glenn Brunette

Using the Cryptographic Accelerator of the UltraSPARC T1 Processor (March 2006)
-by Ning Sun, Pallab Bhattacharya

The Solaris Fingerprint Database - a Security Tool for Solaris Operating Environment Files (March 2006)
-by Vasanthan Dasan, Alex Noordergraaf, Lou Ordorica, Glenn Brunette

Toward Systemically Secure IT Architectures (February 2006)
-by Glenn Brunette

Privilege Debugging in the Solaris 10 Operating System (February 2006)
-by Glenn Brunette, Darren Moffat

2005

Enforcing the Two-Person Rule Via Role-Based Access Control in the Solaris 10 Operating System (August 2005)
-by Glenn Brunette

Restricting Service Administration in the Solaris 10 Operating System (June 2005)
-by Glenn Brunette

Limiting Service Privileges in the Solaris 10 Operating System (May 2005)
-by Glenn Brunette

Using Computer Forensics When Investigating System Attacks (April 2005)
-by Joel Weise and Brad Powell

Integrating BART and the Solaris Fingerprint Database in the Solaris 10 Operating System (April 2005)
-by Glenn Brunette

Automating Solaris 10 File Integrity Checks (March 2005)
-by Glenn Brunette

2004

IPsec--A Secure Deployment Option (June 2004)
-by Regunathan Rajaiah

Building OpenSSH -- Tools and Tradeoffs, Updated for OpenSSH 3.7.1p2 (April 2004)
-by Jason Reid

Securing the Sun Fire 12K/15K System Controller (January 2004)
-by Alex Noordergraaf, Steven Spadaccini and Dina Nimeh

Securing the Sun Fire 12K/15K Domains (January 2004)
-by Alex Noordergraaf, Steven Spadaccini and Dina Nimeh

2003

Securing Linux Systems With Host-Based Firewalls: Implemented With Linux iptables (November 2003)
-by Ge' Weijers

Responding to a Customer's Security Incidents--Part 4: Processing Incident Data (October 2003)
-by Vijay Masurkar

Responding to Customer's Security Incidents--Part 3: Following Up After an Incident (September 2003)
-by Vijay Masurkar

Deploying the Solaris Operating Environment Using a Solaris Security Toolkit CD (September 2003)
-by Steven Spadaccini

Part I: Minimizing Domains for Sun Fire V1280, 6800, 12K, and 15K Systems (September 2003)
-by Nicholas O'Donnell and Alex Noordergraaf

Part II: Minimizing Domains for Sun Fire V1280, 6800, 12K, and 15K Systems (September 2003)
-by Nicholas O'Donnell and Alex Noordergraaf

Building Secure Sun Fire Link Interconnect Networks Using Sun Fire 15K and Sun Fire 12K Servers (August 2003)
-by Joe Higgins and Steven Spadaccini

Securing Sun Linux Systems: Part I, Local Access and File Systems (July 2003)
-by Glenn Brunette, Michael Hullhorst, and Ge Weijers

Securing Sun Linux Systems: Part II, Network Security (July 2003)
-Glenn Brunette, Michael Hullhorst, and Ge Weijers

Role Based Access Control and Secure Shell--A Closer Look At Two Solaris Operating Environment Security Features (June 2003)
-by Thomas M. Chalfant

Solaris Operating Environment Network Settings for Security: Updated for Solaris 9 Operating Environment (June 2003)
-by Alex Noordergraaf

Integrating the Secure Shell Software (May 2003)
-by Jason Reid

Auditing System Security (May 2003)
-by Alex Noodergraaf and Glenn Brunette

Responding to Customer's Security Incidents--Part 2: Executing a Policy (April 2003)
-by Vijay Masurkar

Configuring the Secure Shell Software (April 2003)
-by Jason M. Reid

Responding to Customer's Security Incidents--Part 1: Establishing Teams and a Policy (March 2003)
-by Vijay Masurkar

Securing the Sun Fire 12K and 15K System Controllers (February 2003)
-by Alex Noordergraaf and Dina Nimeh

Securing the Sun Fire 12K and 15K Domains (February 2003)
-by Alex Noordergraaf and Dina Nimeh

Securing the Sun Cluster 3.x Software (February 2003)
-by Alex Noordergraaf

Building Secure Sun Fire Link Interconnect Networks Using Midframe Servers (February 2003)
-by Joe Higgins

Building OpenSSH--Tools and Tradeoffs (January 2003)
-by Jason M. Reid

System Management Services Software: An Inside Look (January 2003)
-by Tom Chalfant

2002

Solaris Operating Environment Security: Updated for Solaris 9 Operating Environment (December 2002)
-by Alex Noordergraaf and Keith Watson

Trust Modeling for Security Architecture Development (December 2002)
-by Donna Andert, Robin Wakefield, and Joel Weise

Minimizing the Solaris Operating Environment for Security: Updated for Solaris 9 Operating Environment (November 2002)
-by Alex Noordergraaf

Extending Authentication in the Solaris 9 Operating Environment Using Pluggable Authentication Modules (PAM): Part II (October 2002)
-by Michael Haines and Joep Vesseur

Extending Authentication in the Solaris 9 Operating Environment Using Pluggable Authentication Modules (PAM): Part I (September 2002)
-Michael Haines

Securing Sun Fire 12K and 15K Domains: Updated for SMS 1.2 (July 2002)
-by Alex Noordergraaf and Dina Nimeh

Securing the Sun Fire 12K and 15K System Controllers: Updated for SMS 1.2 (July 2002)
-by Alex Noordergraaf and Dina Nimeh

Securing LDAP Through TLS/SSL--A Cookbook (June 2002)
-by Stefan Weber

Securing the Sun Fire Midframe System Controller (June 2002)
-by Alex Noordergraaf and Tony M. Benson

How Hackers Do It: Tricks, Tools, and Techniques (May 2002)
-by Alex Noordergraaf

Securing the Sun Cluster 3.0 Software (May 2002)
-by Alex Noordergraaf

Securing the Sun Enterprise 10000 System Service Processors (March 2002)
-by Alex Noordergraaf

Server Virtualization Using Trusted Solaris 8 Operating Environment (February 2002)
-by Glenn Faden

Configuring OpenSSH for the Solaris Operating Environment (January 2002)
-by Jason M. Reid (NOTE - See the Sun BluePrints article "Configuring Secure Shell Software" by Jason M. Reid, April 2003 for additional and updated information.)

Securing Sun Fire 15K Domains (January 2002)
-Alex Noordergraaf and Dina Kurktchi

2001

Developing a Security Policy (December 2001)
-by Joel Weise and Charles R. Martin

Sun Cluster 3.0 12/01 Security: with the Apache and iPlanet Web and Messaging Agents (December 2001)
-by Alex Noordergraaf, Mark Hashimoto and Richard Lau

Securing the Sun Fire 15K System Controller (November 2001)
-by Alex Noordergraaf and Dina Kurktchi

Kerberos Network Security in the Solaris Operating Environment (October 2001)
-by Wyllys Ingersoll

Securing the Sun Fire Midframe System Controller (September 2001)
-by Alex Noordergraaf and Tony Benson

Securing Systems with Host-Based Firewalls - Implemented With SunScreen Lite 3.1 Software (September 2001)
-by Martin Englund

Using NTP to Control and Synchronize System Clocks - Part III: NTP Monitoring and Troubleshooting (September 2001)
-by David Deeths and Glenn Brunette

Using NTP to Control and Synchronize System Clocks - Part II: Basic NTP Administration and Architecture (August 2001)
-by David Deeths and Glenn Brunette

Public Key Infrastructure Overview (August 2001)
-by Joel Weise

Building and Deploying OpenSSH on the Solaris Operating Environment (July 2001)
-by Jason M. Reid and Keith Watson

Using NTP to Control and Synchronize System Clocks - Part I: Introduction to NTP (July 2001)
-by David Deeths and Glenn Brunette

The Solaris Security Toolkit - Quick Start: Updated for Toolkit version 0.3 (June 2001)
-by Alex Noordergraaf and Glenn Brunette

The Solaris Security Toolkit - Release Notes: Updated for Toolkit version 0.3 (June 2001)
-by Alex Noordergraaf and Glenn Brunette

The Solaris Security Toolkit - Installation, Configuration, and Usage Guide: Updated for Toolkit version 0.3 (June 2001)
-by Alex Noordergraaf and Glenn Brunette

The Solaris Security Toolkit - Internals: Updated for Toolkit version 0.3 (June 2001)
-by Alex Noordergraaf and Glenn Brunette
Solaris Operating Environment Security - Updated for Solaris 8 Operating Environment (April 2001)
-by Alex Noordergraaf and Keith Watson

Maintaining Network Separation with Trusted Solaris 8 Operating Environment (March 2001)
-by Glenn Faden

Auditing in the Solaris 8 Operating Environment (February 2001)
-by William Osser and Alex Noordergraaf

2000

Directory Server Security (December 2000)
-by Tom Bialaski

Solaris Operating Environment Network Settings for Security (December 2000)
-by Keith Watson and Alex Noordergraaf

Solaris Operating Environment Minimization for Security: A Simple, Reproducible and Secure Application Installation Methodology (November 2000)
-by Alex Noordergraaf

(November 2000)
-by Alex Noordergraaf and Glenn Brunette
In parallel with the "JASS" Toolkit version 0.2 release all three articles describing the "JASS Toolkit were updated and revised to document updates and functionality.

JumpStart Architecture and Security Scripts for the Solaris Operating Environment - Part 1 JumpStart Architecture and Security Scripts for the Solaris Operating Environment - Part 2 JumpStart Architecture and Security Scripts for the Solaris Operating Environment - Part 3

Building Secure N-Tier Environments (October 2000)
-by Alex Noordergraaf

JumpStart Architecture and Security Scripts for the Solaris Operating Environment - Part 3 (September 2000)
-by Alex Noordergraaf

JumpStart Architecture and Security Scripts for the Solaris Operating Environment - Part 2 (August 2000)
-by Alex Noordergraaf

JumpStart Architecture and Security Scripts for the Solaris Operating Environment - Part 1 (July 2000)
-by Alex Noordergraaf

Solaris Operating Environment Security (January 2000)
-by Keith Watson and Alex Noordergraaf

Solaris Operating Environment Minimization for Security: A Simple, Reproducible and Secure Application Installation Methodology (December 1999)
-by Keith Watson and Alex Noordergraaf