Security

IMB: Multi-Security Mechanisms With Multifactor Authentications IMB: Multi-Security Mechanisms With Multifactor Authentications- Approach for designing and implementing a multi-security mechanism with multi factor authentication for AIX and UN… Two-factor Authentication Two-factor Authentication- Analyzing secure methods from the perspective of governments. MSDN: Strong User Authentication on the Web MSDN: Strong User Authentication on the Web- Aims to distill a comprehensive view of strong user authentication by examining its concepts, implementation approaches, and challenge… VenturBeat: Two-factor Authentication is a False Sense of Security VenturBeat: Two-factor Authentication is a False Sense of Security- Guest post from a user's point of view, analyzing the usability and security of TFA. Tech Republic: Implementing Multi-factor Authentication: What To Consider Tech Republic: Implementing Multi-factor Authentication: What To Consider- To take into account when using them in a multi-factor authentication system. What is Two-Factor Authentication? What is Two-Factor Authentication?- Describes the factors used to grant the user access to the system. Two-Factor Authentication Two-Factor Authentication- Proof of concept. Tutorial using an image as the component "what you have". Computerworld: QuickStudy: Authentication Computerworld: QuickStudy: Authentication- Explains the concepts of answering the question "How do I know you're who you say you are?". About.com: What is Two-Factor Authentication? About.com: What is Two-Factor Authentication?- Describes the basic concepts of the authentication method, and the components: what you know, what you have, who you are. Wikipedia: Multi-factor Authentication Wikipedia: Multi-factor Authentication- Describes the approach to authentication which requires the presentation of two or more factors. MIT Kerberos Consortium MIT Kerberos Consortium- Created to establish Kerberos as a universal authentication platform for the world's computer networks. Includes news and events, details of sponsors and … RFC 1510 RFC 1510- An overview and specification of the official internet protocol. Kerberos FAQ Kerberos FAQ- Answers to frequently asked questions. GNU Shishi GNU Shishi- Freely available implementation of Kerberos 5. Includes system documentation and downloads. How to Kerberize your Site How to Kerberize your Site- Excellent tutorial on implementation. Contains detailed steps to follow for a successful installation, as well as answers to common questions. Kerberos: An Authentication Service for Computer Networks Kerberos: An Authentication Service for Computer Networks- A technical paper documenting the system and standard. Includes diagrams and references. CERT Advisory: Buffer Overflow in Kerberos Administration Daemon CERT Advisory: Buffer Overflow in Kerberos Administration Daemon- "Multiple Kerberos distributions contain a remotely exploitable buffer overflow in the Kerberos administration da… Cybersafe Ltd Cybersafe Ltd- Provides products for database security, web security, and security infrastructure based on the Kerberos protocol, and also provides Kerberos consulting and support. Heimdal Heimdal- An international free implementation. Includes downloads, distribution information and mailing list contacts. Kerberos Reference Page Kerberos Reference Page- An index of related resources. Includes software distributions and patches, as well as user documentation. Kerberos Network Authentication Service Kerberos Network Authentication Service- A resource site with documentation, papers and software distributions. Software may be subject to US export control. Kerberos: The Network Authentication Protocol Kerberos: The Network Authentication Protocol- Reference distribution and official documentation for Kerberos. Software is subject to US export control. (MIT) Microsoft Microsoft- Download security updates, service packs, and anti-spyware tools for Windows. Adobe Adobe- Security bulletins and technical briefs that provide information to customers. HP: IT Resource Center HP: IT Resource Center- Americas/Asia-Pacific site offering online support. Includes knowledge base, patches, drivers and security mailing lists. SGI: IRIX SGI: IRIX- Security advisories and patch downloads. Includes mailing list. Cisco Cisco- Patches and advisories for Cisco products HP: Tru64 Unix HP: Tru64 Unix- Security advisories and associated patches. Compaq Compaq- Patches and advisories for most Compaq products. Red Hat Linux Errata Red Hat Linux Errata- Security advisories and updates (patches) for all supported versions. SCO Unix System Security Enhancement Area SCO Unix System Security Enhancement Area- Advisories and patches. Note this is an FTP site. Apache Web Server Apache Web Server- Advisories and patches. NetBSD NetBSD- Advisories, patches, links. FreeBSD FreeBSD- Advisories, mailing lists, tips, tricks, guidelines, links. OpenBSD Security OpenBSD Security- Advisories and information. KDE KDE- Only if you've built KDE yourself; otherwise probably available from your Linux distribution vendor's patches directory. Note this is an FTP site. OpenBSD Release Errata OpenBSD Release Errata- Advisories and patches. HP-UX Patch Additional Information HP-UX Patch Additional Information- Patch Security Matrix, list of obsolete patches, patch checksums. Debian: Security Information Debian: Security Information- Details of current and archive security advisories. Includes mailing list and a security FAQ. AIX Patches - Fixdist AIX Patches - Fixdist- You need the "fixdist" program to install AIX patches. AIX AIX- Security and other patches for AIX. Note that this is an FTP site. FreeBSD Patches FTP Site FreeBSD Patches FTP Site- Security advisories and patches. Microsoft Security Microsoft Security- Microsoft-product-related security headlines and bulletins. Red Hat Linux Red Hat Linux- Notifications and advisories. Security mailing list subscription is on this page. Gentoo Linux Gentoo Linux- List of security announcements and information on how to sign up to security mailing list. Microsoft Microsoft- How to subscribe to the (free) e-mail notification service that Microsoft uses to send information about security of Microsoft products. Apache Apache- Apache Week, includes security alerts. Debian: Security Announcements Debian: Security Announcements- Security announce mailing list for Debian Linux. OpenBSD OpenBSD- All OpenBSD mailing lists, including security alerts. NetBSD NetBSD- Security mailing list subscription.