Papers on security and intrusion detection

COAST (Computer Operations, Audit and Security Technology) at: <www.cs.purdue.edu/coast/>

Starting from January 1, 1999 it was subsumed by CERIAS  (Center for Education and Research in Information), the new university-wide center for information assurance and security at:   <www.cerias.purdue.edu/>.

Kerberos at: <ftp://gnu.org> and <http://consult.stanford.edu/afsinfo/kerberos.shtml>

International Computer Security Association at: www.ncsa.uiuc.edu

The Objective Authority in Computer Network Security at: <www.icsa.net >

NT security at:  <www.microsoft.com/security >

Computer Security and the Internet - A special report published on Scientific American (1998), October, 95 - 117

"How Hackers Break in ... and How They are Caught" by Carolyn P. Meinel

"How Computer Security works" : (i) Firewalls - by William Cheswick and Steven M. Bellovin; (ii) Digital Certificates - by Warwick Ford; (iii) The Java Sandbox - by James Gosling

"Cryptography for the Internet" by Philip R. Zimmermann

"The Case against Regulating Encryption Technology"  by Ronald L. Rivest

Incident Response Organizations

FIRST (Forum of Incident and Response Security Teams at: < www.first.org>

CERT (in U.S.A.) at: <www.cert.org>

AUSCERT (in Australia) at: <www.auscert.org.au >

The IBM Emergency Response Team at: <www.ers.ibm.com >

Intrusion Detection Research

<www.cerias.purdue.edu/>

<seclab.cs.ucdavis.edu/cidf> (CIDF=Common Intrusion Detection Framework)

UC Davis - Computer Security Laboratory at: <seclab.cs.ucdavis.edu>

<www.csl.sri.com/ides>

<www.sri.com/emerald>

Intrusion Detection Project at: < www.nswc.navy.mil/ISSEC/Docs/intrusion.html>

<doe-is.llnl.gov/nitb/refs/bibs/bib1.html>

<ftp://ftp.research.att.com>

Happy Hacker at <www.happyhacker.org>

Network Intrusion Detection Systems at:

http://www.ticm.com/kb/faq/idsfaq.html

Michael Sabirey's Intrusion Detection Systems Page at:

http://www-rnks.informatik.tu-cottbus.de/sobirey/ids.html

Office of International Criminal Justice at the University of Illinois - Advanced Information Technologies Group <http://oicj.acsp.uic.edu>; click on "Office of International Criminal Justice" <http://oicj.acsp.uic.edu/spearmint/> and then search for "Cyber-Terrorism", "Bio-Terrorism.

Additional Internet sites

The Alan Turing Homepage at:

< http://www.turing.org.uk/turing/>

American Cryptogram Association at: < http://www.und.nodak.edu/org/crypto/crypto/>

Bletchley Park at:

<www.cranfield.ac.uk/ccc/bpark/ >

Centre for Quantum Computation at:

<http://www.qubit.org/>

Crypto Links at:

< http://www.ftech.net/~monark/crypto/web.htm>

Cryptography (FAQs) at:

<http://www.cis.ohio-state.edu/hypertext/faq/usenet/cryptography-faq/top.html>

Cryptologia at:

< http://www.dean.usma.edu/math/resource/pubs/cryptolo/index.htm>

Electronic Frontier Foundation at:

<http://www.eff.org/>

Enigma emulators at:

< http://www.attlabs.att.co.uk/andyc/enigma/enigma_j.html >

< http://www.izzy.net/~ian/enigma/applet/index.html>

Information Security Group (Royal Holloway College) at:

< http://isg.rhbnc.ac.uk>

The Mystetry of the Beale Treasure at:

< http://www.roanokeva.com> ; from this location, you can visit "The Beale Treasure"

National Cryptologic Museum  at:

< http://www.nsa.gov:8080/museum/>

RSA Laboratories' FAQs About "Today's Cryptography" at:

< http://www.rsa.com/rsalabs/faq/html/questions.html>

Yahoo! Security and Encryption Page at:

< http://www.yahoo.co.uk/Computers_and_Internet/>

Arithmetica, a bold young company inventing new mathematical formulas for the ancient art of encrypton, at: <www.arithmetica.com>

ZD-TV at: <http://www.zdnet.com/zdtv/>

Phil Zimmermann and PGP at:

< http://www.nai.com/products/security/phil/phil.asp>

Reference:

"The code book: the evolution of secrecy from Mary Queen of Scots to quantum cryptography " by Simon Singh - Doubleday, New York (1999)"

Some Definitions

Cipher

A cipher is defined as substitution at the level of letters.

Cipher  means to scramble a message using the ciphers.

Decipher means to unscramble an enciphered message.

Code word

A single word selected from a document that can indicate / represent:

• the level of sensitivity
• the source of information
• specific operations

Decode means to unscramble an encoded message.

Cryptanalysis (conied by W. Friedman, 1921)

The breaking of codes.

Cryptography

The making of codes.

Cryptology

To cover all aspects of code work.

Encrypt / Decrypt

These terms are referred to the activity of scrambling / unscrambling with respect to both codes and ciphers.

Nickname

A nickname consists of two words and it is assigned an unclassified meaning (for example: Redskins,  Barbarossa, Ivan The Terrible).

Quantum cryptography

A form of cryptography that exploits quantum theory (in particular the uncertainty principle). " While quantum theory is the inspiration for a computer that could crack all current ciphers, it is also at the heart of a new unbreakable cipher called quantum cryptography" (S. Singh, 1999).

Steganography

The science of hidding the existence of a message, as opposed to cryptography, which is the science of hidding the meaning of a message.

[from the Greek words steganos (= covered) and graphein (=to write)]

References:

"The Puzzle Palace: A Report on America's Most Secret Agency"" by James Bamford - Penguin Books (1983)

"Quantum Cryptography" by Charles H. Bennet, Gilles Brassard and Arthur Ekert, in: Sci. American, 269 (October), 50 - 57 (1992)

"The code book: the evolution of secrecy from Mary Queen of Scots to quantum cryptography " by Simon Singh - Doubleday, New York (1999)

"Privacy in a Quantum World" by Charles H. Bennett and Peter W. Shor in: Science 284, 747-748 (1999)