Task 1 Resources | Task 2 Resources |Task 3 Resources |Task 4 Resources |Task 5 Resources |Task 6 Resources

Resources - Task 2

For a review of business issues, network security technology, and some common security protocols, the following sites provide good definitions and background:

Firewalls

• "How Firewalls Work" (from HowStuffWorks.com)
• Chapter on Firewalls from a security handbook

Access Controls

• Access controls for different services and applications

Denial of Service

• Webopedia definition
• DoS attacks defined and defenses against them

TCP/IP Protocol and OSI Model

• Introduction to TCP/IP
• Another summary of TCP/IP layers
• TCP/IP Reference Page
• Inform IT: Teach Yourself TCP/IP

Securing an Operating System

• Selection of IBM resources for securing a system

Security Layers

• Background on OSL layers and security
• Chapter on "Developing a Database Security Plan"

When considering the goals and needs of a security policy, review the following sites:

• "Real World Problem Cases Caused By Missing Policies"
• List of potential security risks
• Guidance on "Writing a security policy"
• White paper: "Best Practices for Protecting Your IT Infrastructure and Information"

These sites can provide some tips and traps for considering why policies fail and how you might hedge against those areas of potential failure:

• White paper: "Why Security Policies Fail"
• Article identifying security risks overlooked by an IT staff of a medical center

The following sites provide templates and models of security policies:

• Excerpts from a security policy template
• Security policy template
• Survey of computer policies from institutions of higher education
• National Institute of Health security policy
• University of Arizona security policy
• University of California Berkeley security policy

Recommended Books

Douglas E. Comer, Internetworking with TCP/IP, Volume 1: Principles, Protocols, and Architectures (4th edition) , Prentice-Hall, 2000.

Simson Garfinkel with Gene Spafford, Web Security, Privacy, and Commerce (2nd edition) , O'Reilly and Associates, 2002.

Brian Hatch, James Lee, and George Kurtz, Hacking Linux Exposed: Linux Security, Second Edition, McGraw-Hill, 2003.

Back to Top

Task 1 Resources | Task 2 Resources |Task 3 Resources |Task 4 Resources |Task 5 Resources |Task 6 Resources