Linux Security HOWTO: Security Sources 11. Security SourcesThere are a LOT of good sites out there for UNIX security in general and Linux security specifically. It's very important to subscribe to one (or more) of the security mailing lists and keep current on security fixes. Most of these lists are very low volume, and very informative.11.1 FTP sitesCERT is the Computer Emergency Response Team. They often send out alerts of current attacks and fixes. cert.orgReplay has archives of many security programs. Since they are outside the US, they don't need to obey US crypto restrictions. replay.comMatt Blaze is the author of CFS and a great security advocate. Matt Blaze's stufftue.nl is a great security ftp site in the Netherlands. ftp.win.tue.nl11.2 Web SitesThe Hacker FAQ is a FAQ about hackers: The Hacker FAQThe COAST archive has a large number of unix security programs and information: COASTRootshell.com is a great site for seeing what exploits are currently being used by crackers: rootshell.com exploitsBUGTRAQ puts out advisories on security issues: BUGTRAQ archivesCERT, the Computer Emergency Response Team, puts out advisories on common attacks on unix platforms: CERT homeDan Farmer is the author of SATAN and many other security tools, his home site has some interesting security survey information as well as security tools: Dan Farmers trouble.orgThe Linux security WWW is a good site for Linux security information: Linux Security WWWReptile has lots of good Linux security information on his site: Reptiles Linux Security PageInfilsec has a vulnerability engine that can tell you what vunerabilities affect a specific platform: Infilsec vunerability engineCIAC sends out periodic security bulitins on common exploits: CIAC bulitinsA good starting point for Linux Pluggable Authentication modules can be found at http://www.kernel.org/pub/linux/libs/pam/.11.3 Mailing ListsBugtraq: To subscribe to bugtraq, send mail to [e-mail] containing the message body subscribe bugtraq. (see links above for archives).CIAC: Send e-mail to: [e-mail] In the BODY (not subject) of the message put (either or both): subscribe ciac-bulletin11.4 Books - Printed Reading Material.There are a number of good security books out there. This section lists a few of them. In addition to the security specify books, security is covered in a number of other books on system administration.Building Internet Firewalls By D. Brent Chapman & Elizabeth D. Zwicky1st Edition September 1995ISBN: 1-56592-124-0Practical UNIX & Internet Security, 2nd Edition By Simson Garfinkel & Gene Spafford2nd Edition April 1996ISBN: 1-56592-148-8Computer Security Basics By Deborah Russell & G.T. Gangemi, Sr.1st Edition July 1991ISBN: 0-937175-71-4Linux Network Administrator's Guide By Olaf Kirch1st Edition January 1995ISBN: 1-56592-087-2PGP: Pretty Good Privacy By Simson Garfinkel1st Edition December 1994ISBN: 1-56592-098-8Computer Crime A Crimefighter's Handbook By David Icove, Karl Seger & William VonStorch (Consulting Editor Eugene H. Spafford)1st Edition August 1995ISBN: 1-56592-086-4 m