Security resources

Campus resources

Departmental resource pages

Individual members' resource pages

Internet and network system resources

OS-specific resources

• BSD
• Linux
• MacOSX
• Solaris

Software

Organizations

Publications

Mailing lists

Miscellaneous

Security resources

OIT Security

Duke OIT security projects, policies, guides, etc.
http://www.oit.duke.edu/security/

ASNA Security

Arts & Sciences Network Administrators, IT Security Policy
http://www.aas.duke.edu/comp/security/
 

SANS Institute

System Administration, Networking, and Security organization
http://www.sans.org/

SANS Institute Step-by-Step Guides (OIT)

OIT-licensed copies of the SANS guides, for your perusal
http://www.oit.duke.edu/security/sans.html

CERT

Computer Emergency Response Team,

Carnegie Mellon Software Engineering Institute
http://www.cert.org/

US-CERT

National Computer Emergency Response Team
http://www.us-cert.gov/

CIAC

Computer Incident Advisory Capability,

U.S. Department of Energy
http://www.ciac.org/ciac/

Center for Internet Security

http://www.cisecurity.org/

National Communications System

Government security site. See the Threat Advisory!
http://www.ncs.gov/

EDUCAUSE Systems Security Taskforce

Security in the context of higher education
http://www.educause.edu/security/

Internet Storm Center

Internet monitoring and statistics, operated by SANS
http://isc.incidents.org/

NIST CSRC

NIST Computer Security Resource Center
http://csrc.nist.gov/

Liberty Alliance

``Open, Interoperable Standards for Federated Network Identity''
http://www.projectliberty.org/

SecurityFocus

``designed to facilitate discussion on security related topics, create security awareness, and to provide the Internet's largest and most comprehensive database of security knowledge and resources to the public''
http://www.securityfocus.com/

See also: OS-specific resources

[top of page]

Campus resources

CLAC

Campus Lan Admistrators Consortium (this is just a mailing list)
https://lists.phy.duke.edu/mailman/listinfo/clac

CLIF

CSN LAN Information Forum
http://clif.mc.duke.edu/

MCIS

Medical Center Information Systems
http://www2.mcis.duke.edu/

A&S Computing

Arts & Sciences Computing, general
http://www.aas.duke.edu/comp/security/

A&S unixgroup

Arts & Sciences group for weekly UNIX issues and discussion
https://aas.duke.edu/mailman/listinfo/unixgroup

DULUG

Duke University Linux Users Group
http://www.dulug.duke.edu/

OIT

Office of Information Technology
http://www.oit.duke.edu/

OIT - Computers

Office of Information Technology - Computers Page
http://www.oit.duke.edu/oit/computer.html

OIT - Dept. SysAdmins

Office of Information Technology - Department System Administrators Page (very out-of-date, last I checked)
http://www.oit.duke.edu/oit/comp_dept.html

[top of page]

Departmental resource pages

Biology

Biology Computer Support
http://www.biology.duke.edu/computer/

Chemistry

Computing/Instrument Help & Support
http://www.chem.duke.edu/compteam/

Computer Science

Computer Science Laboratory
http://www.cs.duke.edu/csl/

Mathematics

Mathematics Computer Support
http://www.math.duke.edu/computing/

Nicholas School of the Environment

NSOE Computing Facilities
http://www.env.duke.edu/facilities/computing.html

Physics

Physics Computing
http://www.phy.duke.edu/resources/computing/

[top of page]

Individual members' resource pages

Security Info, Herb Commodore, OIT Systems Administration

"works in progress..."; includes some links to computing policies at other universities
http://www.duke.edu/~herb/security/

Secure Access to ECE, Chris Cramer, Electrical and Computer Engineering

secure access announcement and some links; see the "Converting your email client for secure access" link
http://www.ee.duke.edu/~cec/security/
http://www.ee.duke.edu/~cec/security/secure-mail.html

Home page, Sean O'Connell, Institute of Statistics and Decision Sciences

lots of interesting pages and links; see the "ISDS security pages" link, and don't miss the bookmarks
http://www.stat.duke.edu/~sto/
http://www.stat.duke.edu/~sto/security/
http://www.stat.duke.edu/~sto/bookmarks.html

System Adminstration Documentation, Hunter Matthews, Biology

notes about system layout and installation methodology
http://www.biology.duke.edu/computer/unix/admin.html

Toolman Home Page, Daniel Singer, Computer Science

articles about software tools, and accompanying scripts
http://www.cs.duke.edu/toolman/

[top of page]

Internet and network system resources

IANA Home Page

Internet Assigned Numbers Authority
http://www.iana.org/

ICANN Home Page

The Internet Corporation for Assigned Names and Numbers
http://www.icann.org/

IETF Home Page

The Internet Engineering Task Force
http://www.ietf.org/

InterNIC - The Internet's Information Center

public information regarding Internet domain name registration services
http://www.internic.net/

CAIDA - Cooperative Association for Internet Data Analysis

``...a collaborative undertaking among organizations in the commercial, government, and research sectors aimed at promoting greater cooperation in the engineering and maintenance of a robust, scalable global Internet infrastructure...''
http://www.caida.org/

Cisco Systems In A Nutshell

Site with mindboggling amount of Cisco and Internet info and links
http://www.iponeverything.net/cisco.shtml/

DomainSurfer

Domain name search engine; eg, look up domain names that contain the string "duke"
http://www.domainsurfer.com/

DomainWatch

Look up domain whois info.
http://www.domainwatch.com/

[top of page]

OS-specific resources

BSD

The FreeBSD Project

http://www.freebsd.org/

The OpenBSD Project

http://www.openbsd.org/

The NetBSD Project

http://www.netbsd.org/

Linux

DULUG

Duke University Linux Users Group
http://www.dulug.duke.edu/

Linux@DUKE

Linux@DUKE Resource Site
http://linux.duke.edu/

Linux@Duke

Resources for Linux users at Duke
http://linux.duke.edu/

TriLUG

Triangle Linux Users Group
http://www.trilug.org/

NCSU LUG

N.C.S.U. Linux Users Group
http://www.linux.ncsu.edu/

UNC Metalab Linux Archive

http://metalab.unc.edu/pub/Linux/

Bastille Linux

Linux hardening project
http://www.bastille-linux.org/

Netfilter

Firewalling, NAT and packet mangling for Linux
http://www.netfilter.org/

The Gelato Federation

``Gelato is a worldwide consortium focused on enabling open source Linux-based Itanium computing solutions for academic, government, and industrial research.''
http://www.gelato.org/

Groklaw

``well-maintained and comprehensive guide to what's going on day-to-day surrounding the SCO controversy''
http://www.groklaw.net/

LDP

The Linux Documentation Project
http://www.tldp.org/

LKAP

Linux Kernel Auditing Project (defunct)
http://www.lkap.org/

LSAP

Linux Security Audit Project
http://www.lsap.org/

OSAIA

Open Source And Industry Alliance
http://www.osaia.org/

OSDL

Open Source Development Labs - ``dedicated to accelerating the growth and adoption of Linux in the enterprise''; home of L.T.
http://www.osdl.org/

OSSI

The Open-Source Software Institute - ``to promote the development and implementation of open-source software solutions within U.S. Federal and State government agencies and academic entities''
http://www.oss-institute.org/

LSB

Linux Standard Base Project
http://www.linuxbase.org/

OpenLinux

OpenLinux.Org - open source projects
http://www.openlinux.org/

United Linux

``UnitedLinux is a standards-based Linux operating system targeted at the business user. It is developed, marketed and sold by an experienced partnership of Linux companies.''
http://www.unitedlinux.com/

Mac OS X

Duke-Mac-Doc

Mac OS X Deployment Documentation for the Duke Community
http://www.oit.duke.edu/mac/

Apple Computer

http://www.apple.com/

Apple - Mac OS X

http://www.apple.com/macosx/

MACOSXLABS.ORG

Mac OS X Deployment in Higher Education
http://macosxlabs.org/

Solaris

Sun Solaris product page

http://www.sun.com/software/solaris/

Sun Security Toolkit

JumpStart Architecture and Security Scripts (JASS)
http://www.sun.com/software/security/jass/

SunSolve Online

``SunSolve Online is an informational and patch database service.''
http://sunsolve.sun.com/

SunSolve /ETC

``an online "magazine" with lots of little faq pages and other goodies'' --Sean O'Connell
http://sunsolve.sun.com/etc

docs.sun.com

read, browse, search, and print Sun product documentation
http://docs.sun.com/

Solaris TechTarget site

Solaris news, links, and search, etc. (TechTarget sub-site)
http://www.searchsolaris.com/

PatchReport (and FTP access)

Joe Shamblin's automated patch analyzer, retriever, installer
http://cgi.cs.duke.edu/~wjs/patchreport/patchreport.html
ftp://ftp.cs.duke.edu/pub/PatchReport/index.html

Solaris Freeware

Solaris binaries, useful links
http://www.sunfreeware.com/

YASSP: Yet Another Solaris Security Package

a Solaris hardening project
http://www.yassp.org/ (was: http://yassp.parc.xerox.com/)

[top of page]

Software

Free Software Foundation

The GNU (Gnu's Not Unix) Project and FSF - lots of useful software
http://www.fsf.org/ or http://www.gnu.org/

Internet Software Consortium

The ISC ``is a not-for-profit corporation dedicated to developing and maintaining production quality Open Source reference implementations of core Internet protocols.''
http://www.isc.org/

DULUG Mirrors

Mirrors of various software packages, including some Linux distros
http://mirror.dulug.duke.edu/

See also: OS-specific resources

[top of page]

Organizations

USENIX

The Advanced Computing Systems Association
http://www.usenix.org/

SAGE

System Administrators Guild, part of USENIX
http://www.sage.org/

NC*SA

North Carolina System Administrators group
http://www.ncsysadmin.org/

See also: Security resources

[top of page]

Publications

;login: magazine

the USENIX Association magazine
http://www.usenix.org/publications/login/

SysAdmin Magazine

``the journal for UNIX systems administrators''
http://www.sysadminmag.com/

Server/Workstation Expert magazine (formerly Sun-Expert)

``Server-Based Computing Solutions''
http://swexpert.com/

UNIX Review (what's left of it)

was UNIX Review, then was Performance Computing, then got yanked, but there are still some new articles
http://www.unixreview.com/

Son of Devil's Advocate

where Stan Kelly-Bootle went (when Performance Computing died)
http://www.sarcheck.com/skb/

Yahoo!

Yahoo's UNIX magazine page
http://dir.yahoo.com/Computers_and_Internet/Software/Operating_Systems/Unix/Magazines/

O'Reilly & Associates

``computer books, conferences, software, online publishing''
http://www.oreilly.com/

[top of page]

Mailing lists

Duke Sysadmins group: duke-sysadmins@cs.duke.edu

the Duke Univ. system administrators group
http://www.cs.duke.edu/duke-sysadmins/

Arts & Sciences Network Administrators: asna@aas.duke.edu

Arts & Sciences Network Administrators
http://www.aas.duke.edu/comp/asna/asna.what.html

A&S unixgroup

Arts & Sciences group for weekly UNIX issues and discussion
https://aas.duke.edu/mailman/listinfo/unixgroup

CLAC: clac@lists.phy.duke.edu

Campus Lan Admistrators Consortium
Mailman list, go to:
https://lists.phy.duke.edu/mailman/listinfo/clac

CLIF: clif@mailman.mc.duke.edu

CSN LAN Information Forum
http://clif.mc.duke.edu/

DukeNet Announce: dukenet-announce@duke.edu

Network Admin Advisories
majordomo list:
echo "subscribe dukenet-announce your.email.addr" | /bin/mail majordomo@duke.edu

Duke I.T. Security: it-security@duke.edu

the D.U. Information Technology Security mailing list
majordomo list:
echo "subscribe it-security your.email.addr" | /bin/mail majordomo@duke.edu

DULUG: D.U. Linux Users Group

various lists; Mailman software
http://lists.dulug.duke.edu/mailman/listinfo

CERT

various lists, including the CERT Advisory Mailing List
http://www.cert.org/contact_cert/certmaillist.html

US-CERT

National Cyber Advisory System, various lists
http://www.us-cert.gov/cas/

SANS Institute

"Computer Security Newsletters and Digests", various lists
http://www.sans.org/newsletters/

SAGE

System Administrators Guild (USENIX Assoc.), various lists; majordomo
http://sageweb.sage.org/resources/maillists/

VulnWatch: Vulnerability Disclosure List

computer security vulnerability disclosure announcements mailing list
http://www.vulnwatch.org/subscribe.html

Neohapsis Archives

Not a mailing list, but an archive of many security and OS mailing lists
http://archives.neohapsis.com/

[top of page]

Miscellaneous

Country Codes

official list of ISO 3166 country codes, as used in domain names
http://www.iso.ch/iso/en/prods-services/iso3166ma/02iso-3166-code-lists/list-en1.html

RFCs

``Request for Comments (RFC) Editor Homepage''
http://www.rfc-editor.org/

WSSN - World Standards Services Network

links for international, regional, and national standardization organizations
http://www.wssn.net/WSSN/

Open Directory Project - Computers

(DMOZ) Resource directory
http://dmoz.org/Computers/

About - Computing & Technology

Articles on many computing topic
http://home.about.com/compute/

Data Center Markup Language

vendor-neutral, open language to describe data center environments, dependencies, policies
http://www.dcml.org/

Jargon File Resources

Eric S. Raymond's WWW jargon and New Hacker's Dictionary pages
http://www.catb.org/~esr/jargon/

G E E K T O O L S

mostly web interfaces for various Internet lookups, like `whois'
http://www.geektools.com/

Internet FAQ Consortium

Usenet FAQ's, RFC's, FYI's, STD's, BCP's, etc.
http://www.faqs.org/

NIST

National Institute of Standards and Technology
http://www.nist.gov/

UNIX Rosetta Stone

``A Sysadmin's Unixersal Translator''
http://bhami.com/rosetta.html

UNIX Systems Home Page

various UNIX information and resources
http://www.unix-systems.org/

TechTarget

``The most targeted IT media'', various specialized sites
http://www.techtarget.com/

Unix Web Rings

Various self-ascribed UNIX- and sysadmin-related sites
http://dir.webring.com/rw?d=Computers___Internet/Operating_Systems/Unix

Webopedia

``Online Computer Dictionary for Internet Terms and Technical Support''
http://www.webopedia.com/

whatis.com

I.T. encyclopedic definition/topics and a number of quick-reference pages (TechTarget sub-site)
http://www.whatis.com

[top of page]