Master of Science in Internet Engineering

Internet Technologies II

Resources

Security

• General
  • CERT
  • DoE CIAC
  • COAST/CERIAS at Purdue (see especially the references under http://www.cerias.purdue.edu/hotlist/
  • Security Focus
  • SANS
  • NIST
  • Packetstorm
  • NRC Comm. on Information Systems Trustworthiness, Trust in Cyberspace. 1999.
  • Ross Anderson, Security Engineering. Wiley. 2001. 0471389226.
  • Bruce Schneier, Secrets and Lies. Wiley. 2000. 0471253111.
• Firewall
  • FAQs
    • Firewall FAQ
  • Resource listings
    • SANS
    • CERIAS/COAST
    • Infosyssec
  • Papers
    • Gary Smith, "A Brief Taxonomy of Firewalls"
    • NIST, Guidelines on Firewalls and Firewall Policy (NIST Special Publication 800-41 1/02) [= PDF]
  • Implementations
    • Netfilter
      • Netfilter packet filtering how-to
      • IPtables tutorial
      • Linuxguruz IPtables resources
  • Elizabeth Zwicky, et al., Building Internet Firewalls. Second edition. O'Reilly. 2000. 1565928717.
• Intrusion Detection
  • FAQs
    • IDS FAQ [Robert Graham]
    • SANS IDS FAQ
  • Resource listings
    • IDS catalog [Michael Sobirey]
    • Security Focus (see especially http://www.securityfocus.com/cgi-bin/ids_topics.pl)
    • Docshow.net
    • SANS
  • Papers
    • NFR (Network Flight Recorder) documents
    • John McHugh, et al., "The Role of Intrusion Detection Systems" (IEEE Software 9-10/00) [= PDF]
    • NIST, Intrusion Detection Systems (NIST Special Publication 800-31 8/01) [= PDF]
    • Julia Allen, et al. State of the Practice of Intrusion Detection Technologies (CERT Technical Report 99-TR-028 1/00) [= PDF]
  • Implementations
    • Snort
    • Lids
    • ACID
  • Stephen Northcutt, Network Intrusion Detection. New Riders. 2000. 0735710082.
  • Honeypots
    • "Honeypots: Definitions and Values of Honeypots"
    • Honeynet Project
    • The Honeynet Project, ed., Know Your Enemy. Addison-Wesley. 2001. 0201746131.
  • Forensics
    • The Coroner's Toolkit
• Cryptography
  • FAQs, Introductions, Tutorials
    • ssh.com Cryptography A-2-Z
    • RSA labs Crypto FAQ
    • sci.crypt Crypto FAQ
    • Crypto tutorial (Peter Gutmann)
    • Netscape/IPlanet Intro to public key crypto
  • Resource listings
    • Counterpane labs documents
    • Crypto links (Ron Rivest)
    • Crypto links (Peter Gutmann)
  • Policy
    • Bureau of Export Administration encryption controls
    • NRC Comm. to Study National Cryptography Policy, Cryptography's Role in Securing the Information Society. 1996.
    • (International) crypto law
    • Cryptome
    • Whitfield Diffe and Susan Landau, Privacy on the Line. MIT. 1998. 0262541009.
  • IPsec
    • IETF IPsec working group
    • Timestep/Alcatel, "Understanding the IPsec protocol suite" [= PDF]
    • Implementations
      • FreeS/WAN
  • SSL/TLS
    • Netscape/Iplanet Intro to SSL (see also the SSL v. 3 spec)
    • IETF TLS working group (see RFC 2246, "The TLS Protocol Version 1.0")
    • OpenSSL
    • mod_ssl
    • Stunnel
    • Peter Druschel, et al., "Performance Analysis of TLS Web Servers" [= Postscript]
    • George Apostolopoulos, et al., "Transport Layer Security: How Much Does it Really Cost?"
    • Eric Rescorla, SSL and TLS: Designing and Building Secure Systems. Addison-Wesley. 2000. 0201615983.
  • Steven Levy, Crypto. Penguin. 2002. 0140244328. [non-technical]
  • Alfred Menezes, et al., Handbook of Applied Cryptography.
  • Bruce Schneier, Applied Cryptography. Second edition. Wiley. 1995. 047117099.
• VPN
  • Resource listings
    • VPN Labs
    • VPN Consortium
    • VPN links (Tina Bird)
    • VPN references (Raj Jain)
    • FirstVPN VPN links
    • NWFusion VPN links
  • Papers
    • "What is a VPN?" (Paul Ferguson and Geoff Huston) [= PDF]
    • Microsoft VPN whitepapers (see especially W2K VPNs)
    • IBM Guide to VPNs, v. 1: IBM Firewall, Server and Client Solutions (IBM Redbook SG-245201)
    • IBM Guide to VPNs, v. 3: Cross-Platform Key and Policy Management (IBM Redbook SG-245309)
    • Cisco "VPN Solutions"
• Web security
  • WWW Web Security FAQ
  • Kevin Fu, et al., "Dos and Don'ts of Client Authentication on the Web"
  • Simson Garfinkel, et al., Web Security, Privacy, and Commerce. Second edition. O'Reilly. 2002. 0596000456.
• Linux security
  • Linuxsecurity.com
  • comp.os.linux.security FAQ
  • "No Such Agency" Linux

Distributed web systems

• Caching
  • Resource listings
    • Web-cache.com
    • Web-caching.com
  • Implementations
    • Squid
  • Duane Wessels, Web Caching. O'Reilly. 2001. 156592536X.
• Replication: CDNs
  • Papers
    • Jeff Chase and Michael Rabinovich, "Web Caching and Content Distribution: A View from the Inside" [= Postscript]
    • Krishnamurthy, Wills, and Zhang, "On the Use and Performance of Content Distribution Networks" [= PDF]
    • Jussi Kangasharju, et al., "Performance Evaluation of Redirection Schemes in Content Distribution Networks" [= gz'd Postscript]
    • Jussi Kangasharju, et al., "Object Replication Strategies in Content Distribution Networks" [= gz'd Postscript]
    • Kirk Johnson, et al., "The Measured Performance of Content Distribution Networks" [= PDF]
    • A. Shaikh, et al., "On the Effectiveness of DNS-based Server Selection" [= PDF]
    • Jaeyeon Jung, et al., "DNS Performance and the Effectiveness of Caching" [= PDF]
  • CDN mailing list
• Web performance
  • Web Polygraph
  • Krishnamurthy and Rexford, Web Protocols and Practice. Addison-Wesley. 2001. 0201710889.
• Load balancing
  • Resource listings
    • Dmoz load balancing listings
    • Lbdigest.com
  • Papers
    • Jeff Chase, "Server Switching: Today and Tomorrow" [= PDF]
    • A. Acharya, et al., "Scalable Web Request Routing with MPLS" [= PDF]
    • Arun Iyengar, et al., "High-Performance Web Site Design Techniques" [= PDF]
    • Arun Iyengar, et al., "Engineering Highly Accessed Web Sites for Performance" [= PDF]
    • Arun Iyengar, et al., "Engineering Server-Driven Consistency for Large Scale Dynamic Web Services" [= PDF]
  • Implementations
    • LVS (Linux Virtual Server)
    • Ultramonkey
    • Supersparrow (see "Globally Distributed Content (Using BGP to Take Over the World)")
    • Eddie
  • Tony Bourke, Server Load Balancing. O'Reilly. 2001. 0596000502.
• Distributed Systems Courses and References
  • Distributed Systems (UNC COMP 243. Fall '01. Don Smith)
  • Distributed Information Systems (Duke CPS 212. Fall '00. Jeff Chase)
  • Distributed Systems (Stanford CS 244B. Spring '01. Peter Danzig)
  • Webbib

P2P

• Resources
  • OpenP2P.com
  • UMass CMPSCI 791N (Seminar in Peer-peer and Application-level Networking)
  • Cypherspace distributed systems links
  • Yahoo file sharing listings
  • Dmoz file sharing listings
• Papers
  • Steve Gribble, et al., "A Measurement Study of Peer-to-Peer File Sharing Systems" [= PDF]
  • Steve Gribble, et al., "What Can Peer-to-Peer Do for Databases, and Vice Versa?" [= PDF]
  • Steve Bellovin, "Security Aspects of Napster and Gnutella"
  • Matei Ripeanu, "Peer-to-Peer Architecture Case Study: Gnutella Network" [= PDF]
  • P. Raghavan, et al., "Building Low-Diameter P2P Networks". 2001. [= PDF]
  • Adar and Huberman, "Free Riding on Gnutella" 2000. [= PDF]
  • Philippe Golle, et al., "Incentives for Sharing in Peer-to-Peer Networks". 2001. [= PDF]
  • Justin Chapweske, "HTTP Extensions for a Content-Addressable Web"
  • Sylvia Ratnasamy, et al., "A Scalable Content-Addressable Network" [= PDF]
  • Amos Fiat and Jared Saia, "Censorship Resistant Peer-to-Peer Content Addressable Networks" [= Postscript]
• Implementations
  • Freenet
  • JXTA
  • Grapevine
• Andy Oram, ed., Peer-to-Peer: Harnessing the Power of Disruptive Technologies. O'Reilly. 2001. 059600110X.