Resources

This web site contains information primarily for U of M Information Technology staff.  For students, faculty and other staff see Safe Computing and 1-HELP.

Contents:

• By Operating System - Macintosh, Unix, Windows
• Security Topics & Checklists -
• • Cable/DSL, Compromised Hosts, Databases, Desktops/Workstations, Firewalls, Printers, Routers, Web Applications & Web Servers, Wireless
• Other Links

By Operating System - Macintosh, Novell, UNIX, Windows

Macintosh

• Basic Security Guidelines for Mac OS X Desktop Computers - U of M
• Basic Security Guidelines for Mac OS X Leopard Desktop Computers (DRAFT) - U of M
• Mac OS X Security Configuration (for 10.5 Leopard) - Apple
• Macintosh Security - SecureMac
• Presentations:
  • Mac OS X Security Recommendations (PDF) - Alan Amesbury, U of M

UNIX

• Linux
• • Linux - SANS step-by-step guide
  • • Part 1 (PDF)
    • Part 2 (PDF)
• Solaris
• • Solaris 10 Benchmark v4.0 (PDF) - CIS
  • Solaris (PDF) - SANS step-by-step guide
  • Sun provides the following guidelines for securing a Sun Solaris system.
  • • Solaris 10 Security Controls (PDF)
    • Operating Environment Network Settings for Security (PDF)
• Miscellaneous UNIX
• • Sendmail Configuration Presentation (PDF) - Paul Dokas, U of M

Windows

• Windows TechNet Security Center - Microsoft (includes Security Bulletin Search, Security Tools, Security Guides and Checklists)
• Windows Vista
• • Basic Security Guidelines for Windows Vista - U of M
  • Security Recommendations on the Initial Release of Windows Vista - U of M
• Windows XP
• • Basic Security Guidelines for Windows XP/2000 Desktop Computers - U of M
  • How to Run as User (PDF) - University of Michigan
  • Securing Windows 2000 - SANS Version 1.5 (PDF) - SANS step-by-step guide Excellent!
  • Windows 2000 Vulnerabilities & Solutions (PDF) - SANS
  • Windows XP Installation Security Checklist - LabMice.net
  • Presentations:
  • • Secure W2K Domain Controller Configuration (PDF) - Eric Nordin, U of M
       

Security Topics & Checklists

Cable Modem/DSL

• Home Network Security - CERT
• Cable Modem/DSL Security - Navas Group

Databases

• Microsoft Access Database- 10 Tips
• Oracle - SANS step-by-step guide (PDF)
• SQL
  • Security and SQL Server - Microsoft
  • Best Practice Analyzer Tool for Microsoft SQL Server 2000 - Microsoft
  • SQL Server 2000 (SP3) Security Features and Best Practices - Microsoft
  • News Groups for SQL Servers - Microsoft

Desktop/Workstation

• Basic Security Guidelines for Mac OS X Desktop Computers - U of M
• Basic Security Guideline for Windows Vista - U of M
• Basic Security Guidelines for Windows XP/2000 Desktop Computers - U of M
• Safe Computing at U of M
• Computer Lab Security (PDF) - Virginia Commonwealth University
• Stay Safe Online - NCSA
• Computer Security- At Home and U - US CERT
• Tips Before Connecting to the Internet - US CERT
• Windows- How to Run as User (PDF) - University of Michigan

Firewalls

• Internet Firewall Tutorial (PDF) - Rob Pickering
• Router Firewall Security - eTutorials.org
• Firewalls, VPNs, and Intrusion Detection Systems in a University Environment - Educause

Hacked/Compromised Hosts

• How to Tell if you have been Hacked (PDF) - Paul Dokas, U of M
• Intrusion Discovery Cheat Sheet for Windows 2000/XP (PDF) - SANS Institute
• Intrusion Discovery Cheat Sheet for Linux (PDF) - SANS Institute
• What are telltale signs that a UNIX system has been compromised? - SANS Institute
• Rootkits - How Intruders Hide
• List of Trojan Horses (default ports used by Trojans) - Simovits Consulting

Printers

• Securing Multifunction Printers (MFP)- printing, copying, scanning & faxing devices - SANS
• Multifunction Printer Hardening Checklist - University of Texas at Austin
• Securing Print Servers on the Network - HP
• Securing HP Printers - University of California, Santa Cruz
• Securing HP Printer - University of New Mexico

Routers & Switches

• Cisco Router Security - Cisco Systems

Web Applications

• World Wide Web Security FAQ - Lincoln Stein
• Open Web Application Security Project (OWASP)
• Web Tips - Advosys Consulting
• Paper on Web Server Attack Signatures - cgisecurity.com

Web Servers

• Apache
• • Securing Apache Step by Step - Security Focus
  • Securing Apache 2 Step by Step - Security Focus
  • Securing Apache - Linux.com
• Microsoft IIS
• • IIS 6.0 Technical Resources - Microsoft
  • Securing IIS 5.0 Resource Guide - Microsoft
  • Securing IIS 4.0 Resource Guide - Microsoft
  • Security Guidance for IIS - Microsoft
  • Securing IIS Servers - WindowsSecurity.com
  • IIS Security Checklist - University of Washington
  • IIS Security Checklist - Stanford University
• PHP
• • Securing PHP - Hardened-PHP Project
• robots.txt- Risks & Alternatives (PDF) - Ben Allen, U of M

Wireless

• Wireless Networking Standards
• Tips for Configuring Wireless Networks for Workgroups/Conferences

Other Links

• SANS/FBI Top Twenty Vulnerabilities - SANS Institute & FBI
• SANS Information Security Training - SANS Institute
• Computer Security Presentations
• Credit Card - VISA CISP Program
• Critical Server Identification
• Definition of Critical Servers
• Mail Servers-Relays
• Password Attack Discussion and Benchmarks - Alan Amesbury, U of M
• Self Assessment Checklist
• Spam
• U of M Technical Listservs
• Common Port Number Assignments
• • IANA
  • Network Ice Corporation

For security tools, see the OIT Security Tools web page.